0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) [ 2176.351605] hub 9-0:1.0: USB hub found [ 2176.414242] hub 9-0:1.0: 8 ports detected 03:34:33 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x4010, 0xffffffffffffffff, 0x59b7d000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 03:34:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:33 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2176.486818] FAULT_INJECTION: forcing a failure. [ 2176.486818] name failslab, interval 1, probability 0, space 0, times 0 [ 2176.543030] CPU: 1 PID: 1001 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2176.550849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2176.560198] Call Trace: [ 2176.562789] dump_stack+0x1b2/0x283 [ 2176.566425] should_fail.cold+0x10a/0x154 [ 2176.570578] should_failslab+0xd6/0x130 [ 2176.574555] kmem_cache_alloc+0x28e/0x3c0 [ 2176.578706] __kernfs_new_node+0x6f/0x470 [ 2176.582855] kernfs_new_node+0x7b/0xe0 [ 2176.586740] kernfs_create_dir_ns+0x3c/0x130 [ 2176.591147] internal_create_group+0xea/0x7e0 [ 2176.595647] lo_ioctl+0x1108/0x1c00 [ 2176.599277] ? loop_clr_fd+0xac0/0xac0 [ 2176.603166] blkdev_ioctl+0x91d/0x17c0 [ 2176.607053] ? blkpg_ioctl+0x8d0/0x8d0 [ 2176.610942] ? trace_hardirqs_on+0x10/0x10 [ 2176.615187] block_ioctl+0xd9/0x120 [ 2176.618810] ? blkdev_fallocate+0x3a0/0x3a0 [ 2176.623122] do_vfs_ioctl+0x75a/0xfe0 [ 2176.626905] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2176.632524] ? ioctl_preallocate+0x1a0/0x1a0 [ 2176.636922] ? security_file_ioctl+0x76/0xb0 [ 2176.641312] ? security_file_ioctl+0x83/0xb0 [ 2176.645700] SyS_ioctl+0x7f/0xb0 [ 2176.649046] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2176.653011] do_syscall_64+0x1d5/0x640 [ 2176.656894] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2176.662066] RIP: 0033:0x45c937 [ 2176.665241] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2176.672933] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2176.680190] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 03:34:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) recvmmsg(0xffffffffffffffff, &(0x7f0000007940), 0x55, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000440)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2176.687446] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2176.694693] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2176.701952] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb259}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2176.736541] hub 9-0:1.0: USB hub found [ 2176.751804] hub 9-0:1.0: 8 ports detected 03:34:33 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2176.879165] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:33 executing program 2 (fault-call:2 fault-nth:14): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) 03:34:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x334480, 0x0) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000440)={0xff, "d42ba226d4d1057afb5391043360b0a4c79836a63468885229ab6ee95bfc21d7", 0x4, 0x3, 0x7f, 0x2, 0x1}) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273777036000000180002001400020020010000faffffff00000000000000000730714119d9c8cb81ad489ad4"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2177.006868] hub 9-0:1.0: USB hub found [ 2177.050047] FAULT_INJECTION: forcing a failure. [ 2177.050047] name failslab, interval 1, probability 0, space 0, times 0 [ 2177.051655] hub 9-0:1.0: 8 ports detected [ 2177.071410] CPU: 1 PID: 1068 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2177.079214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2177.088559] Call Trace: [ 2177.091149] dump_stack+0x1b2/0x283 [ 2177.094783] should_fail.cold+0x10a/0x154 [ 2177.098936] should_failslab+0xd6/0x130 [ 2177.102915] kmem_cache_alloc+0x28e/0x3c0 [ 2177.107065] __kernfs_new_node+0x6f/0x470 [ 2177.111213] kernfs_new_node+0x7b/0xe0 [ 2177.115103] __kernfs_create_file+0x3d/0x320 [ 2177.119514] sysfs_add_file_mode_ns+0x1e1/0x450 [ 2177.124187] internal_create_group+0x23b/0x7e0 [ 2177.128773] lo_ioctl+0x1108/0x1c00 [ 2177.132398] ? loop_clr_fd+0xac0/0xac0 [ 2177.136282] blkdev_ioctl+0x91d/0x17c0 [ 2177.140167] ? blkpg_ioctl+0x8d0/0x8d0 [ 2177.144051] ? trace_hardirqs_on+0x10/0x10 [ 2177.148292] block_ioctl+0xd9/0x120 [ 2177.151920] ? blkdev_fallocate+0x3a0/0x3a0 [ 2177.156237] do_vfs_ioctl+0x75a/0xfe0 [ 2177.160037] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2177.165662] ? ioctl_preallocate+0x1a0/0x1a0 [ 2177.170082] ? security_file_ioctl+0x76/0xb0 [ 2177.174485] ? security_file_ioctl+0x83/0xb0 [ 2177.178895] SyS_ioctl+0x7f/0xb0 [ 2177.182263] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2177.186236] do_syscall_64+0x1d5/0x640 [ 2177.190131] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2177.195312] RIP: 0033:0x45c937 [ 2177.198496] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2177.206196] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2177.213459] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2177.220731] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2177.227988] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2177.235248] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 [ 2177.284767] hub 9-0:1.0: USB hub found [ 2177.295250] hub 9-0:1.0: 8 ports detected 03:34:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x4a002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000080)=ANY=[@ANYBLOB="51034d"], 0x1}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080), 0x10) getpid() 03:34:34 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(0x0, 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2177.341007] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0x816) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES64, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000", @ANYRES16=r0], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x8000) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb259}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003200)=[{&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0xfffffff9, @ipv4={[], [], @multicast2}, 0x3ff}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000200)="43ec97402bfeb7b71dd97f022c6234519cd1ff92ffcc3c282e5f6e34c9944aba8e59ed1d9160b4288c1550dfd204fed16a6edcedfdc861a388130287af15b4", 0x3f}, {&(0x7f00000017c0)="34d23960506311c8ea87129f35b7e46d3b7600b0d46d40ef58691700917644949bd76eead9224e20ad3e46472f05d8e7f308342d7385736dc6aede469ccff5395cc8b05f04a32ea9d0daabb1a8a04649df0647a5beeced1bf6c1c38fdea83208b7e60aeaca1dad56d9a8e9826612f34b99716c2ca9c8591a43d0360d11d56f3f57dea63f1c4e18fd8acaaa9b67a5a4dcf97103d9c081a2885517a6223d42095a74ac32b840dd19ca49b43296d85ba1655f0b0a3502128a", 0xb7}, {&(0x7f0000001880)="2f36e657d90b0aff397de7358e8af7553ddc8c4f18dd192a7458d57d8cc97aa3c9a50c4f626e27da78bce85f430d95236f474f3474f83d38d681fb26f1eae6028fc1dc62f35a20e1975b31aca9e224927f76b1ac4b9c9dacd63ace36164044c3b1275b94ecee4bca76fd68703af5694488d4e38e417eeeb589876a92b058f414316317166c00f4f90f1b8f85984579d066deba193b829714049c2152e821db403eb9e8b0cd39f75ebda2a4149eb42662c4ce4afe573f03d7260c1f402de567a76ca66b0887ac60cf456e24785211f80382755dc8a800f550868b6543a340ecc36c3601fb", 0xe4}, {&(0x7f0000001980)="221719774bfb3a5fa9159c1135d2dcf858661ec9b9bc22e812c960b193bb31a7b3e76046c78de099ba0e99026569c0292635e74bd748fca9b2437329679b0ddcd906830ec7e8294ec6f79242c07510c45a29a46cb12f8bb0d392563d6d936363832a22b710afa8be735d910c19138700ce85ab25f6d95e4c86b626b5f599e3ddc8aa8df2ec0f95437126e579f765ec814a97b32696d0a82933d9d38e71e72f9c80153daff7a701", 0xa7}, {&(0x7f00000003c0)="2f35828548eef2c270bf18999acd28e51a993bd17055d07454", 0x19}, {&(0x7f0000000440)="d3a9eedf7470cc1e08b0f70f910fe403f71e3e6355448f93f217", 0x1a}, {&(0x7f0000000480)}, {&(0x7f0000000540)="db23adee9cab43f07ab494fcb9f398e518bfd6491e45530104c8a5b08b2f94ec741a977415d64745e46beec8d6066466f1fb2239f445443e89c20343303b760f95cbd1953073a4de55a213e091299fe1d0b1cfc81f6e72a4c09ed066513563d4d3", 0x61}, {&(0x7f0000001a40)="aa18cd43947fe0b2c705b0503e41f4e834d44c1beabdf7126981867b783fe3696ab2ded3f36f6eb92c35419da98ceeaa43e8e6241d86394c6ce1b480d0b389624375ced2b30d5221800b7fb58a", 0x4d}], 0xa, &(0x7f0000001b80)=[@authinfo={0x18, 0x84, 0x6, {0x1f}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x30, 0x4000}, {&(0x7f0000001bc0)=@in6={0xa, 0x4e20, 0x20, @loopback, 0xca91}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000001c00)="1c2b0b438b15735f965a163b095dbb69d326f5770249da6d3ca71347e4860e82a8a0f92c93dfc555f0541106b31843e474c4b08c3f8bdd5ee925b5033881d59918cd42d1de18b5c8b459505dc5a4803c4329906deaa5198d54bff183f39c844261e90f6371695c773d38780039fb", 0x6e}, {&(0x7f0000001c80)="e88105097bb0d9d3334525e817729911255ccc95d8a3c097348b4ea61c32ebb796fa2912", 0x24}, {&(0x7f0000001cc0)="e85691fa6aa72813432315dc233ea9648b09441afe6e107aa757cefff3c22236639b88ada852a64e44bc20984329b02a83f6fc8baa11dcaf8c14d52f48f4a80350309e58f3abec2be8f09e733141f454385eefb8979b67cda99295b9221349a1026058940fa5b0dd73af3173e9f7c74744e372548c61c8b536c6b9fd2f9aabb7d0bd4090326f493db36ad91b0ed2f204a0167aa2b9ccb6aa02bedda9233ae0fd1c0a844789386131d7363570a4d826aa", 0xb0}, {&(0x7f0000001d80)="4e3e09f12a698d214204f8eb5fb793cec12ae3ac303452bba052ee9c38cbb8153612868f9bb422ea3ed0d3447f252bd42343297605d321a1759dee9470b01d52", 0x40}, {&(0x7f0000001dc0)="1b3b3fc1b18b60814dbe580b496296eb019ed97f6c008e78f2e7d3214bd63fa830eb178754505233d47436203ab8bfddc3b28e87e8f89ed593d3062bbbf61f4d12451eab0d56fc18fd787fd1a11559eea55b903fdbdae09932eaf8386573a40e96a922fb5920faadb93438a2c8a2976a8fd63b63becbfabfbcd58faca4417b33c33717c01c12276ac87ad1a727e8225f14d5075847c47de424e4c4e6ef756c99fd1037bae9eb84b238bf9d1c3f81a523f11e1d04cf414905c9e3c4a500167066de8bb7252a52d99f9654f62566083316770e5675d1ac58775882b9cecfd71ee54c805729cabdea2c5bd9", 0xea}, {&(0x7f0000001ec0)}, {&(0x7f0000001f00)="09373bae4f7d1d962835d43632883c860eeac984ade0017b4c7e9666208b0c4e", 0x20}, {&(0x7f0000001f40)="82938fa3164a0118", 0x8}, {&(0x7f0000001f80)="06172744c76aed57a5a80547a7c4", 0xe}], 0x9, &(0x7f0000002080)=[@sndrcv={0x30, 0x84, 0x1, {0x8, 0x6, 0x8204, 0x0, 0x2, 0x2, 0x2, 0x6000}}], 0x30, 0x814}, {&(0x7f00000020c0)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000002280)=[{&(0x7f0000002100)="2754d67d7339550f37147f792119dd4d474e448bb6ec09ea9ed758ebc9b3b5b687585b83bc00e1713be43d20482115c02fc4ab7dd35ba174b82d35c1e8c118892d12c3ae8291d0991617ff6987743985bbb016dc6c9c96ca047fff118b51388e89826d5a532a636af853b31f90168fc4235614e08ea494ff7b93a1f219c4d4c71002b712403d46cb9da2096fe0866e803a1a67f0c45b5f8e553c82c9f951378f9030599255f91cb5640dcc3fc732519fc31f8e2ca32f924d62265b2aef4c9282f595fd6a763775c64123a6abe1b456915c47ef71614b63d2778fdcf7f66273e5b9fe4c8a6c7c9fb2627ed8f09c0ba0fd99", 0xf1}, {&(0x7f0000002200)="14048170c3eb39afabf298219f188dcac336b6faa6ac30c97f3db5b813203a95348f1d70", 0x24}, {&(0x7f0000002240)="06430c40d3a8af5bc0daeceab803e63b9764cbe2c2227f22c2a64a0d1819665b702d4f9a4135a4fac5eed1d1f6b9df22ddf839c5b3bb4536c8afc3", 0x3b}], 0x3, &(0x7f00000022c0)=[@sndrcv={0x30, 0x84, 0x1, {0x8000, 0xff, 0x1, 0x1, 0x1ff, 0xbf9, 0x1ff, 0x7ff}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @multicast1}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @authinfo={0x18}], 0x80, 0x20000000}, {&(0x7f0000002340)=@in={0x2, 0x20, @multicast2}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000002380)="1d5a2060747ea3c99eda08b00bbcab1ac212efeb85bc42aa", 0x18}], 0x1, &(0x7f0000002400)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}, @authinfo={0x18, 0x84, 0x6, {0x200}}, @sndrcv={0x30, 0x84, 0x1, {0x80, 0x1f, 0xb, 0x0, 0x1, 0x4, 0x7, 0x4}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x5}}, @sndrcv={0x30, 0x84, 0x1, {0xf8, 0x9, 0x800c, 0x2, 0x9, 0x1, 0x3, 0x6}}], 0xc0}, {&(0x7f00000024c0)=@in6={0xa, 0x4e24, 0xffffa325, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7088}, 0x1c, &(0x7f0000002500), 0x0, &(0x7f00000025c0)=[@sndrcv={0x30, 0x84, 0x1, {0x6, 0x7fff, 0x8, 0x9, 0x9, 0x7, 0x80000000, 0x8}}, @init={0x18, 0x84, 0x0, {0x7, 0x0, 0x2, 0xf290}}, @authinfo={0x18, 0x84, 0x6, {0x3}}], 0x60, 0x11}, {&(0x7f0000002640)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000002680)="533d5f0be898988c556e097f66bbf45e4099777dab0ed13e6380e7d83aa5f7477d36034ab38bd2325fd203bf76e51e26", 0x30}, {&(0x7f00000026c0)="3b7cc7ec3b484ff66ce0d66712b1f49816ec51c56d1f8c54855abc637377063b655bf80d003c997fa5a6121d5dc01852dd3aded95990e37f2ff6c0f077a197c6f4cbf680aa85bdea60e592aa524d80be21d37b4413de473b4e94bd5b04ba17b1d6d21baf2a3ab0362ce95f5f9c39e06ae746f9289c1f8c02bfbf9879eefc1d590fdaad0c7e063c9899e75ec54b3bdf4a638c504a24b65e306661", 0x9a}, {&(0x7f0000002780)="5a73f8f3d3851887033d4d7bf80c25e7b6918227343338d901ffe24f912c85dadf41d0486c370a598e", 0x29}, {&(0x7f00000027c0)="2c8f297e820f7cd2c3643f20b7f2a828ef502ebc354f949ad0332a3e16c68b7c2ddefcf160bfc8511060eec66371c14ae9252285ce71714f2977a588971b093f501fd15a96cc12f953", 0x49}, {&(0x7f0000002840)="d39b37d7265031c4f5f9942a75cee60cd5968d68c08fb0ca697e1d7b9ec0abeb0020f7fe2a9234a9d601eb2f85358f1742000f799dde50a58447b8989d34ff2c8c70d710eaf6fb8971bfe73979c608d27ab9fae0504bcc32e89044272c5228636c28553f09787e2a49579d0fbf9a8d6f8bc9264f20c3c4195aa1f3d4cdf12f4787ba31ad0d3b7e64a78a54eee653318ae0340fe247ee41cc0408425cd5b041315d32faae2def43b51167c2e51a35c053fb3339a8aa71763ecebee700ff5d7e3a7fe49115536291", 0xc7}, {&(0x7f0000002940)="ef5dad62d7f4f54e35f9cd2977bd6d811a7a9807135e8a99ba33339446565867b2e6c84c8badb8352011b85fd46d119655603a70d9b9b5e879c3b38870dde172a09a5b8219b3e2293a5a97ac80850255047dc30d5b3b7ade15f424b4eef064e0fcc8896fff0e6be8f932a421da", 0x6d}, {&(0x7f00000029c0)="4b9eba5768efe945c0855ebb0531411f83345f8a70487c83dcb8e65108ac7d0ad5d48a3e33275fcf3f549db3bf443823f59f203a5365fdeccdfc5127d63f429b35d7ed98f41d530bf81c10103b65b02195bfcb4e9bb504711b163fb78ecbe565ab28692a6610d11c82a4a0a3f2fbe4b5df147884db7be2935ee40e8d8c7c957c4e08de42d1dfdffef3f8412360735b28cdc2ae0cdb8577187d797319aeccb4a2d07badf7878e5326b49610e652d1316574ee00b18f169cd715b33f597bfde8db8fe61901258dad9a85b13d3d3ab4aee1dec29845ca6813b432a5", 0xda}, {&(0x7f0000002ac0)="f2ec5d4463fe", 0x6}, {&(0x7f0000002b00)="a68b512aabc669b6d496f0d5b0ed4c7102065a42d320a64faf2c320c28783562802d33e257c6a7a823522a741660e0ff0af28410a430169cfe5318d66ea55144e4b35a03081816fea511344ba2714b08bdec3700e44d7e28c3559f9360cb255486f4ebf78f86d1ad402ecbba0c7daf361d628496fb60b5bfad68b933f4ca7b2725dc81050c3a40ff8acc9f25ee71fde1c9ccfcd2f06cd5db8b28dd0b67a0e847a338d3685d8cb7d5d4328b0da36bb15da9064d13bc063dba144ffc9bb3dd536340a9c58bb5f27d55560891b7cedf8168c3", 0xd1}], 0x9, 0x0, 0x0, 0x90}, {&(0x7f0000002cc0)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000002e80)=[{&(0x7f0000002d00)="aac0aa1cda5421c1e6432f22b47b087295e2de1f17804a4ca4c98608e3b15f60dbbbf2c5d690981fdb841f532384d637ef1188ddc34bd60abd398dd61977ffb76212fb58b425ed98a03feb422c34b83f79b265e5f01995e783b63898150df70e9eed7459", 0x64}, {&(0x7f0000002d80)="6d1e0ef1af899d1853aa8ef859fdacc6e7d3e15cb4d33ee209bf1d28025fd9913c7f268f196938b1888ccd8512746c997bdee7e3", 0x34}, {&(0x7f0000002dc0)="f7df309d19be6412f7aa0294685715e7be0a60a12a6322995cb009219986afb10dff80c8fd46ba06e5347034248f34ccfa71090a79a597890568a2235e24f76ceedcaa0ec7e94e9258d45cbf044343bd63bb0231fae135ef53844507a89f784d960bb98839ce7abdc580a77b94d02fffa408b3b29fecedb9341fb4df85538328d7313f5890ebfb9cf762ca1d3d9fb6b06501", 0x92}], 0x3, &(0x7f0000003000)=[@init={0x18, 0x84, 0x0, {0x1, 0x3f, 0x102e, 0x3ff}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x4, 0x1, 0x5}}, @authinfo={0x18, 0x84, 0x6, {0x6ebb}}, @sndinfo={0x20, 0x84, 0x2, {0xfff, 0x8004, 0x101, 0xfffffc01}}], 0x70, 0x8081}, {&(0x7f0000003080)=@in6={0xa, 0x4e20, 0x401, @mcast1, 0xffffffff}, 0x1c, &(0x7f0000003180)=[{&(0x7f00000030c0)="acbeb5ea839e0dae50f20818faa0a27803ad7f9ced42248d1646a42b52a3e1ae83b223d5d953ee24dc132d62cf0d464d90c2997763c5a0a9168cff9deebcf8fac70279926d111b723b1face3bf8ad4af9b55b8f12f72c316af0c1a75cb13fd1c8cc9f9a0c3a80792f2fde40c11ffdbd9a92953ab22b4f2d803898f60cfaeae86eaeca14bab54b5e85efcfb8a4a04f495f732f26963e9f552fbad906d28f131ec9466d0f193823fd40c8f", 0xaa}], 0x1, &(0x7f00000031c0)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x40}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x8, 0x10000, 0x9}}], 0x38, 0x10}], 0x8, 0x40001) 03:34:34 executing program 2 (fault-call:2 fault-nth:15): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2177.415926] hub 9-0:1.0: USB hub found [ 2177.440243] hub 9-0:1.0: 8 ports detected [ 2177.461553] FAULT_INJECTION: forcing a failure. [ 2177.461553] name failslab, interval 1, probability 0, space 0, times 0 [ 2177.500674] CPU: 1 PID: 1096 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2177.508493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2177.517848] Call Trace: [ 2177.520438] dump_stack+0x1b2/0x283 [ 2177.524077] should_fail.cold+0x10a/0x154 [ 2177.528229] should_failslab+0xd6/0x130 [ 2177.532203] kmem_cache_alloc+0x28e/0x3c0 [ 2177.536351] __kernfs_new_node+0x6f/0x470 [ 2177.540497] kernfs_new_node+0x7b/0xe0 [ 2177.544384] __kernfs_create_file+0x3d/0x320 [ 2177.548793] sysfs_add_file_mode_ns+0x1e1/0x450 [ 2177.553465] internal_create_group+0x23b/0x7e0 [ 2177.558057] lo_ioctl+0x1108/0x1c00 [ 2177.561685] ? loop_clr_fd+0xac0/0xac0 [ 2177.565570] blkdev_ioctl+0x91d/0x17c0 [ 2177.569452] ? blkpg_ioctl+0x8d0/0x8d0 [ 2177.573337] ? trace_hardirqs_on+0x10/0x10 [ 2177.577581] block_ioctl+0xd9/0x120 [ 2177.581206] ? blkdev_fallocate+0x3a0/0x3a0 [ 2177.585514] do_vfs_ioctl+0x75a/0xfe0 [ 2177.589306] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2177.594927] ? ioctl_preallocate+0x1a0/0x1a0 [ 2177.599349] ? security_file_ioctl+0x76/0xb0 [ 2177.603757] ? security_file_ioctl+0x83/0xb0 [ 2177.608161] SyS_ioctl+0x7f/0xb0 [ 2177.611522] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2177.615498] do_syscall_64+0x1d5/0x640 [ 2177.619388] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2177.624572] RIP: 0033:0x45c937 [ 2177.627756] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2177.635459] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2177.642724] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2177.649989] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a 03:34:34 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(0x0, 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2177.657253] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2177.664522] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 [ 2177.698320] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:34 executing program 2 (fault-call:2 fault-nth:16): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2177.766060] hub 9-0:1.0: USB hub found [ 2177.773839] hub 9-0:1.0: 8 ports detected [ 2177.853536] FAULT_INJECTION: forcing a failure. [ 2177.853536] name failslab, interval 1, probability 0, space 0, times 0 03:34:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) [ 2177.927343] CPU: 1 PID: 1117 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2177.935161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2177.944506] Call Trace: [ 2177.947097] dump_stack+0x1b2/0x283 [ 2177.950740] should_fail.cold+0x10a/0x154 [ 2177.954892] should_failslab+0xd6/0x130 [ 2177.958864] kmem_cache_alloc+0x28e/0x3c0 [ 2177.963013] __kernfs_new_node+0x6f/0x470 [ 2177.967168] kernfs_new_node+0x7b/0xe0 [ 2177.971086] __kernfs_create_file+0x3d/0x320 [ 2177.975494] sysfs_add_file_mode_ns+0x1e1/0x450 [ 2177.980163] internal_create_group+0x23b/0x7e0 [ 2177.984758] lo_ioctl+0x1108/0x1c00 [ 2177.988387] ? loop_clr_fd+0xac0/0xac0 [ 2177.992277] blkdev_ioctl+0x91d/0x17c0 [ 2177.996160] ? blkpg_ioctl+0x8d0/0x8d0 [ 2178.000046] ? trace_hardirqs_on+0x10/0x10 [ 2178.004288] block_ioctl+0xd9/0x120 [ 2178.005442] hub 9-0:1.0: USB hub found [ 2178.007905] ? blkdev_fallocate+0x3a0/0x3a0 [ 2178.007928] do_vfs_ioctl+0x75a/0xfe0 [ 2178.007942] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2178.007952] ? ioctl_preallocate+0x1a0/0x1a0 [ 2178.007972] ? security_file_ioctl+0x76/0xb0 [ 2178.007982] ? security_file_ioctl+0x83/0xb0 [ 2178.007995] SyS_ioctl+0x7f/0xb0 [ 2178.031559] hub 9-0:1.0: 8 ports detected [ 2178.034350] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2178.034365] do_syscall_64+0x1d5/0x640 [ 2178.034383] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2178.034391] RIP: 0033:0x45c937 [ 2178.034396] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2178.034406] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 03:34:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x4000000000002d0, 0x0) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000440)={{0x3, @default}, [@default, @remote, @bcast, @remote, @remote, @remote, @rose, @netrom]}, &(0x7f00000003c0)=0x48) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 03:34:35 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(0x0, 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2178.034417] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2178.084644] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2178.091910] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2178.099174] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 [ 2178.228901] hub 9-0:1.0: USB hub found 03:34:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000140)={0x6, 0x2, 0x1, {0xd72a, 0x8, 0xffffffc0, 0x1}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="0003ab901cb105a98fdf1bca1ad251db86aa34391ef9c2378176440d5a4c6ccd691e54b3244fbfd7723b2bb23f401db0f7cc732a8500054d543a0c044be547d780178e1d7cd8a63e785cd9ebf43037", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2178.256822] hub 9-0:1.0: 8 ports detected [ 2178.290913] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:35 executing program 2 (fault-call:2 fault-nth:17): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) 03:34:35 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:35 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() capget(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x4, 0x5, 0x7, 0x40, 0x4, 0x1}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000200)) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000051000000300200008000000", @ANYRES32, @ANYBLOB="000000000000000072737670360000001800020016234e05f0fffffffffffeff0c00000000010000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2178.503724] FAULT_INJECTION: forcing a failure. [ 2178.503724] name failslab, interval 1, probability 0, space 0, times 0 [ 2178.530599] hub 9-0:1.0: USB hub found [ 2178.554292] hub 9-0:1.0: 8 ports detected [ 2178.568270] CPU: 0 PID: 1157 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2178.576082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2178.585430] Call Trace: [ 2178.588023] dump_stack+0x1b2/0x283 [ 2178.591655] should_fail.cold+0x10a/0x154 [ 2178.595812] should_failslab+0xd6/0x130 [ 2178.599783] kmem_cache_alloc+0x28e/0x3c0 [ 2178.603933] __kernfs_new_node+0x6f/0x470 [ 2178.608084] kernfs_new_node+0x7b/0xe0 [ 2178.611975] __kernfs_create_file+0x3d/0x320 [ 2178.615742] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 2178.616379] sysfs_add_file_mode_ns+0x1e1/0x450 [ 2178.631282] internal_create_group+0x23b/0x7e0 [ 2178.635868] lo_ioctl+0x1108/0x1c00 [ 2178.639493] ? loop_clr_fd+0xac0/0xac0 [ 2178.643381] blkdev_ioctl+0x91d/0x17c0 [ 2178.647264] ? blkpg_ioctl+0x8d0/0x8d0 [ 2178.651144] ? trace_hardirqs_on+0x10/0x10 [ 2178.655378] block_ioctl+0xd9/0x120 [ 2178.658999] ? blkdev_fallocate+0x3a0/0x3a0 [ 2178.663312] do_vfs_ioctl+0x75a/0xfe0 [ 2178.667118] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2178.672739] ? ioctl_preallocate+0x1a0/0x1a0 [ 2178.677153] ? security_file_ioctl+0x76/0xb0 [ 2178.681558] ? security_file_ioctl+0x83/0xb0 [ 2178.685958] SyS_ioctl+0x7f/0xb0 [ 2178.689321] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2178.693293] do_syscall_64+0x1d5/0x640 [ 2178.697180] entry_SYSCALL_64_after_hwframe+0x46/0xbb 03:34:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00005384e220e5e2cd0000000000007273767036000000180002001400020020010000faffffff00"], 0x48}}, 0x0) r1 = msgget(0x0, 0x308) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9000", @ANYRES16, @ANYBLOB="100029bd7000fd5bc4250c00000014000380060007004e210000060007004e20000008000600010000000c00018007000600736800003000018014000300e0000001000000000000000000000000060002006700000008000b0073697000060004004e23000008000500000000001c00028006000e004e20000006000b000200"/138], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8055}, 0x8011) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0x80, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x44801) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000300)=""/71) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000440)=""/166) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="d60a00002617e0ca7c67f211ff2f3ae534fdf2a44282ad8ffb62dae954055edfbb445e7860b17fb400204fff70c48faf07b40a295bd25ad8042d9a1d215e0c692fed0294f2d85b5b75c283ac86546052e42b6e17e505fa160625b964b207e3b8865bf1ed95d19884ac482efb6b660c9f3a50f6b5e4696b1f1874aefab5", @ANYRES16=0x0, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2178.702360] RIP: 0033:0x45c937 [ 2178.705543] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2178.713246] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2178.720512] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2178.727775] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2178.735035] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2178.742299] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) [ 2178.848197] hub 9-0:1.0: USB hub found [ 2178.858623] hub 9-0:1.0: 8 ports detected 03:34:35 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x4000000000002d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x60, 0x2, 0x8, 0x0, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0xfe}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x8051) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x8, 0x701cc0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 