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", 0x52c) sendfile(r2, r3, 0x0, 0x10000) r11 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x5) ioctl$GIO_SCRNMAP(r11, 0x4b40, &(0x7f0000000000)=""/6) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x402880, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$P9_RFSYNC(r2, &(0x7f0000000140)={0x7, 0x33, 0x1}, 0x7) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) r12 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r12, &(0x7f0000000580), 0x12) ioctl$DRM_IOCTL_MODE_ADDFB2(r12, 0xc06864b8, &(0x7f0000000240)={0x3, 0x8, 0x101, 0x62, 0x1, [0x8, 0xf66, 0xff], [0xad, 0x5d51, 0x9, 0x4], [0xff, 0x3c, 0x0, 0x9], [0xfe, 0x1, 0x0, 0x3]}) [ 1007.732818][ T9531] FAULT_INJECTION: forcing a failure. [ 1007.732818][ T9531] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.752070][ T9531] CPU: 0 PID: 9531 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1007.760797][ T9531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1007.770922][ T9531] Call Trace: [ 1007.774243][ T9531] dump_stack+0x11d/0x187 [ 1007.778716][ T9531] should_fail.cold+0x5/0xf [ 1007.783280][ T9531] __should_failslab+0x82/0xb0 [ 1007.788069][ T9531] should_failslab+0x5/0xf [ 1007.792514][ T9531] kmem_cache_alloc_trace+0x26/0x5f0 [ 1007.797826][ T9531] ? __get_free_pages+0x8/0x40 [ 1007.802621][ T9531] ? __genradix_ptr_alloc+0x1ee/0x300 [ 1007.808095][ T9531] sctp_auth_shkey_create+0x84/0x140 [ 1007.813436][ T9531] sctp_auth_asoc_copy_shkeys+0x184/0x260 [ 1007.819199][ T9531] sctp_association_new+0xc09/0xec0 [ 1007.824516][ T9531] sctp_connect_new_asoc+0xea/0x340 [ 1007.829747][ T9531] __sctp_connect+0x282/0x680 [ 1007.834447][ T9531] ? _copy_from_user+0x93/0xf0 [ 1007.839302][ T9531] __sctp_setsockopt_connectx+0xe9/0x130 [ 1007.844967][ T9531] sctp_setsockopt+0x154f/0x5150 [ 1007.850056][ T9531] sock_common_setsockopt+0x5d/0x80 [ 1007.855356][ T9531] __sys_setsockopt+0x1d6/0x380 [ 1007.860248][ T9531] __x64_sys_setsockopt+0x6b/0x80 [ 1007.865309][ T9531] do_syscall_64+0xc7/0x390 [ 1007.869844][ T9531] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1007.875956][ T9531] RIP: 0033:0x45c479 [ 1007.879889][ T9531] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1007.899818][ T9531] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1007.908525][ T9531] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1007.916651][ T9531] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1007.924767][ T9531] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1007.932932][ T9531] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1007.940927][ T9531] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000005 [ 1007.956848][ T26] audit: type=1800 audit(1583190571.029:3963): pid=9533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16814 res=0 23:09:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = geteuid() r2 = getgid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x60001000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x4044) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x52c) sendfile(r3, r4, 0x0, 0x10000) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000200)=0x0) r6 = geteuid() r7 = getgid() r8 = geteuid() r9 = getgid() r10 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r10, &(0x7f0000000580), 0x12) r11 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r11, 0x0, 0x0) r12 = add_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000180)="96", 0x1, 0xfffffffffffffffb) request_key(&(0x7f0000000580)='user\x00', &(0x7f00000000c0)={'syz'}, 0x0, r12) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r12, 0x0, 0xb}, &(0x7f0000000180)={'enc=', 'pkcs1', ' hash=', {'blake2s-224\x00'}}, &(0x7f0000000280), &(0x7f0000000340)="57acf3a973fafa5cf95ae1") sendmsg$nl_generic(r11, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x60001000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYPTR64=&(0x7f00000007c0)=ANY=[@ANYRES32=r1, @ANYRESHEX, @ANYRES32=r4]], 0x3}, 0x1, 0x0, 0x0, 0x20000085}, 0x4044) syz_mount_image$vfat(&(0x7f0000000340)='vfat\x00', &(0x7f00000003c0)='./file0\x00', 0x7fffffff, 0x2, &(0x7f00000006c0)=[{&(0x7f0000000400)="0b1a23d66eed54dd88c89c33f6561d8ccb3d88e9c0b87d218382b2129eda5dffaed063ce90ca18c4917ee4bd5dd6dfac246212b6d8a4e8a2d9ae36ba63e488f7b2db7c8a4016675b3feab60c767b212ff25cf7015792dd63925b387e4927cf2ec362a210f5adb0c44b808996dbb0d86fa1c864b1e6f958b59eaf6751355d2370e6a831e22e535d57017c7eb07db01d12cf34155d1121aac8", 0x98, 0x9}, {&(0x7f0000000600)="ea1a5f9892ae7f6a41957e4429f16a80e37c43a801e721e7fc90e567f0f2729db272b8ed488ead27e71344a6c253f773d1c65b03e8a79373cca07ec53971b369130acf21606b3ce7402f02eaa3a8312e78c95985efa81709b8010e7e33381c20e56281327e337ca3048219647261ef01fa0e4c04d850a76a915fc8d4e5b0bc8060f880fe960bf2ca1402f581ffac3c536dfecdbdbbd1cd56b38b2609fc078d081479c81a92383f1fc54e580b4911fa5cc45d0596e252585ec591e8", 0xbb, 0x8}], 0x2040002, &(0x7f0000000700)={[{@uni_xlate='uni_xlate=1'}], [{@dont_appraise='dont_appraise'}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'self'}}, {@uid_gt={'uid>', r8}}, {@subj_role={'subj_role', 