03:34:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb259}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000440)={0x3, 0x2, @stop_pts=0x63}) 03:34:35 executing program 2 (fault-call:2 fault-nth:18): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2179.052232] EXT4-fs (sda1): re-mounted. Opts: i_version, [ 2179.179472] hub 9-0:1.0: USB hub found [ 2179.191755] hub 9-0:1.0: 8 ports detected [ 2179.221179] FAULT_INJECTION: forcing a failure. [ 2179.221179] name failslab, interval 1, probability 0, space 0, times 0 [ 2179.263427] CPU: 1 PID: 1202 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2179.271244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2179.280591] Call Trace: [ 2179.283180] dump_stack+0x1b2/0x283 [ 2179.286810] should_fail.cold+0x10a/0x154 [ 2179.290960] should_failslab+0xd6/0x130 [ 2179.294942] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 2179.299613] ? dev_uevent_filter+0xd0/0xd0 [ 2179.303846] kobject_uevent_env+0x1fa/0xc50 [ 2179.308173] lo_ioctl+0x1177/0x1c00 [ 2179.311806] ? loop_clr_fd+0xac0/0xac0 [ 2179.315692] blkdev_ioctl+0x91d/0x17c0 [ 2179.319576] ? blkpg_ioctl+0x8d0/0x8d0 [ 2179.323460] ? trace_hardirqs_on+0x10/0x10 [ 2179.327701] block_ioctl+0xd9/0x120 [ 2179.331324] ? blkdev_fallocate+0x3a0/0x3a0 [ 2179.335639] do_vfs_ioctl+0x75a/0xfe0 [ 2179.338429] hub 9-0:1.0: USB hub found [ 2179.339436] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2179.339448] ? ioctl_preallocate+0x1a0/0x1a0 [ 2179.339471] ? security_file_ioctl+0x76/0xb0 [ 2179.343879] hub 9-0:1.0: 8 ports detected 03:34:36 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f0000000100), 0x4}, 0x100, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)={0x0, 0x3}) ioperm(0x2, 0xfffffffffffffffd, 0x2) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 2179.348942] ? security_file_ioctl+0x83/0xb0 [ 2179.348954] SyS_ioctl+0x7f/0xb0 [ 2179.348962] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2179.348975] do_syscall_64+0x1d5/0x640 [ 2179.348991] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2179.348999] RIP: 0033:0x45c937 [ 2179.349003] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2179.393561] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2179.400828] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 03:34:36 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:36 executing program 4: perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000440)={{0x3, 0x0, @reserved="8951217f18efcb1c24d176e8fc009a896924e19eaddf584e58f0682a4c0ffe01"}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2179.408097] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2179.415358] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2179.422608] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 [ 2179.434871] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x144, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010100}}}}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb259}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffff7f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4}, 0x4080) [ 2179.475930] hub 9-0:1.0: USB hub found 03:34:36 executing program 2 (fault-call:2 fault-nth:19): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2179.509045] hub 9-0:1.0: 8 ports detected 03:34:36 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x0) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2179.625194] hub 9-0:1.0: USB hub found [ 2179.655472] FAULT_INJECTION: forcing a failure. [ 2179.655472] name failslab, interval 1, probability 0, space 0, times 0 [ 2179.672132] hub 9-0:1.0: 8 ports detected [ 2179.740004] CPU: 0 PID: 1236 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2179.748036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2179.757408] Call Trace: [ 2179.760016] dump_stack+0x1b2/0x283 [ 2179.763671] should_fail.cold+0x10a/0x154 [ 2179.767838] should_failslab+0xd6/0x130 [ 2179.771828] kmem_cache_alloc+0x28e/0x3c0 [ 2179.775985] __kernfs_new_node+0x6f/0x470 [ 2179.780141] kernfs_new_node+0x7b/0xe0 [ 2179.784048] __kernfs_create_file+0x3d/0x320 [ 2179.788480] sysfs_add_file_mode_ns+0x1e1/0x450 [ 2179.793156] internal_create_group+0x23b/0x7e0 [ 2179.797766] lo_ioctl+0x1108/0x1c00 [ 2179.801458] ? loop_clr_fd+0xac0/0xac0 [ 2179.805352] blkdev_ioctl+0x91d/0x17c0 [ 2179.809247] ? blkpg_ioctl+0x8d0/0x8d0 [ 2179.813139] ? trace_hardirqs_on+0x10/0x10 [ 2179.817416] block_ioctl+0xd9/0x120 [ 2179.821061] ? blkdev_fallocate+0x3a0/0x3a0 [ 2179.825385] do_vfs_ioctl+0x75a/0xfe0 [ 2179.829192] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2179.834853] ? ioctl_preallocate+0x1a0/0x1a0 03:34:36 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x0) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2179.839275] ? security_file_ioctl+0x76/0xb0 [ 2179.843721] ? security_file_ioctl+0x83/0xb0 [ 2179.848136] SyS_ioctl+0x7f/0xb0 [ 2179.851531] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2179.855515] do_syscall_64+0x1d5/0x640 [ 2179.859410] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2179.864630] RIP: 0033:0x45c937 [ 2179.867815] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2179.875532] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2179.882791] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 03:34:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:36 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x0) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2179.890062] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2179.897332] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2179.904597] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 [ 2179.965063] hub 9-0:1.0: USB hub found 03:34:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dlm-monitor\x00', 0x400, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x54, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x54}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x5c, 0x2, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040008}, 0x44000) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wg2\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xde}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}]}, 0x4c}}, 0x4080) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x14c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb259}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2180.023471] hub 9-0:1.0: 8 ports detected [ 2180.049651] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:37 executing program 2 (fault-call:2 fault-nth:20): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2180.246367] FAULT_INJECTION: forcing a failure. [ 2180.246367] name failslab, interval 1, probability 0, space 0, times 0 [ 2180.269678] CPU: 1 PID: 1275 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2180.277524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2180.286872] Call Trace: [ 2180.289460] dump_stack+0x1b2/0x283 [ 2180.293094] should_fail.cold+0x10a/0x154 [ 2180.297244] should_failslab+0xd6/0x130 [ 2180.301218] kmem_cache_alloc+0x28e/0x3c0 [ 2180.305370] __kernfs_new_node+0x6f/0x470 [ 2180.309522] kernfs_new_node+0x7b/0xe0 [ 2180.313409] __kernfs_create_file+0x3d/0x320 [ 2180.317819] sysfs_add_file_mode_ns+0x1e1/0x450 [ 2180.322489] internal_create_group+0x23b/0x7e0 [ 2180.327073] lo_ioctl+0x1108/0x1c00 [ 2180.330701] ? loop_clr_fd+0xac0/0xac0 [ 2180.334585] blkdev_ioctl+0x91d/0x17c0 [ 2180.338470] ? blkpg_ioctl+0x8d0/0x8d0 [ 2180.342368] ? trace_hardirqs_on+0x10/0x10 [ 2180.346611] block_ioctl+0xd9/0x120 [ 2180.350234] ? blkdev_fallocate+0x3a0/0x3a0 [ 2180.354553] do_vfs_ioctl+0x75a/0xfe0 [ 2180.358353] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2180.363972] ? ioctl_preallocate+0x1a0/0x1a0 [ 2180.368387] ? security_file_ioctl+0x76/0xb0 [ 2180.372794] ? security_file_ioctl+0x83/0xb0 [ 2180.377235] SyS_ioctl+0x7f/0xb0 [ 2180.380601] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2180.384571] do_syscall_64+0x1d5/0x640 [ 2180.388459] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2180.393641] RIP: 0033:0x45c937 [ 2180.396823] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2180.404525] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2180.411784] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2180.419047] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2180.426311] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2180.433578] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:37 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4, 0x3, 0x3, 0xfffffffffffffffd}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4500, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4000000000000311}, 0x0, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x4208, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 03:34:37 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) [ 2180.456823] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="00a59ca14ac1c40533409ba940ffff07000100766f7400"/35], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb259}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:37 executing program 2 (fault-call:2 fault-nth:21): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2180.554031] hub 9-0:1.0: USB hub found [ 2180.574989] hub 9-0:1.0: 8 ports detected [ 2180.618114] FAULT_INJECTION: forcing a failure. [ 2180.618114] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2180.629935] CPU: 0 PID: 1297 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2180.637722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2180.647075] Call Trace: [ 2180.649667] dump_stack+0x1b2/0x283 [ 2180.653299] should_fail.cold+0x10a/0x154 [ 2180.657450] __alloc_pages_nodemask+0x22b/0x2730 [ 2180.662202] ? kernfs_activate+0x2a/0x180 [ 2180.666358] ? __mutex_lock+0x2cb/0x1430 [ 2180.670416] ? kernfs_activate+0x2a/0x180 [ 2180.674734] ? __mutex_lock+0x2cb/0x1430 [ 2180.678794] ? __fprop_inc_percpu_max+0x1d0/0x1d0 [ 2180.683635] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2180.688477] ? trace_hardirqs_on+0x10/0x10 [ 2180.692720] ? __mutex_unlock_slowpath+0x75/0x780 [ 2180.697561] ? wait_for_completion_io+0x10/0x10 [ 2180.702233] cache_grow_begin+0x91/0x410 [ 2180.706294] cache_alloc_refill+0x28c/0x360 [ 2180.710616] kmem_cache_alloc_trace+0x35b/0x3f0 [ 2180.715281] ? dev_uevent_filter+0xd0/0xd0 [ 2180.719512] kobject_uevent_env+0x1fa/0xc50 [ 2180.723841] lo_ioctl+0x1177/0x1c00 [ 2180.727468] ? loop_clr_fd+0xac0/0xac0 [ 2180.731345] blkdev_ioctl+0x91d/0x17c0 [ 2180.735212] ? blkpg_ioctl+0x8d0/0x8d0 [ 2180.739086] ? trace_hardirqs_on+0x10/0x10 [ 2180.743326] block_ioctl+0xd9/0x120 [ 2180.746946] ? blkdev_fallocate+0x3a0/0x3a0 [ 2180.751263] do_vfs_ioctl+0x75a/0xfe0 [ 2180.755066] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2180.760689] ? ioctl_preallocate+0x1a0/0x1a0 [ 2180.765103] ? security_file_ioctl+0x76/0xb0 [ 2180.769505] ? security_file_ioctl+0x83/0xb0 [ 2180.773909] SyS_ioctl+0x7f/0xb0 [ 2180.777267] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2180.781237] do_syscall_64+0x1d5/0x640 [ 2180.785123] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2180.790305] RIP: 0033:0x45c937 [ 2180.793487] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2180.801190] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2180.808465] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 03:34:37 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) pipe(&(0x7f0000000300)) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000e4c000/0x3000)=nil, 0x3000}}) 03:34:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) [ 2180.815738] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2180.822999] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2180.830260] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 [ 2180.856983] hub 9-0:1.0: USB hub found [ 2180.863103] hub 9-0:1.0: 8 ports detected 03:34:37 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2180.901769] hub 9-0:1.0: USB hub found [ 2180.906225] hub 9-0:1.0: 8 ports detected 03:34:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$fb(0xffffffffffffffff, &(0x7f0000000440)="aab095ea973d931ae11cf385513a9a2ac9dc3ecf1cc954862a05ae5fc2b47eb7754b4deed0a384b531c2d9e593747538540e78e97ef0b04217dc2e058fb29299d717d79c2be022419f8b6423175b5f129c4e196269ee7e3a6ff7182fcf3f4a5ce126", 0x62) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 03:34:37 executing program 2 (fault-call:2 fault-nth:22): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2180.948476] hub 9-0:1.0: USB hub found [ 2180.959775] EXT4-fs (sda1): re-mounted. Opts: i_version, [ 2180.970994] hub 9-0:1.0: 8 ports detected 03:34:38 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2181.171469] FAULT_INJECTION: forcing a failure. [ 2181.171469] name failslab, interval 1, probability 0, space 0, times 0 [ 2181.239998] CPU: 1 PID: 1338 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2181.247813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2181.262375] Call Trace: [ 2181.264968] dump_stack+0x1b2/0x283 [ 2181.268601] should_fail.cold+0x10a/0x154 [ 2181.272763] should_failslab+0xd6/0x130 [ 2181.276732] kmem_cache_alloc_node+0x25f/0x400 [ 2181.281315] __alloc_skb+0x9a/0x4c0 [ 2181.284943] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 2181.289783] ? netlink_has_listeners+0x1ff/0x310 [ 2181.294536] kobject_uevent_env+0x6d1/0xc50 [ 2181.298868] lo_ioctl+0x1177/0x1c00 [ 2181.302500] ? loop_clr_fd+0xac0/0xac0 [ 2181.306387] blkdev_ioctl+0x91d/0x17c0 [ 2181.310270] ? blkpg_ioctl+0x8d0/0x8d0 [ 2181.314150] ? trace_hardirqs_on+0x10/0x10 [ 2181.318386] block_ioctl+0xd9/0x120 [ 2181.322005] ? blkdev_fallocate+0x3a0/0x3a0 [ 2181.326321] do_vfs_ioctl+0x75a/0xfe0 [ 2181.330120] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2181.335736] ? ioctl_preallocate+0x1a0/0x1a0 [ 2181.340149] ? security_file_ioctl+0x76/0xb0 [ 2181.344554] ? security_file_ioctl+0x83/0xb0 [ 2181.348955] SyS_ioctl+0x7f/0xb0 [ 2181.352312] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2181.356282] do_syscall_64+0x1d5/0x640 [ 2181.360170] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2181.365347] RIP: 0033:0x45c937 [ 2181.368523] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2181.376222] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2181.383481] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 03:34:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, 0x0, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x1cc, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0x138, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb259}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, [], 0x1}, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc07}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa445}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:38 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380), 0x0, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2181.390742] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2181.398003] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2181.405264] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 [ 2181.425152] EXT4-fs (sda1): re-mounted. Opts: i_version, [ 2181.462855] hub 9-0:1.0: USB hub found [ 2181.476771] hub 9-0:1.0: 8 ports detected 03:34:38 executing program 2 (fault-call:2 fault-nth:23): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2181.641071] FAULT_INJECTION: forcing a failure. [ 2181.641071] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2181.652890] CPU: 1 PID: 1373 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2181.660678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2181.670028] Call Trace: [ 2181.672618] dump_stack+0x1b2/0x283 [ 2181.676255] should_fail.cold+0x10a/0x154 [ 2181.680407] __alloc_pages_nodemask+0x22b/0x2730 [ 2181.685156] ? __lock_acquire+0x655/0x42a0 [ 2181.689390] ? __mutex_lock+0x2cb/0x1430 [ 2181.694583] ? trace_hardirqs_on+0x10/0x10 [ 2181.698818] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2181.703661] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2181.708498] ? trace_hardirqs_on+0x10/0x10 [ 2181.712769] ? ____cache_alloc_node+0x153/0x1c0 [ 2181.717435] ? lock_acquire+0x170/0x3f0 [ 2181.721434] cache_grow_begin+0x91/0x410 [ 2181.725494] ? do_raw_spin_unlock+0x164/0x250 [ 2181.737972] ____cache_alloc_node+0x16d/0x1c0 [ 2181.742463] ? check_preemption_disabled+0x35/0x240 [ 2181.747480] kmem_cache_alloc_trace+0x20e/0x3f0 [ 2181.752143] ? dev_uevent_filter+0xd0/0xd0 [ 2181.756372] kobject_uevent_env+0x1fa/0xc50 [ 2181.760700] lo_ioctl+0x1177/0x1c00 [ 2181.764326] ? loop_clr_fd+0xac0/0xac0 [ 2181.768211] blkdev_ioctl+0x91d/0x17c0 [ 2181.772093] ? blkpg_ioctl+0x8d0/0x8d0 [ 2181.775972] ? trace_hardirqs_on+0x10/0x10 [ 2181.780209] block_ioctl+0xd9/0x120 [ 2181.783830] ? blkdev_fallocate+0x3a0/0x3a0 [ 2181.788143] do_vfs_ioctl+0x75a/0xfe0 [ 2181.791938] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2181.797558] ? ioctl_preallocate+0x1a0/0x1a0 [ 2181.801971] ? security_file_ioctl+0x76/0xb0 [ 2181.806375] ? security_file_ioctl+0x83/0xb0 [ 2181.810777] SyS_ioctl+0x7f/0xb0 [ 2181.814135] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2181.818104] do_syscall_64+0x1d5/0x640 [ 2181.821990] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2181.827170] RIP: 0033:0x45c937 [ 2181.830349] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2181.838047] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2181.845305] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2181.852564] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2181.859824] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2181.867082] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 [ 2181.883561] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, 0x0, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:38 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380), 0x0, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2182.005579] hub 9-0:1.0: USB hub found 03:34:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000eb36fa0a99706905a449f6dbba7ccc8553b6b7ace50a95e9a9e4346449e205d03644855354293eaf3829e7df0c398c7a5e2d828a5efab36a085453f9b74f159bd0106b338f00dce9958d878cbb74fd61caf4dd18211acc0439a92e545273ceb624db99b7e96c8411bc6140c773"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb259}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:38 executing program 2 (fault-call:2 fault-nth:24): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2182.043671] hub 9-0:1.0: 8 ports detected 03:34:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x40, 0xff, 0x0, 0xffffffff, 0x210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x439}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x4) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x810) r3 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x49, 0x800) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000700)={0x4, 0xc2, &(0x7f0000000880)="7e88f65623977f938f52e3cce4be110172eea5061109da4fd6410fbd3539ed4d8880a05f8ee0758cdf432bb56174eec6b455c4e24c2208f545d1cc1f5d7f40ea31a5a9abf3adc2e200fc48ea60e05aab16e92b3ac9a408be3379017832410bb9e12412f831d06c1091612519df9f0db27f24376aafca0c66bab69dc85319513aed024977c1ad4389e00343cfcc613ca580f536f33f777d341464253aab8349463ceffb1653748b3d7e3134ee4519ac7b29e7fe3fccac179b6ef0926df1145af19aca"}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESOCT=r3], 0x48}}, 0x4820) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2182.102515] FAULT_INJECTION: forcing a failure. [ 2182.102515] name failslab, interval 1, probability 0, space 0, times 0 [ 2182.162626] CPU: 0 PID: 1394 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2182.170450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2182.179799] Call Trace: [ 2182.182394] dump_stack+0x1b2/0x283 [ 2182.186020] should_fail.cold+0x10a/0x154 [ 2182.190169] should_failslab+0xd6/0x130 [ 2182.194132] kmem_cache_alloc_node+0x25f/0x400 [ 2182.198706] __alloc_skb+0x9a/0x4c0 [ 2182.202337] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 2182.207176] ? netlink_has_listeners+0x1ff/0x310 [ 2182.211921] kobject_uevent_env+0x6d1/0xc50 [ 2182.216238] lo_ioctl+0x1177/0x1c00 [ 2182.219864] ? loop_clr_fd+0xac0/0xac0 [ 2182.223757] blkdev_ioctl+0x91d/0x17c0 [ 2182.227641] ? blkpg_ioctl+0x8d0/0x8d0 [ 2182.231526] ? trace_hardirqs_on+0x10/0x10 [ 2182.235767] block_ioctl+0xd9/0x120 [ 2182.239392] ? blkdev_fallocate+0x3a0/0x3a0 [ 2182.243709] do_vfs_ioctl+0x75a/0xfe0 [ 2182.247508] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2182.253127] ? ioctl_preallocate+0x1a0/0x1a0 [ 2182.257543] ? security_file_ioctl+0x76/0xb0 [ 2182.261987] ? security_file_ioctl+0x83/0xb0 [ 2182.266408] SyS_ioctl+0x7f/0xb0 [ 2182.269774] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2182.273751] do_syscall_64+0x1d5/0x640 [ 2182.277642] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2182.282824] RIP: 0033:0x45c937 [ 2182.286005] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2182.293704] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2182.300966] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 03:34:39 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) write(r0, &(0x7f0000000340), 0x41395527) accept4$unix(r0, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x15}}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000040)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) [ 2182.308235] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2182.315493] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2182.322750] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:39 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380), 0x0, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, 0x0, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) [ 2182.370077] hub 9-0:1.0: USB hub found [ 2182.374299] hub 9-0:1.0: 8 ports detected [ 2182.375276] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:39 executing program 2 (fault-call:2 fault-nth:25): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2182.451374] hub 9-0:1.0: USB hub found [ 2182.467756] hub 9-0:1.0: 8 ports detected [ 2182.509815] FAULT_INJECTION: forcing a failure. [ 2182.509815] name failslab, interval 1, probability 0, space 0, times 0 [ 2182.540868] CPU: 0 PID: 1425 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2182.548684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2182.558030] Call Trace: [ 2182.560624] dump_stack+0x1b2/0x283 [ 2182.564259] should_fail.cold+0x10a/0x154 [ 2182.568406] should_failslab+0xd6/0x130 [ 2182.572379] kmem_cache_alloc_node+0x25f/0x400 [ 2182.576963] __alloc_skb+0x9a/0x4c0 [ 2182.580590] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 2182.585428] ? netlink_has_listeners+0x1ff/0x310 [ 2182.590181] kobject_uevent_env+0x6d1/0xc50 [ 2182.594509] lo_ioctl+0x1177/0x1c00 [ 2182.598137] ? loop_clr_fd+0xac0/0xac0 [ 2182.602020] blkdev_ioctl+0x91d/0x17c0 [ 2182.605901] ? blkpg_ioctl+0x8d0/0x8d0 [ 2182.609786] ? trace_hardirqs_on+0x10/0x10 [ 2182.614027] block_ioctl+0xd9/0x120 [ 2182.617650] ? blkdev_fallocate+0x3a0/0x3a0 [ 2182.621971] do_vfs_ioctl+0x75a/0xfe0 [ 2182.625771] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2182.631387] ? ioctl_preallocate+0x1a0/0x1a0 [ 2182.635799] ? security_file_ioctl+0x76/0xb0 [ 2182.640199] ? security_file_ioctl+0x83/0xb0 [ 2182.644634] SyS_ioctl+0x7f/0xb0 [ 2182.647993] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2182.652051] do_syscall_64+0x1d5/0x640 [ 2182.655946] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2182.661215] RIP: 0033:0x45c937 [ 2182.664402] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2182.672104] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2182.679365] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2182.686626] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2182.693892] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2182.701161] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb259}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:39 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:39 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4, 0x3, 0x3, 0xfffffffffffffffd}, 0x0) perf_event_open(&(0x7f0000000a40)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0, 0x1}, 0x4392, 0x0, 0x0, 0x0, 0x0, 0x4, 0x64d}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="00000000d3204b761da81489000000000000", @ANYRES32, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 03:34:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:39 executing program 2 (fault-call:2 fault-nth:26): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2182.786279] EXT4-fs (sda1): re-mounted. Opts: i_version, [ 2182.874635] hub 9-0:1.0: USB hub found [ 2182.909002] hub 9-0:1.0: 8 ports detected [ 2182.944150] FAULT_INJECTION: forcing a failure. [ 2182.944150] name failslab, interval 1, probability 0, space 0, times 0 [ 2182.972011] CPU: 1 PID: 1453 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2182.979827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2182.989173] Call Trace: [ 2182.991752] dump_stack+0x1b2/0x283 [ 2182.995375] should_fail.cold+0x10a/0x154 [ 2182.999535] should_failslab+0xd6/0x130 [ 2183.003513] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2183.008617] __kmalloc_node_track_caller+0x38/0x70 [ 2183.013544] __kmalloc_reserve.isra.0+0x35/0xd0 [ 2183.018199] __alloc_skb+0xca/0x4c0 [ 2183.021808] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 2183.026640] ? netlink_has_listeners+0x1ff/0x310 [ 2183.031390] kobject_uevent_env+0x6d1/0xc50 [ 2183.035706] lo_ioctl+0x1177/0x1c00 [ 2183.039334] ? loop_clr_fd+0xac0/0xac0 [ 2183.043216] blkdev_ioctl+0x91d/0x17c0 [ 2183.047092] ? blkpg_ioctl+0x8d0/0x8d0 [ 2183.050974] ? trace_hardirqs_on+0x10/0x10 [ 2183.055207] block_ioctl+0xd9/0x120 [ 2183.058815] ? blkdev_fallocate+0x3a0/0x3a0 [ 2183.063117] do_vfs_ioctl+0x75a/0xfe0 [ 2183.066910] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2183.072520] ? ioctl_preallocate+0x1a0/0x1a0 [ 2183.076930] ? security_file_ioctl+0x76/0xb0 [ 2183.081397] ? security_file_ioctl+0x83/0xb0 [ 2183.085786] SyS_ioctl+0x7f/0xb0 [ 2183.089131] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2183.093087] do_syscall_64+0x1d5/0x640 [ 2183.096968] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2183.102198] RIP: 0033:0x45c937 [ 2183.105400] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2183.113145] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2183.120393] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2183.127647] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2183.134898] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2183.142158] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000080)={0x3, r1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb259}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:40 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2183.209832] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:40 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x2, 0x7, 0x37) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x3f, 0x0, 0x1, 0xf, 0x401, 0x3ff}, 0x20) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 03:34:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3972}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) clock_settime(0x4, &(0x7f0000000140)) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)={0x48, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8044) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001417020020010000fafffffff5ffffffffffffff05bad9307c52dd92d83bf5a8a1d5f039f7d35f8a6905693d07f8b19d540c03a1569ca4937906a88a3eea2cec433c76faf79564cb65402d69d9d2ee"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 03:34:40 executing program 2 (fault-call:2 fault-nth:27): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2183.299438] hub 9-0:1.0: USB hub found [ 2183.305569] hub 9-0:1.0: 8 ports detected [ 2183.400265] FAULT_INJECTION: forcing a failure. [ 2183.400265] name failslab, interval 1, probability 0, space 0, times 0 [ 2183.426034] CPU: 1 PID: 1497 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2183.433850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2183.443202] Call Trace: [ 2183.445790] dump_stack+0x1b2/0x283 [ 2183.449420] should_fail.cold+0x10a/0x154 [ 2183.453576] should_failslab+0xd6/0x130 [ 2183.457551] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2183.462653] __kmalloc_node_track_caller+0x38/0x70 [ 2183.467581] __kmalloc_reserve.isra.0+0x35/0xd0 [ 2183.472253] __alloc_skb+0xca/0x4c0 [ 2183.475875] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 2183.480713] ? netlink_has_listeners+0x1ff/0x310 [ 2183.485466] kobject_uevent_env+0x6d1/0xc50 [ 2183.489790] lo_ioctl+0x1177/0x1c00 [ 2183.493420] ? loop_clr_fd+0xac0/0xac0 [ 2183.497365] blkdev_ioctl+0x91d/0x17c0 [ 2183.501854] ? blkpg_ioctl+0x8d0/0x8d0 [ 2183.505736] ? trace_hardirqs_on+0x10/0x10 [ 2183.509979] block_ioctl+0xd9/0x120 [ 2183.513599] ? blkdev_fallocate+0x3a0/0x3a0 [ 2183.517919] do_vfs_ioctl+0x75a/0xfe0 [ 2183.521719] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2183.527352] ? ioctl_preallocate+0x1a0/0x1a0 [ 2183.531762] ? security_file_ioctl+0x76/0xb0 [ 2183.536164] ? security_file_ioctl+0x83/0xb0 [ 2183.540566] SyS_ioctl+0x7f/0xb0 [ 2183.543926] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2183.547896] do_syscall_64+0x1d5/0x640 [ 2183.551785] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2183.556967] RIP: 0033:0x45c937 [ 2183.560144] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2183.567847] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2183.575107] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2183.582367] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2183.590409] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2183.601490] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 [ 2183.614921] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:40 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:40 executing program 2 (fault-call:2 fault-nth:28): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2183.714832] hub 9-0:1.0: USB hub found [ 2183.740663] hub 9-0:1.0: 8 ports detected [ 2183.800828] FAULT_INJECTION: forcing a failure. [ 2183.800828] name failslab, interval 1, probability 0, space 0, times 0 [ 2183.854424] CPU: 0 PID: 1524 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2183.862246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2183.871599] Call Trace: [ 2183.874196] dump_stack+0x1b2/0x283 [ 2183.877841] should_fail.cold+0x10a/0x154 [ 2183.881993] should_failslab+0xd6/0x130 [ 2183.885970] kmem_cache_alloc_node+0x25f/0x400 [ 2183.890561] __alloc_skb+0x9a/0x4c0 [ 2183.894189] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 2183.899031] ? netlink_has_listeners+0x1ff/0x310 [ 2183.903786] kobject_uevent_env+0x6d1/0xc50 [ 2183.908117] lo_ioctl+0x1177/0x1c00 [ 2183.911750] ? loop_clr_fd+0xac0/0xac0 [ 2183.915630] blkdev_ioctl+0x91d/0x17c0 [ 2183.919513] ? blkpg_ioctl+0x8d0/0x8d0 [ 2183.923397] ? trace_hardirqs_on+0x10/0x10 [ 2183.927636] block_ioctl+0xd9/0x120 [ 2183.931257] ? blkdev_fallocate+0x3a0/0x3a0 [ 2183.935573] do_vfs_ioctl+0x75a/0xfe0 [ 2183.939370] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2183.944995] ? ioctl_preallocate+0x1a0/0x1a0 [ 2183.949404] ? security_file_ioctl+0x76/0xb0 [ 2183.953832] ? security_file_ioctl+0x83/0xb0 [ 2183.958240] SyS_ioctl+0x7f/0xb0 [ 2183.961605] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2183.965575] do_syscall_64+0x1d5/0x640 [ 2183.969466] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2183.974646] RIP: 0033:0x45c937 [ 2183.977825] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2183.985526] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2183.992795] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2184.000057] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2184.007318] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2184.014580] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:40 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:41 executing program 2 (fault-call:2 fault-nth:29): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2184.183182] hub 9-0:1.0: USB hub found [ 2184.215316] hub 9-0:1.0: 8 ports detected [ 2184.222395] FAULT_INJECTION: forcing a failure. [ 2184.222395] name failslab, interval 1, probability 0, space 0, times 0 [ 2184.242718] CPU: 0 PID: 1542 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2184.250525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2184.259872] Call Trace: [ 2184.262466] dump_stack+0x1b2/0x283 [ 2184.266104] should_fail.cold+0x10a/0x154 [ 2184.270278] should_failslab+0xd6/0x130 [ 2184.274265] kmem_cache_alloc_node+0x25f/0x400 [ 2184.278965] __alloc_skb+0x9a/0x4c0 [ 2184.282592] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 2184.287435] ? netlink_has_listeners+0x1ff/0x310 [ 2184.292194] kobject_uevent_env+0x6d1/0xc50 [ 2184.296524] lo_ioctl+0x1177/0x1c00 [ 2184.300151] ? loop_clr_fd+0xac0/0xac0 [ 2184.304042] blkdev_ioctl+0x91d/0x17c0 [ 2184.307925] ? blkpg_ioctl+0x8d0/0x8d0 [ 2184.311803] ? trace_hardirqs_on+0x10/0x10 [ 2184.316042] block_ioctl+0xd9/0x120 [ 2184.319660] ? blkdev_fallocate+0x3a0/0x3a0 [ 2184.323974] do_vfs_ioctl+0x75a/0xfe0 [ 2184.327770] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2184.333388] ? ioctl_preallocate+0x1a0/0x1a0 [ 2184.337797] ? security_file_ioctl+0x76/0xb0 [ 2184.342198] ? security_file_ioctl+0x83/0xb0 [ 2184.346600] SyS_ioctl+0x7f/0xb0 [ 2184.349958] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2184.353927] do_syscall_64+0x1d5/0x640 [ 2184.357815] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2184.362994] RIP: 0033:0x45c937 [ 2184.366174] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2184.373874] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2184.381138] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2184.388404] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2184.395666] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2184.402928] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 [ 2184.450072] EXT4-fs: 1 callbacks suppressed [ 2184.450080] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:41 executing program 2 (fault-call:2 fault-nth:30): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) 03:34:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) accept4$unix(r0, 0x0, &(0x7f0000000340), 0x80000) epoll_wait(r0, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000440)=""/111) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000002c57f00000727376700020010000fa00"/34], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)={0x174, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @broadcast}, 0xfff}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb259}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x804}, 0x0) [ 2184.727522] FAULT_INJECTION: forcing a failure. [ 2184.727522] name failslab, interval 1, probability 0, space 0, times 0 [ 2184.744544] CPU: 1 PID: 1557 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2184.752357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2184.761706] Call Trace: [ 2184.764296] dump_stack+0x1b2/0x283 [ 2184.767927] should_fail.cold+0x10a/0x154 [ 2184.772075] should_failslab+0xd6/0x130 [ 2184.776050] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2184.781154] __kmalloc_node_track_caller+0x38/0x70 [ 2184.786080] __kmalloc_reserve.isra.0+0x35/0xd0 [ 2184.790753] __alloc_skb+0xca/0x4c0 [ 2184.794379] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 2184.799219] ? netlink_has_listeners+0x1ff/0x310 [ 2184.803977] kobject_uevent_env+0x6d1/0xc50 [ 2184.808305] lo_ioctl+0x1177/0x1c00 [ 2184.811932] ? loop_clr_fd+0xac0/0xac0 [ 2184.815814] blkdev_ioctl+0x91d/0x17c0 [ 2184.819701] ? blkpg_ioctl+0x8d0/0x8d0 [ 2184.823614] ? trace_hardirqs_on+0x10/0x10 [ 2184.827855] block_ioctl+0xd9/0x120 [ 2184.831478] ? blkdev_fallocate+0x3a0/0x3a0 [ 2184.835794] do_vfs_ioctl+0x75a/0xfe0 [ 2184.839592] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2184.845213] ? ioctl_preallocate+0x1a0/0x1a0 [ 2184.849635] ? security_file_ioctl+0x76/0xb0 [ 2184.854038] ? security_file_ioctl+0x83/0xb0 [ 2184.858447] SyS_ioctl+0x7f/0xb0 [ 2184.861808] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2184.865779] do_syscall_64+0x1d5/0x640 [ 2184.869669] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2184.874849] RIP: 0033:0x45c937 03:34:41 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:41 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@loose='loose'}, {@afid={'afid', 0x3d, 0x401}}, {@afid={'afid', 0x3d, 0x2}}, {@posixacl='posixacl'}, {@version_9p2000='version=9p2000'}, {@privport='privport'}, {@dfltgid={'dfltgid'}}], [{@appraise_type='appraise_type=imasig'}]}}) [ 2184.878026] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2184.885727] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2184.892989] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2184.900248] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2184.907507] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2184.914794] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 [ 2184.983105] hub 9-0:1.0: USB hub found [ 2185.001492] hub 9-0:1.0: 8 ports detected 03:34:42 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2185.343926] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, 0x0, 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:42 executing program 2 (fault-call:2 fault-nth:31): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2185.517699] hub 9-0:1.0: USB hub found [ 2185.524439] hub 9-0:1.0: 8 ports detected [ 2185.556415] FAULT_INJECTION: forcing a failure. [ 2185.556415] name failslab, interval 1, probability 0, space 0, times 0 [ 2185.602940] CPU: 1 PID: 1586 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2185.610758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2185.620111] Call Trace: [ 2185.622705] dump_stack+0x1b2/0x283 [ 2185.626339] should_fail.cold+0x10a/0x154 [ 2185.630490] should_failslab+0xd6/0x130 [ 2185.634472] kmem_cache_alloc_node+0x25f/0x400 [ 2185.639057] __alloc_skb+0x9a/0x4c0 [ 2185.642690] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 2185.647532] ? netlink_has_listeners+0x1ff/0x310 [ 2185.652286] kobject_uevent_env+0x6d1/0xc50 [ 2185.656612] lo_ioctl+0x1177/0x1c00 [ 2185.660239] ? loop_clr_fd+0xac0/0xac0 [ 2185.664122] blkdev_ioctl+0x91d/0x17c0 [ 2185.668004] ? blkpg_ioctl+0x8d0/0x8d0 [ 2185.671884] ? trace_hardirqs_on+0x10/0x10 [ 2185.676128] block_ioctl+0xd9/0x120 [ 2185.679749] ? blkdev_fallocate+0x3a0/0x3a0 [ 2185.684065] do_vfs_ioctl+0x75a/0xfe0 [ 2185.687865] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2185.693489] ? ioctl_preallocate+0x1a0/0x1a0 [ 2185.697900] ? security_file_ioctl+0x76/0xb0 [ 2185.702304] ? security_file_ioctl+0x83/0xb0 [ 2185.706707] SyS_ioctl+0x7f/0xb0 [ 2185.710069] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2185.714044] do_syscall_64+0x1d5/0x640 [ 2185.717943] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2185.723129] RIP: 0033:0x45c937 [ 2185.726312] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2185.734013] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2185.741274] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2185.748537] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2185.755803] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2185.763067] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:42 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x4, 0x0, 0x3, 0x0, 0x7b45e97c, 0x8084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000000)={0x7ff, 0x2, 0xffffcf1d}) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 2185.914734] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x4000000000002d0, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="0000000000000000eeff0000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb259}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:42 executing program 2 (fault-call:2 fault-nth:32): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) 03:34:42 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2186.095404] FAULT_INJECTION: forcing a failure. [ 2186.095404] name failslab, interval 1, probability 0, space 0, times 0 [ 2186.129310] CPU: 0 PID: 1608 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2186.137138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2186.146487] Call Trace: [ 2186.149076] dump_stack+0x1b2/0x283 [ 2186.152707] should_fail.cold+0x10a/0x154 [ 2186.156860] should_failslab+0xd6/0x130 [ 2186.160834] kmem_cache_alloc_node+0x25f/0x400 [ 2186.165415] __alloc_skb+0x9a/0x4c0 [ 2186.169044] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 2186.173887] ? netlink_has_listeners+0x1ff/0x310 [ 2186.178666] kobject_uevent_env+0x6d1/0xc50 [ 2186.182992] lo_ioctl+0x1177/0x1c00 [ 2186.186625] ? loop_clr_fd+0xac0/0xac0 [ 2186.190511] blkdev_ioctl+0x91d/0x17c0 [ 2186.194403] ? blkpg_ioctl+0x8d0/0x8d0 [ 2186.198285] ? trace_hardirqs_on+0x10/0x10 [ 2186.202525] block_ioctl+0xd9/0x120 [ 2186.206148] ? blkdev_fallocate+0x3a0/0x3a0 [ 2186.210466] do_vfs_ioctl+0x75a/0xfe0 [ 2186.214354] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2186.219972] ? ioctl_preallocate+0x1a0/0x1a0 [ 2186.224388] ? security_file_ioctl+0x76/0xb0 [ 2186.228792] ? security_file_ioctl+0x83/0xb0 [ 2186.233198] SyS_ioctl+0x7f/0xb0 [ 2186.236556] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2186.240529] do_syscall_64+0x1d5/0x640 [ 2186.244418] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2186.249598] RIP: 0033:0x45c937 [ 2186.252781] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2186.260482] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2186.267746] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2186.275008] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2186.282259] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2186.289511] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:43 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, 0x0, 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) [ 2186.578522] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:43 executing program 2 (fault-call:2 fault-nth:33): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) 03:34:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb259}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x4000000000002d0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) [ 2186.669866] hub 9-0:1.0: USB hub found [ 2186.675911] hub 9-0:1.0: 8 ports detected 03:34:43 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 2186.774406] FAULT_INJECTION: forcing a failure. [ 2186.774406] name failslab, interval 1, probability 0, space 0, times 0 [ 2186.842432] CPU: 0 PID: 1629 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2186.850254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2186.859603] Call Trace: [ 2186.862202] dump_stack+0x1b2/0x283 [ 2186.865840] should_fail.cold+0x10a/0x154 [ 2186.870003] should_failslab+0xd6/0x130 [ 2186.873978] kmem_cache_alloc_node+0x25f/0x400 [ 2186.878561] __alloc_skb+0x9a/0x4c0 [ 2186.882185] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 2186.887025] ? netlink_has_listeners+0x1ff/0x310 [ 2186.891780] kobject_uevent_env+0x6d1/0xc50 [ 2186.896105] lo_ioctl+0x1177/0x1c00 [ 2186.899734] ? loop_clr_fd+0xac0/0xac0 [ 2186.903618] blkdev_ioctl+0x91d/0x17c0 [ 2186.907500] ? blkpg_ioctl+0x8d0/0x8d0 [ 2186.911406] ? trace_hardirqs_on+0x10/0x10 [ 2186.915646] block_ioctl+0xd9/0x120 [ 2186.919293] ? blkdev_fallocate+0x3a0/0x3a0 [ 2186.923619] do_vfs_ioctl+0x75a/0xfe0 [ 2186.927421] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2186.933042] ? ioctl_preallocate+0x1a0/0x1a0 [ 2186.937463] ? security_file_ioctl+0x76/0xb0 [ 2186.941867] ? security_file_ioctl+0x83/0xb0 [ 2186.946267] SyS_ioctl+0x7f/0xb0 [ 2186.949625] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2186.953594] do_syscall_64+0x1d5/0x640 [ 2186.957482] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2186.962663] RIP: 0033:0x45c937 [ 2186.965879] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2186.973582] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2186.984230] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2186.991490] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2186.998751] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2187.006016] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:44 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2187.095740] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:44 executing program 2 (fault-call:2 fault-nth:34): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2187.185653] hub 9-0:1.0: USB hub found [ 2187.202752] hub 9-0:1.0: 8 ports detected [ 2187.315133] FAULT_INJECTION: forcing a failure. [ 2187.315133] name failslab, interval 1, probability 0, space 0, times 0 [ 2187.353102] CPU: 0 PID: 1654 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2187.360924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2187.370271] Call Trace: [ 2187.372862] dump_stack+0x1b2/0x283 [ 2187.376493] should_fail.cold+0x10a/0x154 [ 2187.380645] should_failslab+0xd6/0x130 [ 2187.384617] kmem_cache_alloc_node+0x25f/0x400 [ 2187.389200] __alloc_skb+0x9a/0x4c0 [ 2187.392824] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 2187.397668] ? netlink_has_listeners+0x1ff/0x310 [ 2187.402421] kobject_uevent_env+0x6d1/0xc50 [ 2187.406749] lo_ioctl+0x1177/0x1c00 [ 2187.410375] ? loop_clr_fd+0xac0/0xac0 [ 2187.414259] blkdev_ioctl+0x91d/0x17c0 [ 2187.418145] ? blkpg_ioctl+0x8d0/0x8d0 [ 2187.422032] ? trace_hardirqs_on+0x10/0x10 [ 2187.426274] block_ioctl+0xd9/0x120 [ 2187.429896] ? blkdev_fallocate+0x3a0/0x3a0 [ 2187.434213] do_vfs_ioctl+0x75a/0xfe0 [ 2187.438018] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2187.443638] ? ioctl_preallocate+0x1a0/0x1a0 [ 2187.448052] ? security_file_ioctl+0x76/0xb0 [ 2187.452454] ? security_file_ioctl+0x83/0xb0 [ 2187.456865] SyS_ioctl+0x7f/0xb0 [ 2187.460224] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2187.464195] do_syscall_64+0x1d5/0x640 [ 2187.468086] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2187.473266] RIP: 0033:0x45c937 [ 2187.476443] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2187.484139] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2187.491399] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2187.498659] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2187.505919] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 03:34:44 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2187.513180] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, 0x0, 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x72c, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x4000, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7a, &(0x7f000059aff8)={r1}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r1, 0x1ff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x5}, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="99eb6141084384da43d4e637c3cac19fb7426fdbd7e0d3468db79e54690989935c0c6437424a66e959aad3080ae43dade062", @ANYBLOB="00e11909000100766574fbffffffffffffff00"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001a80)={0x0, @in6={{0xa, 0x4e21, 0x9, @ipv4={[], [], @broadcast}, 0x9}}, 0xf687, 0xa45f, 0x6af, 0x8, 0x8751}, &(0x7f0000001b40)=0x98) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb259}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x54, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2e}}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2187.555631] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:44 executing program 2 (fault-call:2 fault-nth:35): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2187.645566] hub 9-0:1.0: USB hub found [ 2187.670326] hub 9-0:1.0: 8 ports detected [ 2187.733465] FAULT_INJECTION: forcing a failure. [ 2187.733465] name failslab, interval 1, probability 0, space 0, times 0 [ 2187.788418] CPU: 1 PID: 1677 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2187.796233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2187.805580] Call Trace: [ 2187.808168] dump_stack+0x1b2/0x283 [ 2187.811799] should_fail.cold+0x10a/0x154 [ 2187.815948] should_failslab+0xd6/0x130 [ 2187.819917] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2187.825017] __kmalloc_node_track_caller+0x38/0x70 [ 2187.829942] __kmalloc_reserve.isra.0+0x35/0xd0 [ 2187.834605] __alloc_skb+0xca/0x4c0 [ 2187.838224] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 2187.843065] ? netlink_has_listeners+0x1ff/0x310 [ 2187.847824] kobject_uevent_env+0x6d1/0xc50 [ 2187.852151] lo_ioctl+0x1177/0x1c00 [ 2187.855776] ? loop_clr_fd+0xac0/0xac0 [ 2187.859655] blkdev_ioctl+0x91d/0x17c0 [ 2187.863538] ? blkpg_ioctl+0x8d0/0x8d0 [ 2187.867519] ? trace_hardirqs_on+0x10/0x10 [ 2187.871761] block_ioctl+0xd9/0x120 [ 2187.875385] ? blkdev_fallocate+0x3a0/0x3a0 [ 2187.879702] do_vfs_ioctl+0x75a/0xfe0 [ 2187.883502] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2187.889121] ? ioctl_preallocate+0x1a0/0x1a0 [ 2187.893530] ? security_file_ioctl+0x76/0xb0 [ 2187.897939] ? security_file_ioctl+0x83/0xb0 [ 2187.902341] SyS_ioctl+0x7f/0xb0 [ 2187.905701] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2187.909673] do_syscall_64+0x1d5/0x640 [ 2187.913592] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2187.918772] RIP: 0033:0x45c937 [ 2187.921965] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2187.929664] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 03:34:44 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) accept4$unix(r2, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, 0x0, 0x0, 0x9) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x1, 0x1}, [{0x2, 0x3}], {0x4, 0x5}, [{0x8, 0x2}], {0x10, 0x7}, {0x20, 0x7}}, 0x34, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 2187.936930] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2187.944197] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2187.951471] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2187.958739] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:44 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2187.989012] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:44 executing program 2 (fault-call:2 fault-nth:36): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) 03:34:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) [ 2188.089048] hub 9-0:1.0: USB hub found [ 2188.100988] hub 9-0:1.0: 8 ports detected [ 2188.169594] FAULT_INJECTION: forcing a failure. [ 2188.169594] name failslab, interval 1, probability 0, space 0, times 0 [ 2188.205561] CPU: 0 PID: 1698 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2188.213374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2188.222722] Call Trace: [ 2188.225310] dump_stack+0x1b2/0x283 [ 2188.228948] should_fail.cold+0x10a/0x154 [ 2188.233096] should_failslab+0xd6/0x130 [ 2188.237072] kmem_cache_alloc_node+0x25f/0x400 [ 2188.241652] __alloc_skb+0x9a/0x4c0 [ 2188.245293] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 2188.250133] ? netlink_has_listeners+0x1ff/0x310 [ 2188.254894] kobject_uevent_env+0x6d1/0xc50 [ 2188.259223] lo_ioctl+0x1177/0x1c00 [ 2188.262851] ? loop_clr_fd+0xac0/0xac0 [ 2188.266737] blkdev_ioctl+0x91d/0x17c0 [ 2188.270734] ? blkpg_ioctl+0x8d0/0x8d0 [ 2188.274622] ? trace_hardirqs_on+0x10/0x10 [ 2188.278863] block_ioctl+0xd9/0x120 [ 2188.282489] ? blkdev_fallocate+0x3a0/0x3a0 [ 2188.286806] do_vfs_ioctl+0x75a/0xfe0 [ 2188.290607] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2188.296228] ? ioctl_preallocate+0x1a0/0x1a0 [ 2188.300644] ? security_file_ioctl+0x76/0xb0 [ 2188.305051] ? security_file_ioctl+0x83/0xb0 [ 2188.309455] SyS_ioctl+0x7f/0xb0 [ 2188.312818] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2188.316790] do_syscall_64+0x1d5/0x640 [ 2188.320683] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2188.325865] RIP: 0033:0x45c937 [ 2188.329046] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2188.336748] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2188.344011] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2188.351283] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2188.358547] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2188.365811] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x0) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:45 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2188.672711] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:45 executing program 2 (fault-call:2 fault-nth:37): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2188.757085] hub 9-0:1.0: USB hub found [ 2188.775565] hub 9-0:1.0: 8 ports detected 03:34:45 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000200)="9993f89f89762c55f99789be09692fb25eb5ca9452ee03172ce58cda9e7556a57f9f0100a6d86cdf71d669796641912c2c2850ad33265ef104817cc7870dd18ac61220cdba7696eb5045de9c64739a8e0000000000000000000000000084898dc78e18784675377a3a8a34a65f48e3adab2fb9e2c2bdd9bd0ce71a8b1df5f8bb1917bce035a82c7597b5a6537b29b0e23fdf26f3fd10a493234dc3f3d0724af22931eb9011eb75565bd86073d0c2f5868c2c08da72cecbdb6e", 0xb9) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000100)={0xf0000000, 0x7f, 0x3, 0x3, 0xa, 0x2d73708c}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 03:34:45 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) [ 2188.905278] FAULT_INJECTION: forcing a failure. [ 2188.905278] name failslab, interval 1, probability 0, space 0, times 0 [ 2188.959129] CPU: 0 PID: 1723 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2188.966947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2188.976297] Call Trace: [ 2188.978889] dump_stack+0x1b2/0x283 [ 2188.982527] should_fail.cold+0x10a/0x154 [ 2188.986678] should_failslab+0xd6/0x130 [ 2188.990652] kmem_cache_alloc_node+0x25f/0x400 [ 2188.995235] __alloc_skb+0x9a/0x4c0 [ 2188.998863] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 2189.003704] ? netlink_has_listeners+0x1ff/0x310 [ 2189.008458] kobject_uevent_env+0x6d1/0xc50 [ 2189.012790] lo_ioctl+0x1177/0x1c00 [ 2189.016417] ? loop_clr_fd+0xac0/0xac0 [ 2189.020312] blkdev_ioctl+0x91d/0x17c0 [ 2189.024199] ? blkpg_ioctl+0x8d0/0x8d0 [ 2189.028082] ? trace_hardirqs_on+0x10/0x10 [ 2189.032324] block_ioctl+0xd9/0x120 [ 2189.035948] ? blkdev_fallocate+0x3a0/0x3a0 [ 2189.040266] do_vfs_ioctl+0x75a/0xfe0 [ 2189.044066] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2189.049707] ? ioctl_preallocate+0x1a0/0x1a0 [ 2189.054119] ? security_file_ioctl+0x76/0xb0 [ 2189.058524] ? security_file_ioctl+0x83/0xb0 [ 2189.062933] SyS_ioctl+0x7f/0xb0 [ 2189.066292] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2189.070265] do_syscall_64+0x1d5/0x640 [ 2189.074154] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2189.079335] RIP: 0033:0x45c937 [ 2189.082513] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2189.090214] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2189.097472] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2189.104737] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2189.112003] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2189.119266] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:46 executing program 2 (fault-call:2 fault-nth:38): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) 03:34:46 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2189.162977] EXT4-fs (sda1): re-mounted. Opts: i_version, [ 2189.263124] hub 9-0:1.0: USB hub found [ 2189.276264] FAULT_INJECTION: forcing a failure. [ 2189.276264] name failslab, interval 1, probability 0, space 0, times 0 [ 2189.280755] hub 9-0:1.0: 8 ports detected [ 2189.314674] CPU: 0 PID: 1746 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2189.322486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2189.331835] Call Trace: [ 2189.334430] dump_stack+0x1b2/0x283 [ 2189.338063] should_fail.cold+0x10a/0x154 [ 2189.342215] should_failslab+0xd6/0x130 [ 2189.346191] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2189.351303] __kmalloc_node_track_caller+0x38/0x70 [ 2189.356233] __kmalloc_reserve.isra.0+0x35/0xd0 [ 2189.360899] __alloc_skb+0xca/0x4c0 [ 2189.364525] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 2189.369371] ? netlink_has_listeners+0x1ff/0x310 [ 2189.374124] kobject_uevent_env+0x6d1/0xc50 [ 2189.378448] lo_ioctl+0x1177/0x1c00 [ 2189.382081] ? loop_clr_fd+0xac0/0xac0 [ 2189.385965] blkdev_ioctl+0x91d/0x17c0 [ 2189.389850] ? blkpg_ioctl+0x8d0/0x8d0 [ 2189.393733] ? trace_hardirqs_on+0x10/0x10 [ 2189.397976] block_ioctl+0xd9/0x120 [ 2189.401611] ? blkdev_fallocate+0x3a0/0x3a0 [ 2189.405928] do_vfs_ioctl+0x75a/0xfe0 [ 2189.409726] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2189.415346] ? ioctl_preallocate+0x1a0/0x1a0 [ 2189.419765] ? security_file_ioctl+0x76/0xb0 [ 2189.424173] ? security_file_ioctl+0x83/0xb0 [ 2189.428578] SyS_ioctl+0x7f/0xb0 [ 2189.431940] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2189.435913] do_syscall_64+0x1d5/0x640 [ 2189.439805] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2189.444987] RIP: 0033:0x45c937 [ 2189.448171] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2189.455874] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2189.463139] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2189.470400] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2189.477664] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2189.484925] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:46 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x0) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) [ 2189.525537] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:46 executing program 2 (fault-call:2 fault-nth:39): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) 03:34:46 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2189.718044] FAULT_INJECTION: forcing a failure. [ 2189.718044] name failslab, interval 1, probability 0, space 0, times 0 [ 2189.745971] CPU: 1 PID: 1766 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2189.753788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2189.763135] Call Trace: [ 2189.765735] dump_stack+0x1b2/0x283 [ 2189.769370] should_fail.cold+0x10a/0x154 [ 2189.773520] should_failslab+0xd6/0x130 [ 2189.777498] kmem_cache_alloc_node+0x25f/0x400 [ 2189.782079] __alloc_skb+0x9a/0x4c0 [ 2189.785703] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 2189.790547] ? netlink_has_listeners+0x1ff/0x310 [ 2189.795297] kobject_uevent_env+0x6d1/0xc50 [ 2189.799624] lo_ioctl+0x1177/0x1c00 [ 2189.803522] hub 9-0:1.0: USB hub found [ 2189.807327] ? loop_clr_fd+0xac0/0xac0 [ 2189.815108] blkdev_ioctl+0x91d/0x17c0 [ 2189.815978] hub 9-0:1.0: 8 ports detected [ 2189.818984] ? blkpg_ioctl+0x8d0/0x8d0 [ 2189.818995] ? trace_hardirqs_on+0x10/0x10 [ 2189.819016] block_ioctl+0xd9/0x120 [ 2189.819026] ? blkdev_fallocate+0x3a0/0x3a0 [ 2189.819036] do_vfs_ioctl+0x75a/0xfe0 [ 2189.819046] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2189.819057] ? ioctl_preallocate+0x1a0/0x1a0 [ 2189.853923] ? security_file_ioctl+0x76/0xb0 [ 2189.858326] ? security_file_ioctl+0x83/0xb0 [ 2189.862729] SyS_ioctl+0x7f/0xb0 [ 2189.866085] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2189.870056] do_syscall_64+0x1d5/0x640 [ 2189.873943] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2189.879123] RIP: 0033:0x45c937 [ 2189.882303] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2189.890007] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045c937 [ 2189.897268] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2189.904535] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2189.911800] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 03:34:46 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0xa) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 03:34:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) [ 2189.919063] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 [ 2189.940293] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:46 executing program 2 (fault-call:2 fault-nth:40): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) 03:34:46 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2190.101314] FAULT_INJECTION: forcing a failure. [ 2190.101314] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2190.113141] CPU: 0 PID: 1788 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2190.116997] hub 9-0:1.0: USB hub found [ 2190.121036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2190.121042] Call Trace: [ 2190.121061] dump_stack+0x1b2/0x283 [ 2190.121076] should_fail.cold+0x10a/0x154 [ 2190.121091] __alloc_pages_nodemask+0x22b/0x2730 [ 2190.130589] hub 9-0:1.0: 8 ports detected [ 2190.134318] ? trace_hardirqs_on+0x10/0x10 [ 2190.134332] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2190.134343] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2190.134352] ? trace_hardirqs_on+0x10/0x10 [ 2190.134366] ? trace_hardirqs_on+0x10/0x10 [ 2190.134383] ? ____cache_alloc_node+0x153/0x1c0 [ 2190.180527] ? lock_acquire+0x170/0x3f0 [ 2190.184501] cache_grow_begin+0x91/0x410 [ 2190.188562] ? do_raw_spin_unlock+0x164/0x250 [ 2190.193060] ____cache_alloc_node+0x16d/0x1c0 [ 2190.197558] ? check_preemption_disabled+0x35/0x240 [ 2190.202575] kmem_cache_alloc+0x1e5/0x3c0 [ 2190.206719] getname_flags+0xc8/0x550 [ 2190.210517] SyS_mkdirat+0x83/0x220 [ 2190.214141] ? SyS_mknod+0x30/0x30 [ 2190.217678] ? fput+0xb/0x140 [ 2190.220783] ? do_syscall_64+0x4c/0x640 [ 2190.224757] ? SyS_mkdirat+0x220/0x220 [ 2190.228641] do_syscall_64+0x1d5/0x640 [ 2190.232532] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2190.237717] RIP: 0033:0x45bee7 [ 2190.240900] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 03:34:47 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2190.248603] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045bee7 [ 2190.255866] RDX: 0000000000000005 RSI: 00000000000001ff RDI: 0000000020000040 [ 2190.263125] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 2190.270384] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2190.277648] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x0) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:47 executing program 2 (fault-call:2 fault-nth:41): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) 03:34:47 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2190.399841] EXT4-fs (sda1): re-mounted. Opts: i_version, [ 2190.521626] hub 9-0:1.0: USB hub found [ 2190.547948] hub 9-0:1.0: 8 ports detected [ 2190.573039] FAULT_INJECTION: forcing a failure. [ 2190.573039] name failslab, interval 1, probability 0, space 0, times 0 [ 2190.613978] CPU: 0 PID: 1812 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2190.621795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2190.631152] Call Trace: [ 2190.633743] dump_stack+0x1b2/0x283 [ 2190.637378] should_fail.cold+0x10a/0x154 [ 2190.641530] should_failslab+0xd6/0x130 [ 2190.645504] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 2190.650167] ? _copy_from_user+0x94/0x100 [ 2190.654313] ? copy_mnt_ns+0x8a0/0x8a0 [ 2190.658196] copy_mount_options+0x59/0x2e0 [ 2190.662428] ? copy_mnt_ns+0x8a0/0x8a0 [ 2190.666316] SyS_mount+0x84/0x120 [ 2190.669764] ? copy_mnt_ns+0x8a0/0x8a0 [ 2190.673648] do_syscall_64+0x1d5/0x640 [ 2190.677536] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2190.682713] RIP: 0033:0x45f4ba [ 2190.685893] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2190.693595] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045f4ba [ 2190.700883] RDX: 00007f0a2e401ae0 RSI: 0000000020000040 RDI: 00007f0a2e401b00 03:34:47 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2190.708144] RBP: 000000000078bf00 R08: 00007f0a2e401b40 R09: 00007f0a2e401ae0 [ 2190.715406] R10: 0000000002aa482e R11: 0000000000000206 R12: 0000000000000004 [ 2190.722670] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:47 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x1ff) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 03:34:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:47 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:47 executing program 2 (fault-call:2 fault-nth:42): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2190.962887] hub 9-0:1.0: USB hub found [ 2190.981323] hub 9-0:1.0: 8 ports detected [ 2191.025169] FAULT_INJECTION: forcing a failure. [ 2191.025169] name failslab, interval 1, probability 0, space 0, times 0 [ 2191.082238] CPU: 1 PID: 1835 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2191.090059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2191.099410] Call Trace: [ 2191.102006] dump_stack+0x1b2/0x283 [ 2191.105643] should_fail.cold+0x10a/0x154 [ 2191.109797] should_failslab+0xd6/0x130 [ 2191.113770] __kmalloc_track_caller+0x2bc/0x400 [ 2191.118438] ? strndup_user+0x5b/0xf0 [ 2191.122241] memdup_user+0x22/0xa0 [ 2191.125792] strndup_user+0x5b/0xf0 [ 2191.129414] ? copy_mnt_ns+0x8a0/0x8a0 [ 2191.133299] SyS_mount+0x39/0x120 [ 2191.136747] ? copy_mnt_ns+0x8a0/0x8a0 [ 2191.140635] do_syscall_64+0x1d5/0x640 [ 2191.144526] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2191.149710] RIP: 0033:0x45f4ba [ 2191.152894] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2191.160596] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045f4ba [ 2191.167858] RDX: 00007f0a2e401ae0 RSI: 0000000020000040 RDI: 00007f0a2e401b00 [ 2191.175121] RBP: 000000000078bf00 R08: 00007f0a2e401b40 R09: 00007f0a2e401ae0 [ 2191.182382] R10: 0000000002aa482e R11: 0000000000000206 R12: 0000000000000004 [ 2191.189646] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:48 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:48 executing program 2 (fault-call:2 fault-nth:43): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) 03:34:48 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2191.516294] hub 9-0:1.0: USB hub found [ 2191.524102] hub 9-0:1.0: 8 ports detected [ 2191.593830] FAULT_INJECTION: forcing a failure. [ 2191.593830] name failslab, interval 1, probability 0, space 0, times 0 [ 2191.638826] CPU: 1 PID: 1861 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2191.646642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2191.656002] Call Trace: [ 2191.658597] dump_stack+0x1b2/0x283 [ 2191.662231] should_fail.cold+0x10a/0x154 [ 2191.666385] should_failslab+0xd6/0x130 [ 2191.670359] __kmalloc_track_caller+0x2bc/0x400 [ 2191.675022] ? strndup_user+0x5b/0xf0 [ 2191.678827] memdup_user+0x22/0xa0 [ 2191.682367] strndup_user+0x5b/0xf0 [ 2191.685990] ? copy_mnt_ns+0x8a0/0x8a0 [ 2191.689875] SyS_mount+0x68/0x120 [ 2191.693324] ? copy_mnt_ns+0x8a0/0x8a0 [ 2191.697237] do_syscall_64+0x1d5/0x640 [ 2191.701125] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2191.706308] RIP: 0033:0x45f4ba [ 2191.709490] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2191.717195] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045f4ba [ 2191.724455] RDX: 00007f0a2e401ae0 RSI: 0000000020000040 RDI: 00007f0a2e401b00 [ 2191.731719] RBP: 000000000078bf00 R08: 00007f0a2e401b40 R09: 00007f0a2e401ae0 [ 2191.738983] R10: 0000000002aa482e R11: 0000000000000206 R12: 0000000000000004 [ 2191.746245] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:48 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:48 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:48 executing program 2 (fault-call:2 fault-nth:44): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) 03:34:48 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 2191.924338] hub 9-0:1.0: USB hub found [ 2191.944002] hub 9-0:1.0: 8 ports detected [ 2192.006448] FAULT_INJECTION: forcing a failure. [ 2192.006448] name failslab, interval 1, probability 0, space 0, times 0 [ 2192.077430] CPU: 0 PID: 1889 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2192.085247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2192.094598] Call Trace: [ 2192.097192] dump_stack+0x1b2/0x283 [ 2192.100993] should_fail.cold+0x10a/0x154 [ 2192.105146] should_failslab+0xd6/0x130 [ 2192.109123] __kmalloc_track_caller+0x2bc/0x400 [ 2192.113786] ? strndup_user+0x5b/0xf0 [ 2192.117586] memdup_user+0x22/0xa0 [ 2192.121130] strndup_user+0x5b/0xf0 [ 2192.124748] ? copy_mnt_ns+0x8a0/0x8a0 [ 2192.128628] SyS_mount+0x68/0x120 [ 2192.132077] ? copy_mnt_ns+0x8a0/0x8a0 [ 2192.135967] do_syscall_64+0x1d5/0x640 [ 2192.139854] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2192.145039] RIP: 0033:0x45f4ba [ 2192.148216] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2192.155915] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045f4ba [ 2192.163175] RDX: 00007f0a2e401ae0 RSI: 0000000020000040 RDI: 00007f0a2e401b00 [ 2192.170441] RBP: 000000000078bf00 R08: 00007f0a2e401b40 R09: 00007f0a2e401ae0 [ 2192.177708] R10: 0000000002aa482e R11: 0000000000000206 R12: 0000000000000004 [ 2192.184971] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:49 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:49 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:49 executing program 2 (fault-call:2 fault-nth:45): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2192.373414] hub 9-0:1.0: USB hub found [ 2192.380461] hub 9-0:1.0: 8 ports detected [ 2192.452941] FAULT_INJECTION: forcing a failure. [ 2192.452941] name failslab, interval 1, probability 0, space 0, times 0 [ 2192.480659] CPU: 1 PID: 1910 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2192.488474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2192.497824] Call Trace: [ 2192.500415] dump_stack+0x1b2/0x283 [ 2192.504044] should_fail.cold+0x10a/0x154 [ 2192.508196] should_failslab+0xd6/0x130 [ 2192.512167] __kmalloc_track_caller+0x2bc/0x400 [ 2192.516831] ? strndup_user+0x5b/0xf0 [ 2192.520631] memdup_user+0x22/0xa0 [ 2192.524166] strndup_user+0x5b/0xf0 [ 2192.527787] ? copy_mnt_ns+0x8a0/0x8a0 [ 2192.531670] SyS_mount+0x39/0x120 [ 2192.535121] ? copy_mnt_ns+0x8a0/0x8a0 [ 2192.539006] do_syscall_64+0x1d5/0x640 [ 2192.542895] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2192.548080] RIP: 0033:0x45f4ba [ 2192.551263] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2192.558970] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045f4ba [ 2192.566234] RDX: 00007f0a2e401ae0 RSI: 0000000020000040 RDI: 00007f0a2e401b00 [ 2192.573501] RBP: 000000000078bf00 R08: 00007f0a2e401b40 R09: 00007f0a2e401ae0 [ 2192.580764] R10: 0000000002aa482e R11: 0000000000000206 R12: 0000000000000004 [ 2192.588029] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:49 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:49 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000140)={0x0, 0x3, 0x87f2}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x40000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0), 0x2, 0x8}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="0004b5473ef7aee193ac001e000026902000", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) 03:34:49 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8a}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, [], 0x1}}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x8808}, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 03:34:49 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb259}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000440)={0x3, 0x2, @stop_pts=0x63}) [ 2192.844854] hub 9-0:1.0: USB hub found 03:34:49 executing program 2 (fault-call:2 fault-nth:46): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2192.895189] hub 9-0:1.0: 8 ports detected [ 2193.030495] FAULT_INJECTION: forcing a failure. [ 2193.030495] name failslab, interval 1, probability 0, space 0, times 0 [ 2193.096129] CPU: 0 PID: 1945 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2193.104072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2193.113421] Call Trace: [ 2193.116011] dump_stack+0x1b2/0x283 [ 2193.119639] should_fail.cold+0x10a/0x154 [ 2193.123790] should_failslab+0xd6/0x130 [ 2193.127767] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 2193.132439] selinux_parse_opts_str+0x4f8/0xa00 [ 2193.137102] ? debug_object_activate+0x450/0x450 [ 2193.141864] ? selinux_key_alloc+0x1a0/0x1a0 [ 2193.146279] ? selinux_sb_copy_data+0x206/0x380 [ 2193.150953] selinux_sb_remount+0x1e5/0x900 [ 2193.155285] ? selinux_sb_copy_data+0x380/0x380 [ 2193.159957] ? strncpy_from_user+0x199/0x250 [ 2193.164381] security_sb_remount+0x6e/0xa0 [ 2193.168614] do_mount+0x803/0x25e0 [ 2193.172156] ? copy_mount_string+0x40/0x40 [ 2193.176391] ? copy_mount_options+0x140/0x2e0 [ 2193.180885] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 2193.185730] ? copy_mount_options+0x1ec/0x2e0 [ 2193.190219] ? copy_mnt_ns+0x8a0/0x8a0 [ 2193.194102] SyS_mount+0xa8/0x120 [ 2193.197550] ? copy_mnt_ns+0x8a0/0x8a0 [ 2193.201434] do_syscall_64+0x1d5/0x640 [ 2193.205321] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2193.210499] RIP: 0033:0x45f4ba [ 2193.213683] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2193.221382] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045f4ba [ 2193.228644] RDX: 00007f0a2e401ae0 RSI: 0000000020000040 RDI: 00007f0a2e401b00 [ 2193.235903] RBP: 000000000078bf00 R08: 00007f0a2e401b40 R09: 00007f0a2e401ae0 03:34:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x4a002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000080)=ANY=[@ANYBLOB="51034d"], 0x1}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080), 0x10) getpid() [ 2193.243165] R10: 0000000002aa482e R11: 0000000000000206 R12: 0000000000000004 [ 2193.250427] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:50 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:50 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x70042) dup2(r1, r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000380)) r3 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="0000000000000000000e0000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2193.349265] hub 9-0:1.0: USB hub found [ 2193.360528] hub 9-0:1.0: 8 ports detected 03:34:50 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18010, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 03:34:50 executing program 2 (fault-call:2 fault-nth:47): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2193.651437] hub 9-0:1.0: USB hub found 03:34:50 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000100)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 2193.682835] hub 9-0:1.0: 8 ports detected [ 2193.776027] FAULT_INJECTION: forcing a failure. [ 2193.776027] name failslab, interval 1, probability 0, space 0, times 0 03:34:50 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x4a002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000080)=ANY=[@ANYBLOB="51034d"], 0x1}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080), 0x10) getpid() [ 2193.884589] CPU: 1 PID: 1988 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2193.892408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2193.901754] Call Trace: [ 2193.904331] dump_stack+0x1b2/0x283 [ 2193.907944] should_fail.cold+0x10a/0x154 [ 2193.912073] should_failslab+0xd6/0x130 [ 2193.916047] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 2193.920696] ? _copy_from_user+0x94/0x100 [ 2193.924824] ? copy_mnt_ns+0x8a0/0x8a0 [ 2193.928691] copy_mount_options+0x59/0x2e0 [ 2193.932901] ? copy_mnt_ns+0x8a0/0x8a0 [ 2193.936778] SyS_mount+0x84/0x120 [ 2193.940208] ? copy_mnt_ns+0x8a0/0x8a0 [ 2193.944073] do_syscall_64+0x1d5/0x640 [ 2193.947946] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2193.953217] RIP: 0033:0x45f4ba [ 2193.956383] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2193.964088] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045f4ba [ 2193.971337] RDX: 00007f0a2e401ae0 RSI: 0000000020000040 RDI: 00007f0a2e401b00 03:34:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x9}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) [ 2193.978597] RBP: 000000000078bf00 R08: 00007f0a2e401b40 R09: 00007f0a2e401ae0 [ 2193.985854] R10: 0000000002aa482e R11: 0000000000000206 R12: 0000000000000004 [ 2193.993111] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 [ 2194.018054] hub 9-0:1.0: USB hub found [ 2194.040692] hub 9-0:1.0: 8 ports detected 03:34:51 executing program 2 (fault-call:2 fault-nth:48): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2194.252174] FAULT_INJECTION: forcing a failure. [ 2194.252174] name failslab, interval 1, probability 0, space 0, times 0 [ 2194.274517] CPU: 0 PID: 2018 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2194.282357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2194.291815] Call Trace: [ 2194.294404] dump_stack+0x1b2/0x283 [ 2194.298037] should_fail.cold+0x10a/0x154 [ 2194.302189] ? mempool_free+0x1d0/0x1d0 [ 2194.306160] should_failslab+0xd6/0x130 [ 2194.310135] kmem_cache_alloc+0x40/0x3c0 [ 2194.314196] ? mempool_free+0x1d0/0x1d0 [ 2194.318163] mempool_alloc+0x111/0x2d0 [ 2194.322051] ? lock_acquire+0x170/0x3f0 [ 2194.326020] ? remove_element.isra.0+0x1b0/0x1b0 [ 2194.330863] ? ext4_register_li_request+0x79/0x760 [ 2194.335796] ? __mutex_lock+0x2cb/0x1430 [ 2194.339855] ? trace_hardirqs_on+0x10/0x10 [ 2194.344131] bio_alloc_bioset+0x352/0x640 [ 2194.348281] ? __unlock_page_memcg+0x4f/0x100 [ 2194.352768] ? bvec_alloc+0x2d0/0x2d0 [ 2194.356571] submit_bh_wbc+0xf5/0x6f0 [ 2194.360377] __sync_dirty_buffer+0xc3/0x1c0 [ 2194.364698] ext4_commit_super+0x71d/0xa80 [ 2194.368933] ext4_remount+0x1394/0x1d50 [ 2194.372912] ? ext4_register_li_request+0x760/0x760 [ 2194.377927] ? _find_next_bit+0xdb/0x100 [ 2194.381986] ? shrink_dcache_sb+0x184/0x1b0 [ 2194.386305] ? shrink_dentry_list+0xad0/0xad0 [ 2194.390801] do_remount_sb+0x150/0x530 [ 2194.394693] ? ext4_register_li_request+0x760/0x760 [ 2194.399705] ? user_get_super+0x200/0x200 [ 2194.403845] ? security_capable+0x88/0xb0 [ 2194.407996] do_mount+0x12d2/0x25e0 [ 2194.411623] ? copy_mount_string+0x40/0x40 [ 2194.415855] ? copy_mount_options+0x17d/0x2e0 [ 2194.420348] ? __sanitizer_cov_trace_pc+0x46/0x50 [ 2194.425187] ? copy_mount_options+0x1ec/0x2e0 [ 2194.429679] ? copy_mnt_ns+0x8a0/0x8a0 [ 2194.433564] SyS_mount+0xa8/0x120 [ 2194.437011] ? copy_mnt_ns+0x8a0/0x8a0 [ 2194.440899] do_syscall_64+0x1d5/0x640 [ 2194.444799] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2194.449985] RIP: 0033:0x45f4ba 03:34:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, 0x0, &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) [ 2194.453169] RSP: 002b:00007f0a2e401a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2194.460871] RAX: ffffffffffffffda RBX: 0000000000509400 RCX: 000000000045f4ba [ 2194.468132] RDX: 00007f0a2e401ae0 RSI: 0000000020000040 RDI: 00007f0a2e401b00 [ 2194.475399] RBP: 000000000078bf00 R08: 00007f0a2e401b40 R09: 00007f0a2e401ae0 [ 2194.482750] R10: 0000000002aa482e R11: 0000000000000206 R12: 0000000000000004 [ 2194.490013] R13: 0000000000000c08 R14: 00000000004ce532 R15: 00007f0a2e4026d4 03:34:51 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e109090001007665740000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000880)={{0x0, @addr=0x6}, "0fe6c800833daa9f4344e5df9673ad270ff019042b579e7fffaf8fd456881fed", 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 03:34:51 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0x0, 0x100}) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 2194.649607] hub 9-0:1.0: USB hub found [ 2194.676875] hub 9-0:1.0: 8 ports detected 03:34:51 executing program 0 (fault-call:16 fault-nth:0): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000200)=""/114, 0x72}], 0x4, &(0x7f0000000480)=""/80, 0x50}, 0x1}, {{&(0x7f0000000500)=@tipc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000640)=""/128, 0x80}, {&(0x7f00000006c0)=""/252, 0xfc}], 0x4, &(0x7f0000000800)=""/114, 0x72}, 0x7}, {{&(0x7f0000000980)=@generic, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a00)=""/130, 0x82}, {&(0x7f0000000ac0)=""/134, 0x86}, {&(0x7f0000000b80)=""/236, 0xec}, {&(0x7f0000000c80)=""/132, 0x84}], 0x4, &(0x7f0000000d40)=""/87, 0x57}}, {{&(0x7f0000000dc0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000e40)=""/3, 0x3}], 0x1, &(0x7f0000000ec0)=""/196, 0xc4}, 0x80000001}], 0x4, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000008c0)="c33ce2802b36db9175a2b9b0a85bed5037668d92b724508694a310107d671a83d49810f5b5af6a371d8260e58fb71ba47e21ce46e6fafb2071b4dc04a9b1cf95e1e9dea3f8f21beee2d30e00773beed0579a227ba98fd166977735e2246ea03ce941429150c8d537404ce15757dcd23f5f51652f91c59217733665c852b7b454ecc98cd3b80eb5141ad9e7d72d7ef1e63d894561d6562c7028166c376ad9f06923be0491dd001a2c91574a20690a644e2e11232538b21e") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}, @in={0x2, 0x4e22, @local}], 0x20) epoll_create1(0x0) 03:34:51 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e109090001007665740000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80000, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f00000003c0)) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2195.152914] hub 9-0:1.0: USB hub found [ 2195.184072] FAULT_INJECTION: forcing a failure. [ 2195.184072] name failslab, interval 1, probability 0, space 0, times 0 [ 2195.195342] CPU: 0 PID: 2066 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 2195.203133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2195.212470] Call Trace: [ 2195.215045] dump_stack+0x1b2/0x283 [ 2195.218658] should_fail.cold+0x10a/0x154 [ 2195.222788] should_failslab+0xd6/0x130 [ 2195.226742] __kmalloc+0x2c1/0x400 [ 2195.230280] ? __sctp_setsockopt_connectx+0x103/0x280 [ 2195.235453] __sctp_setsockopt_connectx+0x103/0x280 [ 2195.240450] sctp_setsockopt+0x2152/0x3be0 [ 2195.244674] ? sock_has_perm+0x1c0/0x230 [ 2195.248716] ? sctp_setsockopt_paddr_thresholds+0x390/0x390 [ 2195.254408] ? lock_acquire+0x170/0x3f0 [ 2195.258363] ? lock_downgrade+0x6e0/0x6e0 [ 2195.262491] ? selinux_netlbl_socket_setsockopt+0x72/0x300 [ 2195.268094] ? selinux_netlbl_sock_rcv_skb+0x3d0/0x3d0 [ 2195.273354] ? __fget+0x226/0x360 [ 2195.276801] ? selinux_socket_setsockopt+0x60/0x80 [ 2195.281712] ? sock_common_setsockopt+0x1e/0xb0 [ 2195.286366] SyS_setsockopt+0x110/0x1e0 [ 2195.290334] ? SyS_recv+0x40/0x40 [ 2195.293775] ? SyS_clock_settime+0x1a0/0x1a0 [ 2195.298177] ? do_syscall_64+0x4c/0x640 [ 2195.302131] ? SyS_recv+0x40/0x40 [ 2195.305567] do_syscall_64+0x1d5/0x640 [ 2195.309441] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2195.314607] RIP: 0033:0x45ca69 [ 2195.317773] RSP: 002b:00007ff603716c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2195.325460] RAX: ffffffffffffffda RBX: 00000000005053c0 RCX: 000000000045ca69 [ 2195.332706] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000007 [ 2195.339955] RBP: 000000000078c0e0 R08: 0000000000000020 R09: 0000000000000000 [ 2195.347210] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000008 [ 2195.354459] R13: 0000000000000b07 R14: 00000000004d7938 R15: 00007ff6037176d4 [ 2195.376872] hub 9-0:1.0: 8 ports detected 03:34:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, 0x0, &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:52 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e109090001007665740000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000b80d30d7dcca990e0d37316bacbc520498b439f8ce06499849775786affe4914ac23609f222ceba55e403d1767c9dee3c594fc781b707132118e8a67920c08d7c7b566225dd78cba121758c1f3e0562765701d306214585044ade0fd61fea83e176de099faa4675fb600080000234baf3636633b6f8b4f9dde7d6014736bd896c37d9aff46b79b607ad0b4286cf16c987b93a5f0d1c811af54e1869472b709c1db94"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 03:34:52 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) setfsuid(0xee01) 03:34:52 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000000)='./file0\x00', 0x0, 0x1283004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) 03:34:52 executing program 0 (fault-call:16 fault-nth:1): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000200)=""/114, 0x72}], 0x4, &(0x7f0000000480)=""/80, 0x50}, 0x1}, {{&(0x7f0000000500)=@tipc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000640)=""/128, 0x80}, {&(0x7f00000006c0)=""/252, 0xfc}], 0x4, &(0x7f0000000800)=""/114, 0x72}, 0x7}, {{&(0x7f0000000980)=@generic, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a00)=""/130, 0x82}, {&(0x7f0000000ac0)=""/134, 0x86}, {&(0x7f0000000b80)=""/236, 0xec}, {&(0x7f0000000c80)=""/132, 0x84}], 0x4, &(0x7f0000000d40)=""/87, 0x57}}, {{&(0x7f0000000dc0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000e40)=""/3, 0x3}], 0x1, &(0x7f0000000ec0)=""/196, 0xc4}, 0x80000001}], 0x4, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000008c0)="c33ce2802b36db9175a2b9b0a85bed5037668d92b724508694a310107d671a83d49810f5b5af6a371d8260e58fb71ba47e21ce46e6fafb2071b4dc04a9b1cf95e1e9dea3f8f21beee2d30e00773beed0579a227ba98fd166977735e2246ea03ce941429150c8d537404ce15757dcd23f5f51652f91c59217733665c852b7b454ecc98cd3b80eb5141ad9e7d72d7ef1e63d894561d6562c7028166c376ad9f06923be0491dd001a2c91574a20690a644e2e11232538b21e") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}, @in={0x2, 0x4e22, @local}], 0x20) epoll_create1(0x0) [ 2195.557382] hub 9-0:1.0: USB hub found [ 2195.563883] EXT4-fs (sda1): re-mounted. Opts: i_version, [ 2195.592338] hub 9-0:1.0: 8 ports detected 03:34:52 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000140), &(0x7f00000003c0)=0x4) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2195.819754] FAULT_INJECTION: forcing a failure. [ 2195.819754] name failslab, interval 1, probability 0, space 0, times 0 [ 2195.831021] CPU: 0 PID: 2111 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 2195.838811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2195.848153] Call Trace: [ 2195.850729] dump_stack+0x1b2/0x283 [ 2195.854341] should_fail.cold+0x10a/0x154 [ 2195.858469] should_failslab+0xd6/0x130 [ 2195.862422] kmem_cache_alloc+0x40/0x3c0 [ 2195.866467] sctp_get_port_local+0x2f2/0x1020 [ 2195.870940] ? sctp_unhash+0x10/0x10 [ 2195.874642] ? sctp_bind_addr_match+0x184/0x260 [ 2195.879292] ? sctp_inet6_bind_verify+0x94/0x410 [ 2195.884042] sctp_do_bind+0x1df/0x550 [ 2195.887825] sctp_autobind+0x152/0x1c0 [ 2195.891692] ? sctp_do_bind+0x550/0x550 [ 2195.895648] ? sctp_get_af_specific+0x42/0x50 [ 2195.900120] ? sctp_endpoint_is_peeled_off+0xd4/0x10b [ 2195.905291] __sctp_connect+0x66b/0xb60 [ 2195.909251] ? sctp_bindx_rem+0x340/0x340 [ 2195.913377] ? lock_acquire+0x170/0x3f0 [ 2195.917336] ? lock_downgrade+0x6e0/0x6e0 [ 2195.921465] ? __phys_addr_symbol+0x1f/0x60 [ 2195.925763] ? __check_object_size+0x176/0x229 [ 2195.930327] __sctp_setsockopt_connectx+0x1e9/0x280 [ 2195.935320] sctp_setsockopt+0x2152/0x3be0 [ 2195.939532] ? sock_has_perm+0x1c0/0x230 [ 2195.943583] ? sctp_setsockopt_paddr_thresholds+0x390/0x390 [ 2195.949269] ? lock_acquire+0x170/0x3f0 [ 2195.953222] ? lock_downgrade+0x6e0/0x6e0 [ 2195.957347] ? selinux_netlbl_socket_setsockopt+0x72/0x300 [ 2195.962949] ? selinux_netlbl_sock_rcv_skb+0x3d0/0x3d0 [ 2195.968220] ? __fget+0x226/0x360 [ 2195.971652] ? selinux_socket_setsockopt+0x60/0x80 [ 2195.976572] ? sock_common_setsockopt+0x1e/0xb0 [ 2195.981222] SyS_setsockopt+0x110/0x1e0 [ 2195.985175] ? SyS_recv+0x40/0x40 [ 2195.988606] ? SyS_clock_settime+0x1a0/0x1a0 [ 2195.992990] ? do_syscall_64+0x4c/0x640 [ 2195.996942] ? SyS_recv+0x40/0x40 [ 2196.000373] do_syscall_64+0x1d5/0x640 [ 2196.004244] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2196.009410] RIP: 0033:0x45ca69 [ 2196.012576] RSP: 002b:00007ff603716c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 03:34:52 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB="2eb176051fba03"], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000180)=ANY=[@ANYBLOB="695f76657273696f6e2c0044e5839e00a55575a7ce8ed26581e5f59186dc7f2d2e84d4c47dfb3e82d2e1188dfa617520fd0bfae9b8dc6da91ad9c8b4f64dea7f3dd23ae0a4afdaa53a4febd7000000000000065f9b44f05ee34782bc386a29a38a5d2460ed223472a6daa16f4a310bae837e22bea28c09115b1aaec864a8bc18e372aec9b3352e625aecc67925b008185d5aa7e43688775094da9d82a122fc53242f556b37609b0affffab06a3124a0761ba2d2be944b9bb641b85521940c6f19c9ef9e2ea"]) [ 2196.020260] RAX: ffffffffffffffda RBX: 00000000005053c0 RCX: 000000000045ca69 [ 2196.027506] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000007 [ 2196.034753] RBP: 000000000078c0e0 R08: 0000000000000020 R09: 0000000000000000 [ 2196.041998] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000008 [ 2196.049248] R13: 0000000000000b07 R14: 00000000004d7938 R15: 00007ff6037176d4 [ 2196.103782] hub 9-0:1.0: USB hub found [ 2196.129222] hub 9-0:1.0: 8 ports detected 03:34:53 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) keyctl$join(0x1, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="102000"/18, @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000c0}, 0x4004040) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2196.294749] hub 9-0:1.0: USB hub found [ 2196.315114] hub 9-0:1.0: 8 ports detected 03:34:53 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000100)={0x1c, "447a15b71d5e20215dada4dfaf5b88be79ea02577437e96b2d380da8168046ddd882b6ed046b80d649a7cf637b0b69ebf0c3795cc37a190be6db1963c1761a4f9bdc8431d7ef628ba82306767dc8c9d28c490d964efe572341a4698fb61fe1f848e5bdd79a1938eda1f2f728341cef04d8b920d7f2d089caa1e6d92f10db4119"}) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x20200, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x1b, 0x5, 0x8d8, 0x2b8, 0x0, 0xffffffff, 0x2b8, 0x2b8, 0x808, 0x808, 0xffffffff, 0x808, 0x808, 0x5, &(0x7f00000001c0), {[{{@ipv6={@ipv4={[], [], @multicast1}, @local, [0x0, 0xff000000, 0x0, 0xff], [0xffffffff, 0xff0000ff, 0xffffffff, 0xff000000], 'macvlan1\x00', 'nr0\x00', {}, {}, 0x2f, 0x7, 0x7, 0x40}, 0x0, 0x270, 0x2b8, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x5c, 0x40, 0x7, 0x7f, 0x0, @local, @empty, @private1, [0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0xff, 0xff000000, 0xff, 0xff], 0x80, 0x84}}, @common=@rt={{0x138, 'rt\x00'}, {0x4da, [0x9, 0x3e3], 0x2, 0x1, 0x6, [@private1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, [], 0x1}, @dev={0xfe, 0x80, [], 0x3b}, @private0={0xfc, 0x0, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @rand_addr=' \x01\x00', @mcast2, @mcast2, @loopback, @mcast2, @mcast1], 0xb}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x14, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@multicast1, @port=0x4e20, @icmp_id=0x67}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x8, [0x7, 0xffff], 0x401, 0x4, 0x1, [@dev={0xfe, 0x80, [], 0x3a}, @mcast2, @remote, @remote, @private2={0xfc, 0x2, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}, @mcast2, @remote, @local, @remote, @local, @local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @private1], 0xe}}, @common=@mh={{0x28, 'mh\x00'}, {"58fc", 0x1}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xb5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x8000, 0x2}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xffe0, 0x4b}}}, {{@uncond, 0x0, 0x100, 0x228, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x4d5, 0x4d5], 0x76, 0xc9, 0x1}}, @common=@icmp6={{0x28, 'icmp6\x00'}, {0xf, "64e6"}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x49a, 'system_u:object_r:var_auth_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x938) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x4000) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000000)={0x9, @output={0x0, 0x0, {0x8}, 0x4}}) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x3, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)=ANY=[@ANYBLOB='i_versioN,\x00']) 03:34:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, 0x0, &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:53 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x4139557f) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x6) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000100)=0x1, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 03:34:53 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="fdff00000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000087273767036000000180002001400020020010000faffffff0000000000000000feb7b29898543ed17698108fa5e09ec47ace0e5887c8170fc4af89ca62f31fa5e422ff0e956e226fce7301596fe00007cdd6eb0632e34c0d3e498ba99de4deab96dfc707e6c1e7d3bb85a34db2efff5ceb0f8bb5f97f81af6d645a986db6713e115477d3503e636172737f9fd84f20fadd55047852d14d2bba4b7af8064186c3cd029ed71511e9bcda47d95ada86ecfd965a7c0945f2ed9171e985e0653c5835b1cb96af98fd8aeed3", @ANYRES16=r3, @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2196.629759] hub 9-0:1.0: USB hub found [ 2196.650307] hub 9-0:1.0: 8 ports detected 03:34:53 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e109090001007665740000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2196.989574] hub 9-0:1.0: USB hub found [ 2197.002751] hub 9-0:1.0: 8 ports detected 03:34:54 executing program 0 (fault-call:16 fault-nth:2): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000200)=""/114, 0x72}], 0x4, &(0x7f0000000480)=""/80, 0x50}, 0x1}, {{&(0x7f0000000500)=@tipc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000640)=""/128, 0x80}, {&(0x7f00000006c0)=""/252, 0xfc}], 0x4, &(0x7f0000000800)=""/114, 0x72}, 0x7}, {{&(0x7f0000000980)=@generic, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a00)=""/130, 0x82}, {&(0x7f0000000ac0)=""/134, 0x86}, {&(0x7f0000000b80)=""/236, 0xec}, {&(0x7f0000000c80)=""/132, 0x84}], 0x4, &(0x7f0000000d40)=""/87, 0x57}}, {{&(0x7f0000000dc0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000e40)=""/3, 0x3}], 0x1, &(0x7f0000000ec0)=""/196, 0xc4}, 0x80000001}], 0x4, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000008c0)="c33ce2802b36db9175a2b9b0a85bed5037668d92b724508694a310107d671a83d49810f5b5af6a371d8260e58fb71ba47e21ce46e6fafb2071b4dc04a9b1cf95e1e9dea3f8f21beee2d30e00773beed0579a227ba98fd166977735e2246ea03ce941429150c8d537404ce15757dcd23f5f51652f91c59217733665c852b7b454ecc98cd3b80eb5141ad9e7d72d7ef1e63d894561d6562c7028166c376ad9f06923be0491dd001a2c91574a20690a644e2e11232538b21e") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}, @in={0x2, 0x4e22, @local}], 0x20) epoll_create1(0x0) 03:34:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)=@usbdevfs_connect={0x15}) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 03:34:54 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e109090001007665740000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:54 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="e8fdfb7499ddaadfcc7680ef07fbc34fc802222d8f6e4c536f86a821a90eea6b2ed4186ffdd046f5b7f1f98f7b0095e6c2c6db4b3bf2ebe33ac1984c732481ad4e950a23c4678ec1110a6493ed85e26d9a8eb273938922b215718e4252736c1dcd42f6149528786a23c57a2bbaee9c79354f0e924fe48b7d5355d7d5df04790643d074179bb7590d3d6c60d9f54854990d963ebddbe8f742a40cca2c28ce859e1cc9c4163b58870ca34badd007bcbcfe27b903e2d5336a791fb0f51359431a77b13091a2a6f0499305fc360f2ad4ec5bda8d6232a51179f1e387"], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)=ANY=[@ANYBLOB="13000000"]) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r0, &(0x7f0000007940), 0x55, 0x0, 0x0) ioctl$sock_proto_private(r0, 0x89ec, &(0x7f0000000100)="0ae9a17a04ba5fc52355579f4f3e4f7bb34a9f376658956fde00ce1d26cb6de4ccdb6a68e9d7792e219fdf8ea47e120390e20bd3967772f3facb81585d54bf0e71e07b360851d120adbeba475816e4ec5d589560360855e6cdf386a8f0c5304c1a5018b8955fd03acde132b059e1bc9e1efae15d2fd3b8491bb6fb884bdb5599f208cecfe14fcaee789815cd914d30") 03:34:54 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e109090001007665740000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2197.288049] hub 9-0:1.0: USB hub found [ 2197.301102] hub 9-0:1.0: 8 ports detected 03:34:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) pipe(&(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='sit0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) [ 2197.432785] FAULT_INJECTION: forcing a failure. [ 2197.432785] name failslab, interval 1, probability 0, space 0, times 0 [ 2197.444140] CPU: 0 PID: 2222 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 2197.451930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2197.461266] Call Trace: [ 2197.463845] dump_stack+0x1b2/0x283 [ 2197.467454] should_fail.cold+0x10a/0x154 [ 2197.471582] ? sctp_get_port_local+0xaab/0x1020 [ 2197.476231] should_failslab+0xd6/0x130 [ 2197.480188] kmem_cache_alloc_trace+0x47/0x3f0 [ 2197.484751] sctp_add_bind_addr+0x6c/0x350 [ 2197.488964] ? sctp_inet6_bind_verify+0x94/0x410 [ 2197.493696] sctp_do_bind+0x2a9/0x550 [ 2197.497481] sctp_autobind+0x152/0x1c0 [ 2197.501351] ? sctp_do_bind+0x550/0x550 [ 2197.505305] ? sctp_get_af_specific+0x42/0x50 [ 2197.509780] ? sctp_endpoint_is_peeled_off+0xd4/0x10b [ 2197.514949] __sctp_connect+0x66b/0xb60 [ 2197.518908] ? sctp_bindx_rem+0x340/0x340 [ 2197.523033] ? lock_acquire+0x170/0x3f0 [ 2197.526982] ? lock_downgrade+0x6e0/0x6e0 [ 2197.531108] ? __phys_addr_symbol+0x1f/0x60 [ 2197.535406] ? __check_object_size+0x176/0x229 [ 2197.539969] __sctp_setsockopt_connectx+0x1e9/0x280 [ 2197.544964] sctp_setsockopt+0x2152/0x3be0 [ 2197.549177] ? sock_has_perm+0x1c0/0x230 [ 2197.553231] ? sctp_setsockopt_paddr_thresholds+0x390/0x390 [ 2197.558922] ? lock_acquire+0x170/0x3f0 [ 2197.562873] ? lock_downgrade+0x6e0/0x6e0 [ 2197.566999] ? selinux_netlbl_socket_setsockopt+0x72/0x300 [ 2197.572599] ? selinux_netlbl_sock_rcv_skb+0x3d0/0x3d0 [ 2197.577856] ? __fget+0x226/0x360 [ 2197.581294] ? selinux_socket_setsockopt+0x60/0x80 [ 2197.586202] ? sock_common_setsockopt+0x1e/0xb0 [ 2197.590850] SyS_setsockopt+0x110/0x1e0 [ 2197.594801] ? SyS_recv+0x40/0x40 [ 2197.598236] ? SyS_clock_settime+0x1a0/0x1a0 [ 2197.602626] ? do_syscall_64+0x4c/0x640 [ 2197.606576] ? SyS_recv+0x40/0x40 [ 2197.610009] do_syscall_64+0x1d5/0x640 [ 2197.613878] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2197.619044] RIP: 0033:0x45ca69 [ 2197.622215] RSP: 002b:00007ff603716c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 03:34:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:54 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2197.629901] RAX: ffffffffffffffda RBX: 00000000005053c0 RCX: 000000000045ca69 [ 2197.637169] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000007 [ 2197.644416] RBP: 000000000078c0e0 R08: 0000000000000020 R09: 0000000000000000 [ 2197.651663] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000008 [ 2197.658912] R13: 0000000000000b07 R14: 00000000004d7938 R15: 00007ff6037176d4 [ 2197.750915] hub 9-0:1.0: USB hub found 03:34:54 executing program 0 (fault-call:16 fault-nth:3): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000200)=""/114, 0x72}], 0x4, &(0x7f0000000480)=""/80, 0x50}, 0x1}, {{&(0x7f0000000500)=@tipc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000640)=""/128, 0x80}, {&(0x7f00000006c0)=""/252, 0xfc}], 0x4, &(0x7f0000000800)=""/114, 0x72}, 0x7}, {{&(0x7f0000000980)=@generic, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a00)=""/130, 0x82}, {&(0x7f0000000ac0)=""/134, 0x86}, {&(0x7f0000000b80)=""/236, 0xec}, {&(0x7f0000000c80)=""/132, 0x84}], 0x4, &(0x7f0000000d40)=""/87, 0x57}}, {{&(0x7f0000000dc0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000e40)=""/3, 0x3}], 0x1, &(0x7f0000000ec0)=""/196, 0xc4}, 0x80000001}], 0x4, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000008c0)="c33ce2802b36db9175a2b9b0a85bed5037668d92b724508694a310107d671a83d49810f5b5af6a371d8260e58fb71ba47e21ce46e6fafb2071b4dc04a9b1cf95e1e9dea3f8f21beee2d30e00773beed0579a227ba98fd166977735e2246ea03ce941429150c8d537404ce15757dcd23f5f51652f91c59217733665c852b7b454ecc98cd3b80eb5141ad9e7d72d7ef1e63d894561d6562c7028166c376ad9f06923be0491dd001a2c91574a20690a644e2e11232538b21e") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}, @in={0x2, 0x4e22, @local}], 0x20) epoll_create1(0x0) [ 2197.772548] hub 9-0:1.0: 8 ports detected 03:34:54 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x7, 0x0, 0x2) fcntl$setpipe(r1, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x1f) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000100)) [ 2198.001111] FAULT_INJECTION: forcing a failure. [ 2198.001111] name failslab, interval 1, probability 0, space 0, times 0 [ 2198.012396] CPU: 1 PID: 2253 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 2198.020183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2198.029518] Call Trace: [ 2198.032089] dump_stack+0x1b2/0x283 [ 2198.035699] should_fail.cold+0x10a/0x154 [ 2198.039828] should_failslab+0xd6/0x130 [ 2198.043799] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 2198.048449] ? sctp_autobind+0x152/0x1c0 [ 2198.052487] sctp_association_new+0x68/0x1ed0 [ 2198.056971] ? sctp_v4_scope+0xf7/0x120 [ 2198.060925] __sctp_connect+0x62b/0xb60 [ 2198.064884] ? sctp_bindx_rem+0x340/0x340 [ 2198.069025] ? lock_acquire+0x170/0x3f0 [ 2198.072985] ? lock_downgrade+0x6e0/0x6e0 [ 2198.077110] ? __phys_addr_symbol+0x1f/0x60 [ 2198.081413] ? __check_object_size+0x176/0x229 [ 2198.085976] __sctp_setsockopt_connectx+0x1e9/0x280 [ 2198.090970] sctp_setsockopt+0x2152/0x3be0 [ 2198.095194] ? sock_has_perm+0x1c0/0x230 [ 2198.099233] ? sctp_setsockopt_paddr_thresholds+0x390/0x390 [ 2198.104920] ? lock_acquire+0x170/0x3f0 [ 2198.108874] ? lock_downgrade+0x6e0/0x6e0 [ 2198.113000] ? selinux_netlbl_socket_setsockopt+0x72/0x300 [ 2198.118600] ? selinux_netlbl_sock_rcv_skb+0x3d0/0x3d0 [ 2198.123857] ? __fget+0x226/0x360 [ 2198.127291] ? selinux_socket_setsockopt+0x60/0x80 [ 2198.134026] ? sock_common_setsockopt+0x1e/0xb0 [ 2198.138676] SyS_setsockopt+0x110/0x1e0 [ 2198.142627] ? SyS_recv+0x40/0x40 [ 2198.146062] ? SyS_clock_settime+0x1a0/0x1a0 [ 2198.150446] ? do_syscall_64+0x4c/0x640 [ 2198.154396] ? SyS_recv+0x40/0x40 [ 2198.157839] do_syscall_64+0x1d5/0x640 [ 2198.161709] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2198.166881] RIP: 0033:0x45ca69 [ 2198.170047] RSP: 002b:00007ff603716c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2198.177733] RAX: ffffffffffffffda RBX: 00000000005053c0 RCX: 000000000045ca69 [ 2198.184978] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000007 [ 2198.192229] RBP: 000000000078c0e0 R08: 0000000000000020 R09: 0000000000000000 [ 2198.199474] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000008 [ 2198.206721] R13: 0000000000000b07 R14: 00000000004d7938 R15: 00007ff6037176d4 03:34:55 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2198.255187] hub 9-0:1.0: USB hub found [ 2198.259354] hub 9-0:1.0: 8 ports detected 03:34:55 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="2e2fcf1f661113584b7f51e221bdf452f63fa665f4fd92be82655bab66bdb3e7b104f0fcc64192382ad84832bc9f26e2e18c4ce5b0b3a57b578b9d8329f08fba65ca4296c9cddb43ccfca19682a0829c4c4757227e72e77ce0390fba1f2518be3721cbe4cd65a51041b0b9f180afd0968381acc02974ac230382d7c0c61c22f3643bdca5c241c777eb08750c67f52f754e619d8aa6aee28e3307309df50e3c3799e8e4439f913e6619d6c9c3ccc182bbac76cc6259fbfad286579dc29f417999e84a1c749017967d84c6e4d8598edcace6744a3bec1856d67846554962990145a4b639936c2195ad5515efa489a52629bcc0138b86cd17bb99a7745d7810de688bdec8164f620961c477c69e69116edfe31354e06b501c34d804d788cc7ad19cd8a135d5f032d639701d32d6f2348e0ad7b4e6df"], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) 03:34:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) write$snddsp(0xffffffffffffffff, &(0x7f0000000980)="0df762fe08b08776e5eeaef3a157f26cf36b2f396b880766263c26078188fce2d74c4875a1fbcfc60528637d33cd1f41ac555a0ed5275bbfd53b61c809cdd05d383c88b98884b736b2d079c0e562f8c09990dc3d21a08e1c0a8cc1f21b82ea22fa3d73395913be1bb0d2613eba2a8e5f5dd94e5a001d0cca50ddf84854a58b30c7bbb7b51103cab9367fc6a371a89d00171450fc16708da4fd503c759b174ae0aef0293921843088e5944f983f89cd61048abb9680ea6b24793f69be8773a38fd4c7", 0xc2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="4500000075000000ff8e0000abc9b19976037ef9419550ed2398cfd3d17a3f5a46917e7138711bc3868469db37add59ad7569bcdb205cf5204000000b6953cabbbdf0ea04b081a3b08dac841ecc156b7a1bd772bb5cb1096a3cb2059e04ac756299557ef02e5b81eb0408fce5600040000adaa4f5f0396c46bda800d9b1dfb49a8698c0f048fb7d10f34b252020b6cea6c494314f82dd29f8940ebd6fbe7c29b05c79500f05a582a7c9c6a41d5d2a55f219d50956b9cbb9bfe5726c30623174ea0f557b45f3a915bfb71b1fa2e89492e7d83f6cb2a1681de1f825ee37022c06e15319fa862247e0158cf719b"]) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2198.402823] hub 9-0:1.0: USB hub found [ 2198.432258] hub 9-0:1.0: 8 ports detected 03:34:55 executing program 0 (fault-call:16 fault-nth:4): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000200)=""/114, 0x72}], 0x4, &(0x7f0000000480)=""/80, 0x50}, 0x1}, {{&(0x7f0000000500)=@tipc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000640)=""/128, 0x80}, {&(0x7f00000006c0)=""/252, 0xfc}], 0x4, &(0x7f0000000800)=""/114, 0x72}, 0x7}, {{&(0x7f0000000980)=@generic, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a00)=""/130, 0x82}, {&(0x7f0000000ac0)=""/134, 0x86}, {&(0x7f0000000b80)=""/236, 0xec}, {&(0x7f0000000c80)=""/132, 0x84}], 0x4, &(0x7f0000000d40)=""/87, 0x57}}, {{&(0x7f0000000dc0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000e40)=""/3, 0x3}], 0x1, &(0x7f0000000ec0)=""/196, 0xc4}, 0x80000001}], 0x4, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000008c0)="c33ce2802b36db9175a2b9b0a85bed5037668d92b724508694a310107d671a83d49810f5b5af6a371d8260e58fb71ba47e21ce46e6fafb2071b4dc04a9b1cf95e1e9dea3f8f21beee2d30e00773beed0579a227ba98fd166977735e2246ea03ce941429150c8d537404ce15757dcd23f5f51652f91c59217733665c852b7b454ecc98cd3b80eb5141ad9e7d72d7ef1e63d894561d6562c7028166c376ad9f06923be0491dd001a2c91574a20690a644e2e11232538b21e") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}, @in={0x2, 0x4e22, @local}], 0x20) epoll_create1(0x0) 03:34:55 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB="ff2f66696c6530"], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000100)={0x49, 0x29, 0x1, {0x400, [{{0xc7, 0x3, 0x4}, 0x401, 0x4, 0x7, './file1'}, {{0x10, 0x4, 0x5}, 0x800, 0x0, 0x7, './file0'}]}}, 0x49) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) 03:34:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:55 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) r4 = accept$ax25(0xffffffffffffffff, &(0x7f0000000440)={{0x3, @default}, [@null, @rose, @rose, @null, @rose, @default, @netrom]}, &(0x7f0000000140)=0x48) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000003c0)=r3) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="000000000000000000000000000000001020d8878c8cadba926767a3187568811a30edbb02c4dda299832ff82482580781faaa193fc8e35e0907ece331e50c480bad08f59bc9b643989c8e73db567652fbb82fd5d4d07f093d7cccf3a8de9f49a6000ecb70e76425adf2f91471b226bf962a79b82c278639883f3c1bf61fb0d634d6258677", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2198.688529] hub 9-0:1.0: USB hub found [ 2198.708350] FAULT_INJECTION: forcing a failure. [ 2198.708350] name failslab, interval 1, probability 0, space 0, times 0 [ 2198.713458] hub 9-0:1.0: 8 ports detected [ 2198.719741] CPU: 0 PID: 2323 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 2198.719748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2198.719752] Call Trace: [ 2198.719770] dump_stack+0x1b2/0x283 [ 2198.719787] should_fail.cold+0x10a/0x154 [ 2198.719803] should_failslab+0xd6/0x130 [ 2198.719815] __kmalloc+0x2c1/0x400 [ 2198.719825] ? sctp_stream_init+0x94/0x2b0 [ 2198.719836] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2198.719848] sctp_stream_init+0x94/0x2b0 [ 2198.719861] sctp_association_new+0x10d6/0x1ed0 [ 2198.719877] __sctp_connect+0x62b/0xb60 [ 2198.719895] ? sctp_bindx_rem+0x340/0x340 [ 2198.719906] ? lock_acquire+0x170/0x3f0 [ 2198.719915] ? lock_downgrade+0x6e0/0x6e0 [ 2198.719927] ? __phys_addr_symbol+0x1f/0x60 [ 2198.719937] ? __check_object_size+0x176/0x229 [ 2198.719951] __sctp_setsockopt_connectx+0x1e9/0x280 [ 2198.719963] sctp_setsockopt+0x2152/0x3be0 [ 2198.719973] ? sock_has_perm+0x1c0/0x230 [ 2198.719983] ? sctp_setsockopt_paddr_thresholds+0x390/0x390 [ 2198.719992] ? lock_acquire+0x170/0x3f0 [ 2198.720001] ? lock_downgrade+0x6e0/0x6e0 [ 2198.720010] ? selinux_netlbl_socket_setsockopt+0x72/0x300 [ 2198.720019] ? selinux_netlbl_sock_rcv_skb+0x3d0/0x3d0 [ 2198.720033] ? __fget+0x226/0x360 [ 2198.720047] ? selinux_socket_setsockopt+0x60/0x80 [ 2198.720060] ? sock_common_setsockopt+0x1e/0xb0 [ 2198.720079] SyS_setsockopt+0x110/0x1e0 [ 2198.720090] ? SyS_recv+0x40/0x40 [ 2198.720103] ? SyS_clock_settime+0x1a0/0x1a0 [ 2198.720114] ? do_syscall_64+0x4c/0x640 [ 2198.720124] ? SyS_recv+0x40/0x40 [ 2198.720136] do_syscall_64+0x1d5/0x640 [ 2198.720151] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2198.720158] RIP: 0033:0x45ca69 03:34:55 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000000)={0x3000, 0xd000, 0x8, 0x5, 0xffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 2198.720163] RSP: 002b:00007ff603716c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2198.720174] RAX: ffffffffffffffda RBX: 00000000005053c0 RCX: 000000000045ca69 [ 2198.720179] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000007 [ 2198.720184] RBP: 000000000078c0e0 R08: 0000000000000020 R09: 0000000000000000 [ 2198.720190] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000008 [ 2198.720196] R13: 0000000000000b07 R14: 00000000004d7938 R15: 00007ff6037176d4 03:34:55 executing program 0 (fault-call:16 fault-nth:5): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000200)=""/114, 0x72}], 0x4, &(0x7f0000000480)=""/80, 0x50}, 0x1}, {{&(0x7f0000000500)=@tipc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000640)=""/128, 0x80}, {&(0x7f00000006c0)=""/252, 0xfc}], 0x4, &(0x7f0000000800)=""/114, 0x72}, 0x7}, {{&(0x7f0000000980)=@generic, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a00)=""/130, 0x82}, {&(0x7f0000000ac0)=""/134, 0x86}, {&(0x7f0000000b80)=""/236, 0xec}, {&(0x7f0000000c80)=""/132, 0x84}], 0x4, &(0x7f0000000d40)=""/87, 0x57}}, {{&(0x7f0000000dc0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000e40)=""/3, 0x3}], 0x1, &(0x7f0000000ec0)=""/196, 0xc4}, 0x80000001}], 0x4, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000008c0)="c33ce2802b36db9175a2b9b0a85bed5037668d92b724508694a310107d671a83d49810f5b5af6a371d8260e58fb71ba47e21ce46e6fafb2071b4dc04a9b1cf95e1e9dea3f8f21beee2d30e00773beed0579a227ba98fd166977735e2246ea03ce941429150c8d537404ce15757dcd23f5f51652f91c59217733665c852b7b454ecc98cd3b80eb5141ad9e7d72d7ef1e63d894561d6562c7028166c376ad9f06923be0491dd001a2c91574a20690a644e2e11232538b21e") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}, @in={0x2, 0x4e22, @local}], 0x20) epoll_create1(0x0) 03:34:55 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)=ANY=[@ANYBLOB="475f76658073696f6e2c00"]) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f00000001c0)=0x10) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x4000000000002d0, 0x0) sendmmsg$inet6(r0, &(0x7f0000005f00)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x700000, @private0={0xfc, 0x0, [], 0x1}, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f0000000240)="8a66acffa141e21cc9d1c3d19326bd5d5c6e46a814e58cc79b297a32482f88369a7b5a4b037051463a3e3f436e76d4c717efd3abd0dd5c374fb6bf2f03d0cb1abe34dd592ca9f9c99b876e53cfac451efa4319c1fe80ea397345f4bb62cd0e0c26ebf38a544a214716f96d198c90eb93da9b7368c720766430285b45b8cbac14cdf25d6e67aaae0a84d0d4ee4fccf82b52e6a935eded702a9aa334f7615093b52ccc1b37bd12e88c0c5d0dcc30cffc57aacf1eacdf21", 0xb6}, {&(0x7f0000000300)="e3f88800b05de1e131ae3c03e76e7a1a09f7f1120c22bfe2d62dc48f83b45cde67c523bebeaa34f83e099b4114cb68dc439e0ec9ef122a829680b16855f96f36dc8a44c9b656cea45ce7d9017c8f60c7cf154896ad694f9500bef69557d4c9877c58aead7265a83c068d41ddcb0509c429b956a762d6b69f9b8fbf9aeb3c2eb3211dc2db1b02ac2a692c78af8b87257e87b5a2", 0x93}], 0x3, &(0x7f00000014c0)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x29, 0x2, 0x2, 0x9, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @hopopts={{0x38, 0x29, 0x36, {0x67, 0x3, [], [@enc_lim={0x4, 0x1, 0x21}, @pad1, @ra={0x5, 0x2, 0x7ea}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7fff}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @dstopts={{0xf0, 0x29, 0x37, {0x33, 0x1a, [], [@ra={0x5, 0x2, 0x4}, @generic={0x6, 0xcc, "750021a1879d239d9aff572a84ed73fa1a4888c30893fac7db3679cc129cdd33942b117cf9a9d59b1a3bc14c590c697402128c7e1a3d91209b408b230925fdbf44b445a1703d86ef1d7fe474768f83e60de767f355b4e3b2fc1ffc8c8c2efde0e2216120c6cbc3b10bcff6989e3d5af2d703f257230122dac7f4a432900280c32f45ca0ac90fe2578357aac50c398f3acf87b9c0786373dce4e9a67598b6063f31d5e4de7cd8b90e56cfdd222a38395cf97bd5539f54b2ddb352e82c633a5ab6895bedd1a8a0ec80df5cb6b8"}]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x2f, 0x14, 0x2, 0x2, 0x0, [@remote, @mcast1, @private0, @mcast2, @empty, @mcast2, @ipv4={[], [], @local}, @ipv4={[], [], @broadcast}, @private2, @remote]}}}], 0x248}}, {{&(0x7f0000000400)={0xa, 0x4e23, 0xfffff000, @mcast2, 0xff}, 0x1c, &(0x7f0000002a40)=[{&(0x7f0000001740)="62253891145eeda49dd3e44faaf435f5c309b7a67778a6fdf331f25dd9fdf660f38cf96dda5bd17179372d24c162f5898f581c3477e36979a132119bd7292414e034082bbc4f0245a479dbe2c141bfc950cc89e3d9cd", 0x56}, {&(0x7f0000000440)="83", 0x1}, {&(0x7f00000017c0)="a6a993d0a7f6801e8ba01407dac69d1c2bd2b906b15550e557f0f3d44ebe25ee4a1ca615686f4032cd446ac8ce8be040b67af3b39588c3399cbfe33e3ad7eb0f96989b989478f9dc9544d37c52e3ff1b81f2fce99595b3cf5a747ff044a6", 0x5e}, {&(0x7f0000001840)="d98d0a281dbbf958ad787927ba086234453cf23f3e3e67de44eeb97add55a3e0b82318f6b88bd1f10a84f803c7d094d17987ad119ae5c19ce244bb5e8275d9a584813c265916b32f7eb5a9d510ef2c2afdc955f4ce7265e8eb1e7947574270a46074ffa379a6dd1520", 0x69}, {&(0x7f00000018c0)="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", 0x1000}, {&(0x7f00000028c0)="c52092726329da264eb7c2082641f490d78e6147cbbb47b8f256c8c26bc15ea23b7fbffcca1ba41be233129f7cc4b86d9e8aa7883884698279a6ce86350a32e7d70759bf97a07a93771a32c7c1987402944aef19f1bf70307ed1fbc7134ff5ef553e1cc899cf6283f7f7f5bacc6c6e1d8543d0601f0742a4b42530ec100d4a310c741bbb20730ff093128581a3ee4fe6e7cb9546251ab23d674d5d2e67c721422f9070e7240e7d339178fed5695dacb9a526e8464f102d90092bd7601aaea5aec556478045d21dcff01ac8886073402a2005c868b9a0102fe9e830ddf4bd", 0xde}, {&(0x7f00000029c0)="7ea1f20584bfbb99940184e10d17676f14e5871947a7efab9cf2fb023b4cd6a11987e6e70970a942787717782ddbceb44e01b198aaa81d5b76d6ad42bb4b708c0658d1faed329cf8d6bac99d83d2a090323dc9593c0756a31cf25baac4cd62b54b7d786bcb8860f7983644f2e5e50b8a672d3a263a3769b94aa02595ffd238", 0x7f}], 0x7}}, {{&(0x7f0000002ac0)={0xa, 0x4e21, 0x7, @mcast1, 0x6}, 0x1c, &(0x7f0000004c80)=[{&(0x7f0000002b00)="07dda14eb041c17479112b557ba7a92eb4481db088b9b3179632921c52226a36a813f4ef91927bc6745e831d6266b40c9cff5f7a008eab49f4e57b02daf0860226d34d8db4aaf5ec70d7599b29bfb15279d3feec01dac819ccf640bfbaf08aa03b47317452f9dfd2997966ae00049054339a603647116e33785425bbf9a6a8ce395766e2053d4c1d7eb0c44324e685820703ead3310057119de64fe8a9c67330a4953b640a09097f2a376b588dba81ddf74472b7e6dc9cb872d60c053a4878954c6c03d4d43f08794d7e542ec36e4d6a1b2af856c30b8cd5e974decfd0b12f0b753a3d1a5a8bc4aa", 0xe8}, {&(0x7f0000002c00)="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", 0x1000}, {&(0x7f0000003c00)="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", 0x1000}, {&(0x7f0000004c00)="1b1487244f902e54405668179861be3641d2af1d1d25f405aa2af4ec26a405a7459580ed35c7068ebb945033d0be8f581c0b97d62695ad70b07260bc106f20fd0af15b03f956", 0x46}], 0x4, &(0x7f0000004cc0)=[@dstopts={{0x138, 0x29, 0x37, {0x2b, 0x24, [], [@pad1, @generic={0x6, 0xe5, "d9210aa6e74e46aa052f8728180c96d4c88488d5d562ef5ea08e4fcfd0f05d5ca0e480d7e6c5e3ccc25cb9b3dffc57cee1bcfed136c769b142795c3188fb1654d35f1270e3279f3a38024e13bc9f1ed0d0abefc564a9ca6cb72b1b2fd61d348d5def706f1e04f788b9d1769fc6259d27de268e70481d757c54ccaaae35dc197207a41b67db995c7aa68e3e059d08c99a57c5252549a8f461654de7a4a214e12363dbf6d15e5248a3f2e1dba0658fb869f2c17b0ce5629330a84751a045d00bdfa03c8d752751fb0555b1b35a1e270126a4328b811635b875849526808f67d1e3df71a0add7"}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @ipv4={[], [], @broadcast}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x2, 0x6, 0x1, 0x8, 0x0, [@rand_addr=' \x01\x00', @remote, @mcast1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x200}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x5e, 0x5, [], [@enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0xe, "481bfd87eb7326bb649422f5e894"}]}}}, @hopopts_2292={{0x1038, 0x29, 0x36, {0x32, 0x203, [], [@generic={0x0, 0x1000, "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"}, @pad1, @hao={0xc9, 0x10, @private0}, @pad1, @enc_lim={0x4, 0x1, 0x81}]}}}], 0x1210}}], 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000100)={{0x0, @loopback, 0x4e21, 0x0, 'rr\x00', 0x11, 0xcf4a, 0x6a}, {@remote, 0x3ee8, 0x0, 0x7fffffff, 0xd5b1}}, 0x44) 03:34:56 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000440)="942f351e1e0bd1066b3497b9f992c4522e43a6538455e5527cc6f48db85eb80407963a98e9b8e06633dda40c95df17716dedd31c53d96abe7fb02ad609baec7c75bc476268088c6b2e36a01b32f5e9573ebd36f2add488e895812db4bb71d31c7a366aeb49ea223d6c95a09345f42eaebda56a68e35a04faf912ad79ffc1981b4e669bc23f80345a8738e927731fc1c93f53f575a683a3b1f4345dc649f00013b6b80000cdb1d8c13eaf1d60b410f2733eeac2") sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0xffffffffffffff44, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYRES16=r3, @ANYBLOB="d292152586d9e7ffed81551ff33fe2b5a1237b5917d7742ffac1a71ce4bdd27e33a180039069ca0f174f8b43b29cd0ae0bbe901d3106660dfaf93ebe3cc91f747875497c8f9746f84588e4095f37ed3f76e6333f5afecb017ed4d4f9eb0d800561600e6814cb8c2e0ffc5a6cf3f4f04f4b5bc2d3aa2c8d36a79638aca645aee95a786f5057367dfae91aee9064f2ea1f8f2d1b2540a93bae584164c41bfddfad0093", @ANYBLOB="00000000000000070073767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x20000000) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2199.105772] EXT4-fs (sda1): Unrecognized mount option "G_ve€sion" or missing value [ 2199.194179] hub 9-0:1.0: USB hub found [ 2199.220153] EXT4-fs (sda1): Unrecognized mount option "G_ve€sion" or missing value [ 2199.236083] FAULT_INJECTION: forcing a failure. [ 2199.236083] name failslab, interval 1, probability 0, space 0, times 0 [ 2199.247348] CPU: 0 PID: 2368 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 2199.255142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2199.264491] Call Trace: [ 2199.267079] dump_stack+0x1b2/0x283 [ 2199.270713] should_fail.cold+0x10a/0x154 [ 2199.274868] should_failslab+0xd6/0x130 [ 2199.278845] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 2199.283515] sctp_auth_shkey_create+0x58/0x130 [ 2199.288097] sctp_auth_asoc_copy_shkeys+0x1d1/0x2a0 [ 2199.293114] sctp_association_new+0x148a/0x1ed0 [ 2199.297789] __sctp_connect+0x62b/0xb60 [ 2199.301775] ? sctp_bindx_rem+0x340/0x340 [ 2199.305921] ? lock_acquire+0x170/0x3f0 [ 2199.309896] ? lock_downgrade+0x6e0/0x6e0 [ 2199.314046] ? __phys_addr_symbol+0x1f/0x60 [ 2199.318369] ? __check_object_size+0x176/0x229 [ 2199.320798] hub 9-0:1.0: 8 ports detected [ 2199.322948] __sctp_setsockopt_connectx+0x1e9/0x280 [ 2199.322962] sctp_setsockopt+0x2152/0x3be0 [ 2199.322974] ? sock_has_perm+0x1c0/0x230 [ 2199.322984] ? sctp_setsockopt_paddr_thresholds+0x390/0x390 [ 2199.322994] ? lock_acquire+0x170/0x3f0 [ 2199.323003] ? lock_downgrade+0x6e0/0x6e0 [ 2199.323014] ? selinux_netlbl_socket_setsockopt+0x72/0x300 [ 2199.323024] ? selinux_netlbl_sock_rcv_skb+0x3d0/0x3d0 [ 2199.323037] ? __fget+0x226/0x360 [ 2199.368628] ? selinux_socket_setsockopt+0x60/0x80 [ 2199.373538] ? sock_common_setsockopt+0x1e/0xb0 [ 2199.378186] SyS_setsockopt+0x110/0x1e0 [ 2199.382139] ? SyS_recv+0x40/0x40 [ 2199.385586] ? SyS_clock_settime+0x1a0/0x1a0 [ 2199.389989] ? do_syscall_64+0x4c/0x640 [ 2199.393952] ? SyS_recv+0x40/0x40 [ 2199.397390] do_syscall_64+0x1d5/0x640 [ 2199.401266] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2199.406438] RIP: 0033:0x45ca69 [ 2199.409609] RSP: 002b:00007ff603716c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2199.417321] RAX: ffffffffffffffda RBX: 00000000005053c0 RCX: 000000000045ca69 [ 2199.424573] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000007 [ 2199.431832] RBP: 000000000078c0e0 R08: 0000000000000020 R09: 0000000000000000 [ 2199.439082] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000008 [ 2199.446337] R13: 0000000000000b07 R14: 00000000004d7938 R15: 00007ff6037176d4 03:34:56 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000140)) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000440)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c491e54e722eec478dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a194b2d8afdeafcedde48ccd20937be05fb73f6f300"/120, 0x78}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) socket$inet6(0xa, 0x4, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000ffff0000ffffffffffffff00001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001500020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 03:34:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000200)=""/114, 0x72}], 0x4, &(0x7f0000000480)=""/80, 0x50}, 0x1}, {{&(0x7f0000000500)=@tipc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000640)=""/128, 0x80}, {&(0x7f00000006c0)=""/252, 0xfc}], 0x4, &(0x7f0000000800)=""/114, 0x72}, 0x7}, {{&(0x7f0000000980)=@generic, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a00)=""/130, 0x82}, {&(0x7f0000000ac0)=""/134, 0x86}, {&(0x7f0000001100)=""/250, 0xfa}, {&(0x7f0000000c80)=""/132, 0x84}], 0x4, &(0x7f0000000d40)=""/87, 0x57}}, {{&(0x7f0000000dc0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000e40)=""/3, 0x3}], 0x1, &(0x7f0000000ec0)=""/196, 0xc4}, 0x80000001}], 0x4, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @private=0xa010102}}, @in={0x2, 0x0, @remote}], 0x2c) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000b80)={{0xe1, 0x3}, 'port1\x00', 0x3a, 0x8, 0x1800, 0x9e2, 0xfff, 0x400, 0x401, 0x0, 0x2, 0x5}) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000008c0)="c33ce2802b36db9175a2b9b0a85bed5037668d92b724508694a310107d671a83d49810f5b5af6a371d8260e58fb71ba47e21ce46e6fafb2071b4dc04a9b1cf95e1e9dea3f8f21beee2d30e00773beed0579a227ba98fd166977735e2246ea03ce941429150c8d537404ce15757dcd23f5f51652f91c59217733665c852b7b454ecc98cd3b80eb5141ad9e7d72d7ef1e63d894561d6562c7028166c376ad9f06923be0491dd001a2c91574a20690a644e2e11232538b21e") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}, @in={0x2, 0x4e22, @local}], 0x20) epoll_create1(0x0) [ 2199.609384] hub 9-0:1.0: USB hub found [ 2199.631278] hub 9-0:1.0: 8 ports detected 03:34:56 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r0, &(0x7f0000007940), 0x55, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4, 0x3, 0x3, 0xfffffffffffffffd}, 0x0) ptrace(0x11, r2) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000140)={0x3, 0x4, {r2}, {0xffffffffffffffff}, 0x100000001, 0x400}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}}}, 0x78) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}}}, 0x78) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x1, 0x1}, [{0x2, 0x4, r3}], {0x4, 0x4}, [{0x8, 0x2, r5}, {0x8, 0x0, r7}], {0x10, 0x2}, {0x20, 0x4}}, 0x3c, 0x2) 03:34:56 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2199.772152] hub 9-0:1.0: USB hub found [ 2199.779235] hub 9-0:1.0: 8 ports detected 03:34:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x4000000000002d0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="0000000000e6838d14599170360000001800f97f5377a16c3d9dce31faffffff0000000000000000ff5d2b24ab063a65b7c1930ddadc91b4a4755635a3341b243c13b29469e309ce3204f75f556310fd5163dfc36de7f0a022b420cab1e04b84041580a207f1038fe3124f13ff8dd25a5be48aa997384c98c62a154ea8259162683268fcddb57d33dac8ef7043554f882efbdf02b6a7166a0dd3d3e20918899401dfaba1d49ff1e96ae58ac8259afad7508907946d7447023a68fe73807d41f3f1"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2199.851637] hub 9-0:1.0: USB hub found [ 2199.861834] EXT4-fs (sda1): re-mounted. Opts: i_version, [ 2199.884566] hub 9-0:1.0: 8 ports detected 03:34:56 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x100, 0x8359}, &(0x7f0000000100)=0x10) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 03:34:56 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_disconnect={0x8}) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x171280, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="00000000000000000000000004000f25479031da69aac6e5ef3d99b96882f1e8ecf52855a3a392630d75da81cb357bd995141004390f821502f7b1b87f4e1e187cb2913c154c49990545e42101f0853870a7eb4e627061bc997f1d10affddbd8edbf7289887056be0ec7daa3ff5d909c78e99f48b74a8308e63e234a6f2d88fad03b42754d17d3f95e94cd263db8469fc316731027bd0f1680e0da31f91909cd8dfb65b673ad43dbae5d4e104f63b977062f27245c7905cf303f0bf445664b1d95d8c80f510a5876cc45294f2a73ee13d903a3b53062fee609ddffe292aaacce5c2d6626ac18cb4a19f37429d00dc5f0", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2200.119506] hub 9-0:1.0: USB hub found [ 2200.137350] hub 9-0:1.0: 8 ports detected 03:34:57 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100000, 0x0) finit_module(r3, &(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2200.328060] hub 9-0:1.0: USB hub found [ 2200.346123] hub 9-0:1.0: 8 ports detected 03:34:57 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000200)=""/114, 0x72}], 0x4, &(0x7f0000000480)=""/80, 0x50}, 0x1}, {{&(0x7f0000000500)=@tipc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000640)=""/128, 0x80}, {&(0x7f00000006c0)=""/252, 0xfc}], 0x4, &(0x7f0000000800)=""/114, 0x72}, 0x7}, {{&(0x7f0000000980)=@generic, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a00)=""/130, 0x82}, {&(0x7f0000000ac0)=""/134, 0x86}, {&(0x7f0000000b80)=""/236, 0xec}, {&(0x7f0000000c80)=""/132, 0x84}], 0x4, &(0x7f0000000d40)=""/87, 0x57}}, {{&(0x7f0000000dc0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000e40)=""/3, 0x3}], 0x1, &(0x7f0000000ec0)=""/196, 0xc4}, 0x80000001}], 0x4, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000008c0)="c33ce2802b36db9175a2b9b0a85bed5037668d92b724508694a310107d671a83d49810f5b5af6a371d8260e58fb71ba47e21ce46e6fafb2071b4dc04a9b1cf95e1e9dea3f8f21beee2d30e00773beed0579a227ba98fd166977735e2246ea03ce941429150c8d537404ce15757dcd23f5f51652f91c59217733665c852b7b454ecc98cd3b80eb5141ad9e7d72d7ef1e63d894561d6562c7028166c376ad9f06923be0491dd001a2c91574a20690a644e2e11232538b21e") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}, @in={0x2, 0x4e22, @local}], 0x20) epoll_create1(0x0) 03:34:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) setresuid(0x0, 0x0, 0x0) quotactl(0x8, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000880)="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") r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x10, r3) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="00000000000000000000000000000000102072fdc7216542dc63e1725195b9f1512a57e2498c1474", @ANYRES32, @ANYBLOB="df98622431ec00010000000000007273767036000000180002001400020020010000faffffff974fdc3c31493e425a09220d2b1b00d1ca8a684827671d4de9bdf8174237633211dafef9f5a3544a68c13d2e133109f72e837c1881f80dedc23dee0d7f0ac80cfd35418970c09bb4e6d73c008d03f753e604e212b82112bcc596dfaea385848538cac0a8c8c7929785a1863fc004c7487e5bf80ebee2f875f1616e33d4e8f98657e8e7f83e5b536ccd552b4939105bae22affc6b95c8571a75dc0a185374f225a897042e29ed1cbaec0346a3e5762e9665d5019cb196713b27b69c1532a36ab78d5a79d36b80d259e7ffb4f9fc51d46ec200"/261], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2200.524431] hub 9-0:1.0: USB hub found [ 2200.558055] hub 9-0:1.0: 8 ports detected [ 2200.634946] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:57 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:57 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001500), 0x4000000000002d0, 0x0) r2 = accept(r1, &(0x7f0000000100)=@sco={0x1f, @none}, &(0x7f0000000180)=0x80) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x0, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x9}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80180}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4002}, 0x80009) 03:34:57 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x7c7b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 03:34:57 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4400c801) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffc}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000440), 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000140), &(0x7f00000003c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2200.934058] EXT4-fs (sda1): re-mounted. Opts: i_version, [ 2201.030631] hub 9-0:1.0: USB hub found [ 2201.063619] hub 9-0:1.0: 8 ports detected 03:34:58 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7, 0xa6, 0x3, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2201.281772] hub 9-0:1.0: USB hub found [ 2201.302048] hub 9-0:1.0: 8 ports detected 03:34:58 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2201.401895] hub 9-0:1.0: USB hub found [ 2201.407337] hub 9-0:1.0: 8 ports detected 03:34:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x3d, 0x470100) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x140, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0xa2) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2201.503931] hub 9-0:1.0: USB hub found [ 2201.520855] hub 9-0:1.0: 8 ports detected [ 2201.565363] Unknown ioctl 9216 [ 2201.613248] Unknown ioctl 9216 [ 2201.679542] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:34:58 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:34:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 03:34:58 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000000)={0x1, 0x0, 0x2006, 0x40, 0xb2, 0x3, 0x100}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 03:34:58 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="0d2f349a49e5306fd5efe339ad763f8c9ef5ce3b95fbe88e78aed04fe9d41aa684df6ee5ca7fa51ee20f44d284ebc9c94d906c054157e5f501cc32f4802ccdd6d1ea25020298dceb5b17d3f6d10d03577645460dc93222f4dbcce239783b8999764de5cd9570c854d95b44c2f92df380b66b57978b9be4f85d5ffd7ddfd8c12cfd4f07971f84d33dc94622c200802502485ad0ed5700abee48eccc89d441e9e68f277100"], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) socket$inet6(0xa, 0x5, 0x80000001) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x12002, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) 03:34:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f0000000200)=""/114, 0x72}], 0x4, &(0x7f0000000480)=""/80, 0x50}, 0x1}, {{&(0x7f0000000500)=@tipc, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000640)=""/128, 0x80}, {&(0x7f0000001100)=""/257, 0x101}], 0x4, &(0x7f0000000800)=""/114, 0x72}, 0x7}, {{&(0x7f0000000980)=@generic, 0x80, &(0x7f0000000880), 0x0, &(0x7f0000000d40)=""/87, 0x57}}, {{&(0x7f0000000dc0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000e40)=""/3, 0x3}], 0x1, &(0x7f00000006c0)=""/196, 0xc4}, 0x80000001}], 0x4, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000008c0)="c33ce2802b36db9175a2b9b0a85bed5037668d92b724508694a310107d671a83d49810f5b5af6a371d8260e58fb71ba47e21ce46e6fafb2071b4dc04a9b1cf95e1e9dea3f8f21beee2d30e00773beed0579a227ba98fd166977735e2246ea03ce941429150c8d537404ce15757dcd23f5f51652f91c59217733665c852b7b454ecc98cd3b80eb5141ad9e7d72d7ef1e63d894561d6562c7028166c376ad9f06923be0491dd001a2c91574a20690a644e2e11232538b21e") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}, @in={0x2, 0x4e22, @local}], 0x20) epoll_create1(0x0) [ 2201.901084] hub 9-0:1.0: USB hub found [ 2201.910920] hub 9-0:1.0: 8 ports detected 03:34:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0xd0200, 0x0) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f00000003c0)={0x5, 0x8, 0x1, 0x10000, 0x9, 0x2}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 03:34:58 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2202.112930] hub 9-0:1.0: USB hub found 03:34:59 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2e2f293300be839e19931866696c65306c98f69f9e5e49300fd55617c636ccb0910d77231d7510bfc21279"], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) accept4$unix(r2, 0x0, &(0x7f0000000340), 0x80000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000280)={0x0, 0x8, 0x0, r1, 0x0, &(0x7f0000000240)={0x980929, 0xc7a, [], @string=&(0x7f0000000200)=0x1}}) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f00000002c0)={0x6b, 0xffff, 0x5, 0xa, 0x6}) sendto$inet(r1, &(0x7f0000000140)="84c2d95a2feb7357629b26142b69036647d75da02474315dc74864bd3fd5c9ccde56b5900b21421f18bc9a8daaedcd13c4eca6c9d4a4d260299d7a7f78a4e99fcf053e78d715666525b0725f1524399c2590708316dc5b9d97c37231858e93f630737a2794c67f2fd42674bcd1735dd85dcebb50ff640e7ed3661f79bdd35da747", 0x81, 0x20000814, 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x100) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="e4ffffff", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r4, 0x1ff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000003c0)={r4, 0x4, 0x6}, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x10, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)=ANY=[@ANYBLOB='i_ver\a\x00\x00\x00,\x00']) [ 2202.134149] hub 9-0:1.0: 8 ports detected 03:34:59 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) clock_gettime(0x721ef4617da7e667, &(0x7f0000000140)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2202.405367] hub 9-0:1.0: USB hub found [ 2202.422882] hub 9-0:1.0: 8 ports detected 03:34:59 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:59 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 03:34:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) [ 2202.624785] hub 9-0:1.0: USB hub found [ 2202.649363] hub 9-0:1.0: 8 ports detected 03:34:59 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 03:34:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000200)=""/114, 0x72}], 0x4, &(0x7f0000000480)=""/80, 0x50}, 0x1}, {{&(0x7f0000000500)=@tipc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000640)=""/128, 0x80}, {&(0x7f00000006c0)=""/252, 0xfc}], 0x4, &(0x7f0000000800)=""/114, 0x72}, 0x7}, {{&(0x7f0000000980)=@generic, 0xb7, &(0x7f0000000880)=[{&(0x7f0000000a00)=""/130, 0x82}, {&(0x7f0000000ac0)=""/134, 0x86}, {&(0x7f0000000b80)=""/236, 0xec}, {&(0x7f0000000c80)=""/132, 0x84}], 0x4, &(0x7f0000000d40)=""/87, 0x57}}, {{&(0x7f0000000dc0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000e40)=""/3, 0x3}], 0x1, &(0x7f0000000ec0)=""/196, 0xc4}, 0x80000001}], 0x4, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000008c0)="c33ce2802b36db9175a2b9b0a85bed5037668d92b724508694a310107d671a83d49810f5b5af6a371d8260e58fb71ba47e21ce46e6fafb2071b4dc04a9b1cf95e1e9dea3f8f21beee2d30e00773beed0579a227ba98fd166977735e2246ea03ce941429150c8d537404ce15757dcd23f5f51652f91c59217733665c852b7b454ecc98cd3b80eb5141ad9e7d72d7ef1e63d894561d6562c7028166c376ad9f06923be0491dd001a2c91574a20690a644e2e11232538b21e") ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}, @in={0x2, 0x4e22, @local}], 0x20) epoll_create1(0x0) 03:34:59 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:34:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="000400e000000000000080010000fafffff0007213fbff08004061ad546869b6ae8a6cbaa321e8349740ce8ec316d0e7a87fc37d32e3888ba6ad1578f1e55b0037be7f49bbe36a1ea0eb718a6992464a1e9764870098a1e69a6803680cc84b0cdf071790e499a326fdd3d338a9cae3cdfc662cca9359d1e423f53eb89e48e8e1b066a123e0f520d7f864bdf644b93eb0d39cf24cafcf"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2202.834417] hub 9-0:1.0: USB hub found [ 2202.849165] hub 9-0:1.0: 8 ports detected 03:34:59 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2020800, &(0x7f0000000080)=ANY=[@ANYBLOB="646174615f6572723d57d05acf1069676e"]) 03:35:00 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="0000000000000000727376703600000018000200"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:35:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000", @ANYRES32=0x0], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x20048404) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2203.193896] hub 9-0:1.0: USB hub found 03:35:00 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100)) [ 2203.218889] hub 9-0:1.0: 8 ports detected 03:35:00 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="0000000000000000727376703600000018000200"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:35:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x4000000000002d0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000140)={@broadcast, @multicast2, 0x0, 0x9, [@local, @multicast2, @broadcast, @private=0xa010101, @rand_addr=0x3, @multicast1, @remote, @multicast1, @multicast1]}, 0x34) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="0000000000000000000000001f0000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2203.407477] EXT4-fs (sda1): re-mounted. Opts: i_version, [ 2203.459518] hub 9-0:1.0: USB hub found [ 2203.484014] hub 9-0:1.0: 8 ports detected [ 2203.521207] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:35:00 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x108f004, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) [ 2203.694569] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:35:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', 0x0], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:35:00 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xcbd}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x1) clock_gettime(0x3, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) fdatasync(r2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 03:35:00 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='./file0'], &(0x7f00000001c0)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) getrlimit(0xd, &(0x7f0000000100)) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') 03:35:00 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="0000000000000000727376703600000018000200"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:35:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x42d61, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1000005d, 0x0, 0x4, 0x3, 0xfffffffffffffffe, 0x3, 0x3}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="060200000000020000000000000000001020588000c0fa1e8310bf3f50adbbf9e74a5dbe", @ANYRES32, @ANYBLOB="0000000000000000727376703600000018000200146d930020010000faffffff0000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x44) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x2, 0x0) write$P9_RLCREATE(r3, &(0x7f00000003c0)={0x18, 0xf, 0x2, {{0x80, 0x2, 0x7}, 0x5}}, 0x18) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2203.900242] hub 9-0:1.0: USB hub found [ 2203.915109] hub 9-0:1.0: 8 ports detected [ 2203.934425] EXT4-fs (sda1): re-mounted. Opts: i_version, [ 2204.031325] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:35:01 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faff"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:35:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="005ddd0000000008000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 03:35:01 executing program 2: r0 = socket$inet6(0xa, 0x806, 0x0) listen(0xffffffffffffffff, 0x3) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001500), 0x4000000000002d0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="6a0803958bef40644d83d09a96134b47", @ANYRES16=r2, @ANYBLOB="000425bd7000fcdbdf251100000005002d000100000008003b002300000008002b000200000005003800010000000800340009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x83) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x803) accept4(r0, 0x0, 0x0, 0x0) fsync(r0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x80) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000300)=ANY=[@ANYBLOB="697ea5350d00f05633fb485ed267"]) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000100)) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001500), 0x4000000000002d0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000180)={{0x3b, @rand_addr=0x64010102, 0x4e22, 0x2, 'wlc\x00', 0x21, 0x9, 0x2d}, {@multicast1, 0x4e22, 0x2000, 0x9, 0xfe, 0xf0000000}}, 0x44) [ 2204.284345] hub 9-0:1.0: USB hub found [ 2204.305692] hub 9-0:1.0: 8 ports detected [ 2204.335212] EXT4-fs (sda1): Unrecognized mount option "i~¥5 " or missing value 03:35:01 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faff"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:35:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r4 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r4, 0x1000000) sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ftruncate(r2, 0x8200) [ 2204.529147] hub 9-0:1.0: USB hub found [ 2204.548714] hub 9-0:1.0: 8 ports detected 03:35:01 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x806, 0x0) sendmmsg(r2, &(0x7f0000000780)=[{{&(0x7f00000001c0)=@l2={0x1f, 0x9, @none, 0x2}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)="4474403af2be0a6081d9ac5a015eae4c589f33e99cb0cc4ee4616e304b625b4a2e8c96bf24f890ab87f54e776da68ebc6c48c6ad8e390e0141269f5f", 0x3c}, {&(0x7f0000000340)="88cc26221738cdf4112154d57f52502b0a3d5fc56e834d7af625d846e37bfab82a48c8a426cd06dff0591f34b0ae3a20fcd658487278764cafc5e4d315d2d127a9b70f2fc77552765e123b4d541261642132153c2e980316a3e7e1a25d3749a37643c9df204f67d0352e755f29c540a263a39e315cabd935685de3a9d64710b14dc9d0a9b547af41872831078781a629aed0549f6fcf40de2e88e1ebb031fbeecb9a4d11eb62d85f2497089aa06ba0edca9db4ffc980a7d33dd4", 0xba}, {&(0x7f0000000400)="588cad4d55d374eff923c0ad2266bb66589edb249f1443d655f99c529b420213b330e9419e3a4a1938d6cf2a36ecb723c527e9c3f3f4bbeae63ee85e18fdf820baca6e906513a66ba01edb7474afb0d7bd1ffbe5f6aa9bba7e92575f38642f80ae", 0x61}, {&(0x7f0000000b80)="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", 0x176}], 0x4, &(0x7f00000005c0)}}, {{&(0x7f0000000540)=@xdp={0x2c, 0x8, 0x0, 0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f00000005c0)="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", 0xfc}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f00000006c0)="defaf6fbe207a73a19a05b65f91b7c013ab9ebce9c5fd6b5090ba81b7301709a57a25c9fec273069306a119078e4b52706270aa9a95cbb63050023e527fb6fff63f1330a40ef467ab6c643326cccd25711ec30ff9a7504cab18f2383f0e3883c94cc196e212bedfc7707958bd8c3a0c782a04fc025639393", 0x78}], 0x3, &(0x7f0000001d00)=[{0x98, 0x104, 0x0, "bd2497c9617254773d5b8d4adca68e53cd543022307e1793a00b527ccdbb3f317590004ef748c1cb609edce60acfa67811d3b55c95340dc0fe26ba1056c5c45d52321ffd011540fa22b1a5a75264d95c8cf3103094ccffe7676a2ea3d3a026abc8cd809c460af6bbff43cb34bd552beb0630bffce62311663ec02207e7cb319ebb1f3051"}, {0x28, 0x84, 0x9dd1, "21bdf1f230b7f75ff7a5f22ac3f5e6c53fad4f95412e"}, {0x98, 0x104, 0x80, "677399131385c4f6afadf3a35d6793cc20422ea2559931445d81f7b6b8acfc2bdc6910f8b6183b6402356cb596c9d7f5592d9c69788de546ca59f408e235e361d236568ff1c8d5292ea5cedf69bf96ab49676d5d17b9f83cc6293073a7264d23555e3bbb6ee8fb5d1bb46371551f2a3f17ff60cc9544d9722aeee0151767e324447ae04db5"}, {0xf0, 0x1, 0xffffffb2, "4409f67af397d591ef8630fabeb5103484801053572795c192019d1384f1a82e6318f3b8e767eb25d430dcf1add84aa1e937cfba17dfad381e80174d020aaf212db405878d6103c00b344dec30570d08fb75436e30ceae306e8890cb4dc07a8fbb86b73377b52f15b035a8f138d26b555bfce61e74a5263798101bf66bd1f79fde4e2ee0b5d84b85da2764abfdfe262019bc15ce782c3b5964ff5ef2c59c8642622c75b752f44fd1d1cb8b4cd3e39d75a19dda12e487a26a461c394b664e7362ae3a4418cefc33d84f2b9accc597cf2e8e69cc171dea6fd06a"}, {0xa0, 0x11, 0x9, "c6f9e88e1a4ed87520d0ba639af04355d1d8a58c98100c0314deeab9d053a4ed7c60851df358b6a685cd63822f028266930be6a88f15acaac8c3202764acc2db9e9d34ce23155f56cd36b56fc0c104234635b4232a5749c1dd40a5210c6c4ad5aba122af54b13054cca9983fbce12cdbbf97e426c71e5e666cea316c4e031d26e9158333888dfb7ba0fce28d7a76"}, {0xa0, 0x104, 0x8000, "7edd62105b40b25231fb52239f41daf351f508051c0f51e79ca37d24954795fd15c3b5eaf0d27dd3841f4ce447167fafb68fb7f95a8b6c5c441e13c7b891cbf92278dfa3f06bebd39263a461052833d0cdc10d76c2c0090f7da9277bac932e98e5d9fdd0e403fe5b7a6b678722ccb54db97d7880801fc92bfc1efad0e5a14d152ae8ff0368d13a18a3ff80a1f2"}, {0x40, 0x1, 0xfffff001, "ecd3c1763d3116cbef8c1a3c5fd0d20fd802bdd2f7eb187f63201baad7fbb8e831946b7f810c4db5d08d"}], 0x3c8}}], 0x2, 0x44055) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x1ff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x81}, &(0x7f0000000140)=0x8) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x0, 0x0, 0x36, 0x0, "a410f0926adbd74dc27129869e6ab002d720c699e0165792006a19d23bec44e4a27322bd0ba49db2eb5dafb1718277ed0a1ebe2a2d5e024b82b48ed4751364402a454a3db18e03228c5acf486fa9c99e"}, 0xd8) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@i_version='i_version'}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@dont_measure='dont_measure'}, {@appraise_type='appraise_type=imasig'}, {@smackfsfloor={'smackfsfloor', 0x3d, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}) 03:35:01 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faff"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:35:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', 0x0], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:35:01 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x4010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x5058}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000180)=0x1, 0x4) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x1) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000100)="668c89f5460c32009e45a9c9035d40ea781116f671fcb21b5a65719686fd1cec6661e0bcbc889057a5e8d893eb536170060e5916980e521760c9ad", 0x3b) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0x4, 0x8000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 03:35:01 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2204.834582] hub 9-0:1.0: USB hub found [ 2204.871201] hub 9-0:1.0: 8 ports detected 03:35:02 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:35:02 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) execveat(r0, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000380)=[&(0x7f0000000180)='\x00', &(0x7f00000001c0)='i_version', &(0x7f0000000200)='\xa1]\x00', &(0x7f0000000240)='i_version', &(0x7f0000000280)='i_version', &(0x7f00000002c0)='i_version', &(0x7f0000000300)='i_version', &(0x7f0000000340)='i_version'], &(0x7f0000000500)=[&(0x7f00000003c0)='i_version', &(0x7f0000000400)='\'].\xd4\\\x00', &(0x7f0000000440)='i_version', &(0x7f00000004c0)='\x00'], 0x1000) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4, 0x3, 0x3, 0xfffffffffffffffd}, 0x0) ptrace(0x11, r1) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0xa90a, &(0x7f0000000100)=""/24) syz_mount_image$xfs(&(0x7f0000000540)='xfs\x00', &(0x7f0000000580)='./file0/../file0\x00', 0x81, 0x2, &(0x7f0000000780)=[{&(0x7f00000005c0)="029bf62bf1ef7631195a2a43fa018e93eccf3fbfabfc922b16d0766443583737a60cc2db78b57274a2a3509f84b2c83b49401970501063f7f3a8091eafb13d6134f635d0d7ea8b3bb10ab2a96079b5e34a417fcbe9664767be027c38024bef34eb1ddec5cd158a01479cfed6711c0261f9afb85a5a26ecaedefdba4114f8812958551fd7b7dfab91e19a44", 0x8b, 0xf3}, {&(0x7f0000000680)="d43b68194068548ae981aae0f7959844c8adaa16bb005b390691cdf60b5abf7153ad721e583481596ef40a26c9ab9102430e3bd49f9300636468f085b7c8e90aa6d3c612c977914ec2741a3e1fa8b534b7263f413266cd32e4aa523054cd87f2cb88a6aa5b23af184f2b96fec762fec87ffb187b14937b80acf9d10c59830e36ad59a86f0da2eef842f3658f2311ef3a2148905d6c4cff34a1dc0005c34b735bdb757490f2ccbb0f7c0308075adb65224105be37cebb1f96a80882372ce3c940e90f0de18f1a1e3adec5db3508f02ab1784643433bace148b525c9ac20847d8ab2ad227436581149e0c702fb87babec48afe4188ecd2880b96337de8210cad", 0xff, 0x3}], 0xa, &(0x7f00000007c0)={[{@noattr2='noattr2'}, {@dax='dax'}, {@biosize={'biosize', 0x3d, 0x6b3b2fdc}}, {@usrquota='usrquota'}, {@largeio='largeio'}, {@mtpt='mtpt'}, {@norecovery='norecovery'}, {@grpquota='grpquota'}, {@attr2='attr2'}, {@noikeep='noikeep'}], [{@fsmagic={'fsmagic', 0x3d, 0x3537}}, {@subj_user={'subj_user', 0x3d, ',{[\'+'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@permit_directio='permit_directio'}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@hash='hash'}]}) 03:35:02 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2205.223950] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:35:02 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) rmdir(&(0x7f0000000100)='./file0\x00') [ 2205.340637] hub 9-0:1.0: USB hub found [ 2205.351102] hub 9-0:1.0: 8 ports detected 03:35:02 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:35:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000ff010000000000000000000f001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2205.545417] hub 9-0:1.0: USB hub found [ 2205.566343] hub 9-0:1.0: 8 ports detected 03:35:02 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) accept4$unix(r0, 0x0, &(0x7f0000000340), 0x80000) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000100)) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x4000000000002d0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="6ffe0000000000000000031c00002000018004000280160001006574683a76657468305f746f5f626f6e64000000"], 0x34}}, 0x0) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x880000, &(0x7f0000000500)={[{@xino_on='xino=on'}, {@lowerdir={'lowerdir', 0x3d, './file1'}}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@permit_directio='permit_directio'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nr0\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'i_version'}}]}) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x148, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x578}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6c6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xf52, @private0={0xfc, 0x0, [], 0x1}, 0x1}}}}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x44}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x52}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4004001}, 0x8840) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) 03:35:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', 0x0], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:35:02 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x6cef) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 03:35:02 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:35:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = dup2(r0, r0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000140)=0x7, 0x4) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000007c30000000000001020", @ANYRES32, @ANYBLOB="ffe0000000000000727376700000000000000009e7a693007b00020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2205.794420] hub 9-0:1.0: USB hub found [ 2205.840582] hub 9-0:1.0: 8 ports detected [ 2205.929803] Bearer rejected, not supported in standalone mode [ 2206.049341] EXT4-fs: 2 callbacks suppressed [ 2206.049349] EXT4-fs (sda1): re-mounted. Opts: i_version, 03:35:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x4200) mq_getsetattr(r3, &(0x7f00000003c0)={0x4, 0x8, 0x0, 0xfff}, &(0x7f0000000440)) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 03:35:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:35:03 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000000)=0xfff) write(r4, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 03:35:03 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], &(0x7f00000001c0)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) r1 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) fremovexattr(r1, &(0x7f0000000180)=@known='trusted.overlay.nlink\x00') 03:35:03 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2206.850281] hub 9-0:1.0: USB hub found [ 2206.862293] hub 9-0:1.0: 8 ports detected 03:35:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="0000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2207.002835] hub 9-0:1.0: USB hub found [ 2207.011863] hub 9-0:1.0: 8 ports detected 03:35:03 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="98d035b9b059af502e11952f099410e85c321cee413ed34ceb63ef34a936789ca99ea0f4b1e38cffbd225cfa99931cd1e0ddbdd1b5709717bd6b5af9f6d88280a3612562814d9ca4dc6759ced09f3d4ec3c6c396e94951e90000000004000000"], &(0x7f0000000000)='./file0\x00', 0x0, 0x108300c, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x3ff, 0x7, 0xf308, 0x101}, 0x8) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x400000, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0), 0x1, 0x2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x141000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) 03:35:04 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff00000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:35:04 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB="2e2f660702ba35"], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) 03:35:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="0000000000000000001000001c0000001020", @ANYRES32, @ANYBLOB="000000000000000072737670360066184d8330e6686e6006260000180002001400020020010000fa"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2207.257888] hub 9-0:1.0: USB hub found [ 2207.292772] hub 9-0:1.0: 8 ports detected 03:35:04 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff00000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:35:04 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="142f66696c653054f5d6aef3ea16fb901a2acd87953082013dd6844d4f5e257feed71af0987929acc39a58300dcde55c7877e9e60fb0abb0cc5383e739975128ec25eaad2257abdb19781785a7e020959dff9a38a70869656f7317eaf17e0f6c84f18e001a136d20f06561a7a0085b9e55432b518b0a5a698b6cfc33fd11a8da1cd61fd321cf5c62ae946e40f6aa8d9c87a96dd2e9ef8203cbed0cf3696a33529999f1c9c38702328a3185d03c66bdc283321f6609b3865b15e356632f736a647af43c99c8df71df0d00"/217], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)=ANY=[@ANYBLOB='i_on,\x00\x00\x00\x00\x00\x00']) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001500), 0x4000000000002d0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_newroute={0x3c, 0x18, 0x10, 0x46f, 0x25dfdbfc, {0x80, 0x10, 0x10, 0x9, 0xfd, 0x1, 0x0, 0x1, 0x1400}, [@RTA_PREFSRC={0x8, 0x7, @empty}, @RTA_UID={0x8, 0x19, r3}, @RTA_FLOW={0x8, 0xb, 0x6}, @RTA_MARK={0x8, 0x10, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0xd008) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U-', 0x3}, 0x16, 0x3) 03:35:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x4000000000002d0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req={0x7ff, 0x9, 0x800, 0x80000001}, 0x10) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="0000007b6c2c0f9e29273cbf6afafb012dbe00000000007273767036000000180002001400020020010000feffffff0000002000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2207.480433] hub 9-0:1.0: USB hub found [ 2207.516683] hub 9-0:1.0: 8 ports detected 03:35:04 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x10) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xd, 0xc, 0x42, &(0x7f00000004c0)="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"}) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@noload='noload'}]}) 03:35:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) [ 2207.735866] EXT4-fs (sda1): re-mounted. Opts: noload, 03:35:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) fanotify_mark(0xffffffffffffffff, 0x20, 0x800100a, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 03:35:04 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff00000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:35:04 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 2207.816928] hub 9-0:1.0: USB hub found [ 2207.822681] hub 9-0:1.0: 8 ports detected 03:35:04 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:35:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007940), 0x55, 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000020020", @ANYRES32, @ANYBLOB="0000000000000000727376703600000018e401001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2208.051821] hub 9-0:1.0: USB hub found [ 2208.071505] hub 9-0:1.0: 8 ports detected 03:35:05 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:35:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="0000000000eba2bb69e8b7746980e99d93c2", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2208.304182] hub 9-0:1.0: USB hub found [ 2208.321157] hub 9-0:1.0: 8 ports detected 03:35:05 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2208.548062] EXT4-fs (sda1): re-mounted. Opts: noload, [ 2208.558810] hub 9-0:1.0: USB hub found [ 2208.565107] hub 9-0:1.0: 8 ports detected [ 2208.693858] hub 9-0:1.0: USB hub found [ 2208.716622] hub 9-0:1.0: 8 ports detected 03:35:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:35:05 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000007940), 0x55, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000000380)=""/68, 0x44}, {&(0x7f0000000400)=""/58, 0x3a}, {&(0x7f0000000440)=""/186, 0xba}, {&(0x7f0000000500)=""/164, 0xa4}, {&(0x7f00000005c0)=""/104, 0x68}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000740)=""/237, 0xed}, {&(0x7f0000000840)=""/145, 0x91}, {&(0x7f0000000900)=""/124, 0x7c}], 0x9, 0xbc) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001500), 0x4000000000002d0, 0x0) accept$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000180)=0x60) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) accept4$unix(r2, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000240)=""/188) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="3d31a9bd60fee77283c2bc08b823ffd8f0c16931e0dab2c341c77e53394580f82b5139e5ce5bb98cda2f860dd28697b3dcfaaeb7c573be9be895dc5a66fc49c26fc6e6e0481265de9a3002e5e29aac75fef9415c536f451a8252c05e6b5c07cbb0f6dad44ea9e3b0b394"], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x100010, r3, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)=ANY=[@ANYBLOB="6b5f76da000e0000000000"]) 03:35:05 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x6) write(r2, &(0x7f0000000340), 0x41395527) accept4$unix(r2, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 03:35:05 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:35:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x10000, 0x142) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x20000000084, 0x90140) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000440)=""/163) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="0000b602000000000000f1770000000010201bea7f301070124ed185626fdba003da04d937d5f9e9e005003ffb506aec9507ee196f5d46ad9aab3e4435426b43d223a0be8a54e61a1f61aa6903879f7a07d7a55f8e7f90f0cda7a26119c86ed5f013394b220ca491e348893d1fe04a0a2f9da6ac323024c8ddb1a011e142af288b337007b4d4c5586fdd463e7efd83a3cdad1fd16a552530115e52afb8878e2cb48c638c34585a37acbc0d93aa1b552c4da31dea150517e463af9540db30071eae334c3da722d39a580ed3db522ede301e64c89bc450b192", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180400001400020020010000faffffff000000000000000030cc3bd6237e5a3973955bd116ce0a258835c764165a472a0f699d73daa214e2037e33eef5cd72703bc01aecf6cca04d3bf2c269c421fe91534633a680f43b167a0646d0d267c2d0a020b1ce4acafe64c697b772237efa6e4452d2a3c343b7f1e895ab930baf3d3384f854f24f23c98f72c0b6a95b34742990cea38d4b0ad14db12494f7ef462ccf1ea1aa061eb02f1fd72556984988d1aae9b77a0549ad3cd2518f2e1ce99468437711bc8d3e531ad7b9b8bad165fca3ad46f7"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2208.983807] hub 9-0:1.0: USB hub found [ 2208.992861] hub 9-0:1.0: 8 ports detected 03:35:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000001280)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x0, 0x0, @dev}}}, 0xa0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000000000000000000001020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 03:35:06 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2209.241617] hub 9-0:1.0: USB hub found [ 2209.265856] hub 9-0:1.0: 8 ports detected 03:35:06 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:35:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x20000) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000e8ffffff1469ad67e880016ebf8299ffffffff1020", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) [ 2209.448103] hub 9-0:1.0: USB hub found [ 2209.463425] hub 9-0:1.0: 8 ports detected 03:35:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[0x0, &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:35:06 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2209.678302] hub 9-0:1.0: USB hub found [ 2209.685619] hub 9-0:1.0: 8 ports detected [ 2209.720852] hub 9-0:1.0: USB hub found [ 2209.728153] hub 9-0:1.0: 8 ports detected 03:35:06 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./fil/\x00'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) 03:35:06 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffff}, 0x0, 0x0, 0x70f1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 03:35:06 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:35:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x44000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0), 0xc, &(0x7f0000000700)={&(0x7f0000000880)={0x300, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x2d9, 0x80, "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"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x5}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xd}]}, 0x300}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec00000000eafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0xef}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ff593c3874ecfb648614c5a563648538318d5e5be10107bd3321e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000008000000000000a8001020aa955344e0d874b933a9694fb96d50aeb0d420693601daa2b759a5560b54189bdd8cc56a8fdebe3965e5b75a3d8adfb85162", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 03:35:06 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)=ANY=[@ANYBLOB='in,\x00']) [ 2210.067211] hub 9-0:1.0: USB hub found [ 2210.068950] EXT4-fs (sda1): Unrecognized mount option "in" or missing value [ 2210.092703] hub 9-0:1.0: 8 ports detected 03:35:07 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:35:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[0x0, &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) [ 2210.594739] EXT4-fs (sda1): Unrecognized mount option "in" or missing value 03:35:07 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000100)=ANY=[@ANYBLOB="695f76651f6d44dbb8293b0bb76ebbf460b3be4b830000006e2c00"]) 03:35:07 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:35:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x2, 0x6370, &(0x7f0000000980)="fc7b835eca851a7d5e298cc0d3d53f2dac04c7927d0246b23cfd360f7753473b505e624c466ccfcc82745de49ed18b47254f5b16224a20ca4afcae3192e6f5bed238c325e9202f0c24f25dd5f3ce5f4c5e3be0ffa79db86c5e4ef4798ce555c77aafdb76cb0a6aa530ef0cffdd4ff5e28fc05fcd980ac175462669998343403cdd1fb405e2a6d2f86789c4c29334392fc4cfadaac3ea0ad21e5c5f"}) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f00000004c0)={0x38, 0x6, 0x0, 0x0, 0x4, 0x8, 0x0, 0x5, 0x0, 0xffffffff}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec345a8afdeafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0x9f}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ef593c3874ecfb648614c5a563648538318d5e5be10107b69341e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="af175e2845017f2a424dc58500dfdcd59120", @ANYRES32, @ANYBLOB="00000000000000007273a778ac2e6691633eb85790559dda4e001800df5a0b2d9cc29105fce98a16ccff4293020014000200"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0x8, &(0x7f00000005c0)={0x0}}, 0x20004044) sysinfo(&(0x7f0000000880)=""/255) [ 2210.794134] hub 9-0:1.0: USB hub found 03:35:07 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x40a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0xb) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) accept4$llc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 2210.822102] hub 9-0:1.0: 8 ports detected 03:35:07 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2210.905788] EXT4-fs (sda1): Unrecognized mount option "i_vemDÛ¸); ·n»ô`³¾Kƒ" or missing value 03:35:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x44000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0), 0xc, &(0x7f0000000700)={&(0x7f0000000880)={0x300, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x2d9, 0x80, "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"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x5}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xd}]}, 0x300}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec00000000eafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0xef}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ff593c3874ecfb648614c5a563648538318d5e5be10107bd3321e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000008000000000000a8001020aa955344e0d874b933a9694fb96d50aeb0d420693601daa2b759a5560b54189bdd8cc56a8fdebe3965e5b75a3d8adfb85162", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2211.032959] hub 9-0:1.0: USB hub found [ 2211.038528] EXT4-fs (sda1): Unrecognized mount option "i_vemDÛ¸); ·n»ô`³¾Kƒ" or missing value [ 2211.071669] hub 9-0:1.0: 8 ports detected 03:35:08 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x12) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @multicast2}, 0x20, 0x0, 0x0, 0x0, 0xc000, &(0x7f0000000080)='netdevsim0\x00', 0x16c25efe, 0x15a7, 0x2}) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x8) r3 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) sendfile(r1, r3, &(0x7f0000000100)=0x1, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000140)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}]}) 03:35:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[0x0, &(0x7f0000000200)='eth'], &(0x7f0000000540)=[&(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000580)='\']*{\xc0\xbeF\x03\x1a0\xaf\v\xfc\xaa\x12aN\x97N\xb0)\x00', &(0x7f00000004c0)='udp:syz0\x00', &(0x7f0000000500)='/dev/sg#\x00'], 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 03:35:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x44000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0), 0xc, &(0x7f0000000700)={&(0x7f0000000880)={0x300, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x2d9, 0x80, "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"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x5}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xd}]}, 0x300}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec00000000eafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0xef}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ff593c3874ecfb648614c5a563648538318d5e5be10107bd3321e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000008000000000000a8001020aa955344e0d874b933a9694fb96d50aeb0d420693601daa2b759a5560b54189bdd8cc56a8fdebe3965e5b75a3d8adfb85162", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 03:35:08 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2211.600461] EXT4-fs (sda1): re-mounted. Opts: debug_want_extra_isize=0x0000000000000080, 03:35:08 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e10909000100766574000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB='\x00'/14, @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5efc3560}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:35:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4000003, 0x115881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x44000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0), 0xc, &(0x7f0000000700)={&(0x7f0000000880)={0x300, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x2d9, 0x80, "ea17f2bbae607bbb162887c11574c25de0f15d414183a14e632c831b1760cae0106c8a73374897cee476e573e6952de8f483c7d57eae9360d4113924090e09d83ca6addb6aa655f5b61aff6ddce4747886f827cb9515ec7a38e10d6c2844dd8915f1736e0163b417491d9201c0eb37e4519fafc5ae296e4f6c4786aa9d9ec44f60d963e5e25d74b0a3bd9e286293d57e965c5c7f19101836f9bb8f8db4ad6e888ea502b93dbfb77990ac008d9c6332564e690214763c2513a299fbd19940f8b91c7c97ecaec109065b631ae00436994636249ebdd2304ef3cb902f2044e38e7ace612c0cc66626df564d110f2531abb11461753633d4b64ee4841766f059fdce8476e56f8a72a8c9c057cb2faa2c0fb0f0aa508e4abd5d1df59240271f744396e7800c3c74f59c834e9cad09404416b433f3c9ef51ea13468ef3a758f42f31c13f3f479254bd979c46b905c9876a19485319fd77692afa4dabc4cc53fbd339dff20f3370b921398b585bfec60bcbb41be73757b45d4c805625146616d277ccbf4b82af546dc8fbf35b6d30c3243e3459dc321a17f8323e5f78e76688c72ac5979521b49dd24188523e4be3f6d6f820f83b09e38fd050562c512e05111f81574f8f9daf4f16c0d3efcac0d082cc2878370932ccbc46c47599fd3b7fc0123dcae41eb07c53cf18deaca623ee0e5cb3225a07b80b702b97ee815d1589be2a497977111382477b773b7b02fc3de65412f99892a825db3bdb4ba3e37f1f0e1b66736a3a0ed8810a62fa0cd750073daadcba19ef536731cc56955cab6286c3ab9e483a6539efe410e879f4c29ae10014f81ecfc525c8d1380fb462677abe22a9bd60045f46d5abd8e4e510763285e1c8be301ad14f5175f35b709cb7db771627d5acc58872aa8ffdf41a65cd0b874dac0060c04312572d020129d005949239d12e1771008a0d85bd4e28f5797854426c3ca34c8fbded4ab3bebcc0344cb80c3ab48235eaae78e4f384689f49e330c6fd5666a9ee3e635e79"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x5}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xd}]}, 0x300}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) ptrace(0x11, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000080)="43a955a06d4e3e847dca1dac9e785a6e1683fd8f06f86e299805fd83495f03405cea6feb0b1c6f491e54e722eec4783eb759721655d354d2dff8e44e79dbf4fc61dc90b41d97dae2b834cfaecc89ad115bc6acfb6fdc5592758af2da96a65add49ec00000000eafcedde48ccd20937be05fb73f6f3", 0x75}, {&(0x7f0000000500)="80ff766f15c639e8e4933a23fd1f91a7736bcc5dc98a2a9245302b6190d6c9e142126930b505e2f97a801b07b57ded8be1945b66c302543f9623159ab183b79bec7afa4d45ff62cfeb65975ff3a3d25029ac41899335356d507a7013e1adc4b415e2001c354492e3e58bccbe7bd71ee6f5c1a179e1e84432285298b130de86f3b228b8bed2ad15d3777d733b134bb26ab03ce79612ea7b89c24fbe48121146", 0xef}, {&(0x7f0000000640)="0988543f6edfd71128a1e4cfb36525d6c9d3177c211010df535c3643fd918ec56b920e8b164678ee6ffc80693872b9a9b4fa54253e0720d4071ef564fc83703d9e5c4e709c9faa09be2c59dc0c776ea49d9abb6fe0abac867dfa7b3f71293c662f2490a8956423a681467c0cce38b4fef3acaab7f78c6b5d5912030aef572ec647fcf0c169a8f2b9fb8723de59cd821b6b0f7e095e2dc6312e83b5ca", 0x9c}, {&(0x7f0000000740)="792de879d0ed2cbcdfc06b5860d3e5284c4067b17546c9028fa0047596c4dae457de837e008d3756cb9a9faf0ba81f22212d3dfc67ff1e5ff593c3874ecfb648614c5a563648538318d5e5be10107bd3321e129b0dcbe47eafa97893b5e5ee5ed1434abfc9b7981d7b177d0f49bc8567069a82b07674756c34e9794d8dea3dd5a8dfb223a798c524c705a57d6c27e6f9bfaf3c951b728916ea888f7d24881de909e64dbe96bcd71ad1deae30984d6d879eb35869fc1277aa", 0xb8}], 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000008000000000000a8001020aa955344e0d874b933a9694fb96d50aeb0d420693601daa2b759a5560b54189bdd8cc56a8fdebe3965e5b75a3d8adfb85162", @ANYRES32, @ANYBLOB="00000000000000007273767036000000180002001400020020010000faffffff0000000000000000"], 0x48}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2211.710000] EXT4-fs error (device sda1): ext4_xattr_set_entry:1606: inode #16095: comm syz-executor.5: corrupted xattr entries [ 2211.736324] EXT4-fs error (device sda1): ext4_xattr_set_entry:1606: inode #15966: comm syz-executor.4: corrupted xattr entries [ 2211.741293] EXT4-fs error (device sda1): ext4_xattr_set_entry:1606: inode #15978: comm syz-executor.3: corrupted xattr entries [ 2212.236652] EXT4-fs error (device sda1): ext4_xattr_set_entry:1606: inode #15939: comm syz-executor.2: corrupted xattr entries 03:35:09 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@i_version='i_version'}]}) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001500), 0x4000000000002d0, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x9) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000100)=0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000140)={0x20, 0x1, 0x40, 0x4, 0xfff}) 03:35:09 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x80, 0x0, 0x38) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000100)=""/248) vmsplice(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 2212.421439] EXT4-fs error (device sda1): ext4_xattr_set_entry:1606: inode #15764: comm syz-executor.5: corrupted xattr entries [ 2212.464996] ================================================================== [ 2212.472724] BUG: KASAN: slab-out-of-bounds in ext4_xattr_set_entry+0x2e97/0x2eb0 [ 2212.480252] Read of size 4 at addr ffff88813e9f8004 by task syz-executor.1/6381 [ 2212.487685] [ 2212.489304] CPU: 0 PID: 6381 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 2212.497080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2212.506422] Call Trace: [ 2212.509003] dump_stack+0x1b2/0x283 [ 2212.512624] ? ext4_xattr_set_entry+0x2e97/0x2eb0 [ 2212.517462] print_address_description.cold+0x54/0x1dc [ 2212.522732] ? ext4_xattr_set_entry+0x2e97/0x2eb0 [ 2212.527569] kasan_report.cold+0xa9/0x2b9 [ 2212.531710] ext4_xattr_set_entry+0x2e97/0x2eb0 [ 2212.536382] ? retint_kernel+0x2d/0x2d [ 2212.540263] ? ext4_xattr_block_find.isra.0+0x5e0/0x5e0 [ 2212.545624] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2212.550377] ? retint_kernel+0x2d/0x2d [ 2212.554261] ext4_xattr_ibody_set+0x73/0x280 [ 2212.558670] ext4_xattr_set_handle+0x4f5/0xda0 [ 2212.563250] ? ext4_xattr_ibody_inline_set+0x280/0x280 [ 2212.568532] ? security_sid_to_context_core+0x12c/0x200 [ 2212.573897] ? lock_downgrade+0x6e0/0x6e0 [ 2212.578046] ? selinux_inode_create+0x30/0x30 [ 2212.582532] ext4_initxattrs+0xb5/0x110 [ 2212.586507] security_inode_init_security+0x236/0x320 [ 2212.591689] ? ext4_init_acl+0x190/0x190 [ 2212.595741] ? security_kernel_post_read_file+0xd0/0xd0 [ 2212.601103] ? insert_inode_locked+0x39e/0x4b0 [ 2212.605683] __ext4_new_inode+0x35ed/0x4e80 [ 2212.610015] ? ext4_free_inode+0x14a0/0x14a0 [ 2212.614413] ? avc_has_perm+0x1a4/0x320 [ 2212.618372] ? __dquot_initialize+0x3f4/0x980 [ 2212.622842] ? avc_has_perm_noaudit+0x2a0/0x2a0 [ 2212.627495] ? inode_get_rsv_space.part.0+0x100/0x100 [ 2212.632675] ? security_transition_sid+0xcb/0x120 [ 2212.637506] ? security_transition_sid+0x9d/0x120 [ 2212.642346] ext4_mkdir+0x2e4/0xb60 [ 2212.645968] ? selinux_dentry_init_security+0x220/0x220 [ 2212.651330] ? ext4_init_dot_dotdot+0x4b0/0x4b0 [ 2212.655993] ? security_inode_mkdir+0xcc/0x100 [ 2212.660570] vfs_mkdir+0x3af/0x620 [ 2212.664105] SyS_mkdirat+0x1b5/0x220 [ 2212.667810] ? SyS_mknod+0x30/0x30 [ 2212.671344] ? do_syscall_64+0x4c/0x640 [ 2212.675309] ? SyS_mkdirat+0x220/0x220 [ 2212.679192] do_syscall_64+0x1d5/0x640 [ 2212.683080] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2212.688257] RIP: 0033:0x45bee7 [ 2212.691440] RSP: 002b:00007ffc3ea99388 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 2212.699137] RAX: ffffffffffffffda RBX: 000000000021c2c2 RCX: 000000000045bee7 [ 2212.706398] RDX: 00007ffc3ea993d6 RSI: 00000000000001ff RDI: 00007ffc3ea993d0 [ 2212.713692] RBP: 0000000000004607 R08: 0000000000000000 R09: 0000000000000006 [ 2212.720951] R10: 0000000000000064 R11: 0000000000000206 R12: 0000000000000012 [ 2212.728211] R13: 00007ffc3ea993c0 R14: 000000000021bf8f R15: 00007ffc3ea993d0 [ 2212.735597] [ 2212.737224] Allocated by task 13389: [ 2212.740940] kasan_kmalloc.part.0+0x4f/0xd0 [ 2212.745255] kmem_cache_alloc+0x124/0x3c0 [ 2212.749392] getname_flags+0xc8/0x550 [ 2212.753180] user_path_mountpoint_at+0x23/0x40 [ 2212.757735] SyS_umount+0x11b/0xc00 [ 2212.761338] do_syscall_64+0x1d5/0x640 [ 2212.765200] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2212.770364] [ 2212.771970] Freed by task 13389: [ 2212.775312] kasan_slab_free+0xaf/0x190 [ 2212.779260] kmem_cache_free+0x7c/0x2b0 [ 2212.783208] putname+0xcd/0x110 [ 2212.786462] filename_mountpoint+0x218/0x320 [ 2212.790869] SyS_umount+0x11b/0xc00 [ 2212.794514] do_syscall_64+0x1d5/0x640 [ 2212.798426] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2212.803586] [ 2212.805188] The buggy address belongs to the object at ffff88813e9f8940 [ 2212.805188] which belongs to the cache names_cache of size 4096 [ 2212.817910] The buggy address is located 2364 bytes to the left of [ 2212.817910] 4096-byte region [ffff88813e9f8940, ffff88813e9f9940) [ 2212.830386] The buggy address belongs to the page: [ 2212.835381] page:ffffea0004fa7e00 count:1 mapcount:0 mapping:ffff88813e9f8940 index:0x0 compound_mapcount: 0 [ 2212.845322] flags: 0x57ffe0000008100(slab|head) [ 2212.849967] raw: 057ffe0000008100 ffff88813e9f8940 0000000000000000 0000000100000001 [ 2212.857821] raw: ffffea0004c085a0 ffffea0005c1d0a0 ffff8880aa9dacc0 0000000000000000 [ 2212.865673] page dumped because: kasan: bad access detected [ 2212.871354] [ 2212.872954] Memory state around the buggy address: [ 2212.877854] ffff88813e9f7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.885189] ffff88813e9f7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.892520] >ffff88813e9f8000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2212.899851] ^ [ 2212.903202] ffff88813e9f8080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc 03:35:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)="8eb3d08761dfd119b920e2ac58a36d70dbe8383ae61d80c06a349da25b659efda0e51e00169f71c7c88691aaff965f6b5051fc95d59dff3c9e7587e0ff93d4193febf2da4fd857d7890444061cfc613ccd91ce46fde735253700d762370f03dda63f52a7467e23eabbde44f384f21d32d2b50dc5e61cf6107122c7c4e15c11", 0x7f, 0x4000010, &(0x7f0000000480)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x30000, @mcast2, 0x4}}, 0x24) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, &(0x7f0000000340), 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='udp:syz2\x00', &(0x7f0000000200)='eth'], 0x0, 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="00e1090900010076657400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c5000000000000005e45b0010000faffffff00000000070000000000000009000000000000000000e21d2f079d240f0189420407007df4a2151558a254c1344b930d69760b709f802a4ddd72e3a8d65fc8a476954a05e261a7bafbfa33e254338bc48bd6d42723d0efb3d81fd08dbd9332a274f3aea9b3f5cbc96042cbbb9e3ba44ee083e2c8b1e4a515db8ab0706af77d7dcf22f66c3fde43ae365011fc993c9db447125f0d596274de39c4556d1a7d8896ece7cca08c6d815445eee54becbe697eda96a77150139d8f870abf7c1a6943870f1f9d1a61b0aa27215c5df55b6f6b2bb0331c86d6f648e0b85eca961acff00fb2c089"], 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x0) [ 2212.910533] ffff88813e9f8100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2212.917863] ================================================================== [ 2212.925192] Disabling lock debugging due to kernel taint [ 2212.947655] EXT4-fs error (device sda1): ext4_xattr_set_entry:1606: inode #15706: comm syz-executor.5: corrupted xattr entries [ 2213.402725] hub 9-0:1.0: USB hub found [ 2213.414817] hub 9-0:1.0: 8 ports detected [ 2213.478957] Kernel panic - not syncing: panic_on_warn set ... [ 2213.478957] [ 2213.486337] CPU: 1 PID: 6381 Comm: syz-executor.1 Tainted: G B 4.14.184-syzkaller #0 [ 2213.495331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2213.504701] Call Trace: [ 2213.507285] dump_stack+0x1b2/0x283 [ 2213.510904] panic+0x1f9/0x42d [ 2213.514072] ? add_taint.cold+0x16/0x16 [ 2213.518020] ? preempt_schedule_common+0x4a/0xc0 [ 2213.522751] ? ext4_xattr_set_entry+0x2e97/0x2eb0 [ 2213.527586] ? ___preempt_schedule+0x16/0x18 [ 2213.531970] ? ext4_xattr_set_entry+0x2e97/0x2eb0 [ 2213.536789] kasan_end_report+0x43/0x49 [ 2213.540737] kasan_report.cold+0x12f/0x2b9 [ 2213.544961] ext4_xattr_set_entry+0x2e97/0x2eb0 [ 2213.549609] ? retint_kernel+0x2d/0x2d [ 2213.553470] ? ext4_xattr_block_find.isra.0+0x5e0/0x5e0 [ 2213.558808] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2213.563551] ? retint_kernel+0x2d/0x2d [ 2213.567413] ext4_xattr_ibody_set+0x73/0x280 [ 2213.571794] ext4_xattr_set_handle+0x4f5/0xda0 [ 2213.576352] ? ext4_xattr_ibody_inline_set+0x280/0x280 [ 2213.581625] ? security_sid_to_context_core+0x12c/0x200 [ 2213.586964] ? lock_downgrade+0x6e0/0x6e0 [ 2213.591097] ? selinux_inode_create+0x30/0x30 [ 2213.595568] ext4_initxattrs+0xb5/0x110 [ 2213.599519] security_inode_init_security+0x236/0x320 [ 2213.604681] ? ext4_init_acl+0x190/0x190 [ 2213.608717] ? security_kernel_post_read_file+0xd0/0xd0 [ 2213.614056] ? insert_inode_locked+0x39e/0x4b0 [ 2213.618614] __ext4_new_inode+0x35ed/0x4e80 [ 2213.622911] ? ext4_free_inode+0x14a0/0x14a0 [ 2213.627290] ? avc_has_perm+0x1a4/0x320 [ 2213.631237] ? __dquot_initialize+0x3f4/0x980 [ 2213.635716] ? avc_has_perm_noaudit+0x2a0/0x2a0 [ 2213.640358] ? inode_get_rsv_space.part.0+0x100/0x100 [ 2213.645520] ? security_transition_sid+0xcb/0x120 [ 2213.650336] ? security_transition_sid+0x9d/0x120 [ 2213.655152] ext4_mkdir+0x2e4/0xb60 [ 2213.658754] ? selinux_dentry_init_security+0x220/0x220 [ 2213.664089] ? ext4_init_dot_dotdot+0x4b0/0x4b0 [ 2213.668745] ? security_inode_mkdir+0xcc/0x100 [ 2213.673301] vfs_mkdir+0x3af/0x620 [ 2213.676814] SyS_mkdirat+0x1b5/0x220 [ 2213.680502] ? SyS_mknod+0x30/0x30 [ 2213.684013] ? do_syscall_64+0x4c/0x640 [ 2213.687963] ? SyS_mkdirat+0x220/0x220 [ 2213.691824] do_syscall_64+0x1d5/0x640 [ 2213.695688] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2213.700851] RIP: 0033:0x45bee7 [ 2213.704029] RSP: 002b:00007ffc3ea99388 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 2213.711710] RAX: ffffffffffffffda RBX: 000000000021c2c2 RCX: 000000000045bee7 [ 2213.718956] RDX: 00007ffc3ea993d6 RSI: 00000000000001ff RDI: 00007ffc3ea993d0 [ 2213.726199] RBP: 0000000000004607 R08: 0000000000000000 R09: 0000000000000006 [ 2213.733442] R10: 0000000000000064 R11: 0000000000000206 R12: 0000000000000012 [ 2213.740686] R13: 00007ffc3ea993c0 R14: 000000000021bf8f R15: 00007ffc3ea993d0 [ 2213.749177] Kernel Offset: disabled [ 2213.752848] Rebooting in 86400 seconds..