0x3d, 'system.posix_acl_default\x00'}}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x60001000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x4044) r13 = geteuid() r14 = getgid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x60001000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES32=r14, @ANYRES32=r13, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x4044) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x1, 0x7}, [{0x2, 0x0, r1}, {0x2, 0x7, r5}, {0x2, 0x6, 0xffffffffffffffff}, {0x2, 0x4, r6}], {0x4, 0x1}, [{0x8, 0x6, r14}], {0x10, 0x3}, {0x20, 0x4}}, 0x4c, 0x3) r15 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r15, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:09:31 executing program 1 (fault-call:5 fault-nth:6): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 1008.168567][ T9542] FAULT_INJECTION: forcing a failure. [ 1008.168567][ T9542] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.216335][ T9542] CPU: 1 PID: 9542 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1008.224981][ T9542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1008.235051][ T9542] Call Trace: [ 1008.238356][ T9542] dump_stack+0x11d/0x187 [ 1008.242772][ T9542] should_fail.cold+0x5/0xf [ 1008.247319][ T9542] __should_failslab+0x82/0xb0 [ 1008.252116][ T9542] should_failslab+0x5/0xf [ 1008.256542][ T9542] kmem_cache_alloc_trace+0x26/0x5f0 [ 1008.262105][ T9542] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1008.268038][ T9542] sctp_add_bind_addr+0x90/0x2c0 [ 1008.273024][ T9542] sctp_copy_local_addr_list+0x23d/0x290 [ 1008.278722][ T9542] ? _crng_backtrack_protect+0xd1/0x100 [ 1008.284305][ T9542] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1008.290222][ T9542] ? sctp_v6_is_any+0x3d/0x50 [ 1008.295019][ T9542] sctp_copy_one_addr+0x65/0x150 [ 1008.299989][ T9542] sctp_bind_addr_copy+0xb3/0x241 [ 1008.305103][ T9542] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1008.311292][ T9542] sctp_connect_new_asoc+0x10b/0x340 [ 1008.316726][ T9542] __sctp_connect+0x282/0x680 [ 1008.321429][ T9542] ? _copy_from_user+0x93/0xf0 [ 1008.326237][ T9542] __sctp_setsockopt_connectx+0xe9/0x130 [ 1008.331908][ T9542] sctp_setsockopt+0x154f/0x5150 [ 1008.336897][ T9542] sock_common_setsockopt+0x5d/0x80 [ 1008.342261][ T9542] __sys_setsockopt+0x1d6/0x380 [ 1008.347146][ T9542] __x64_sys_setsockopt+0x6b/0x80 [ 1008.352225][ T9542] do_syscall_64+0xc7/0x390 [ 1008.356758][ T9542] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1008.362687][ T9542] RIP: 0033:0x45c479 [ 1008.366646][ T9542] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1008.386436][ T9542] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1008.395027][ T9542] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1008.403023][ T9542] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1008.411029][ T9542] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1008.419010][ T9542] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1008.427105][ T9542] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000006 23:09:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, 0x0) 23:09:31 executing program 1 (fault-call:5 fault-nth:7): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:31 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x71, &(0x7f00000001c0), 0x8) 23:09:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000002c0)={0x0, @reserved}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:09:31 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r1, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xd000, 0x2000}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) getsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 1008.702266][ T9554] FAULT_INJECTION: forcing a failure. [ 1008.702266][ T9554] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.769231][ T9554] CPU: 0 PID: 9554 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1008.777863][ T9554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1008.787937][ T9554] Call Trace: [ 1008.791313][ T9554] dump_stack+0x11d/0x187 [ 1008.795667][ T9554] should_fail.cold+0x5/0xf [ 1008.800200][ T9554] __should_failslab+0x82/0xb0 [ 1008.804988][ T9554] should_failslab+0x5/0xf [ 1008.809510][ T9554] kmem_cache_alloc_trace+0x26/0x5f0 [ 1008.814897][ T9554] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1008.820120][ T9554] sctp_add_bind_addr+0x90/0x2c0 [ 1008.825164][ T9554] sctp_copy_local_addr_list+0x23d/0x290 [ 1008.830818][ T9554] ? _crng_backtrack_protect+0xd1/0x100 [ 1008.836399][ T9554] ? sctp_v6_is_any+0x3d/0x50 [ 1008.841106][ T9554] sctp_copy_one_addr+0x65/0x150 [ 1008.846086][ T9554] sctp_bind_addr_copy+0xb3/0x241 [ 1008.851137][ T9554] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1008.857318][ T9554] sctp_connect_new_asoc+0x10b/0x340 [ 1008.862628][ T9554] __sctp_connect+0x282/0x680 [ 1008.867396][ T9554] ? _copy_from_user+0x93/0xf0 [ 1008.872189][ T9554] __sctp_setsockopt_connectx+0xe9/0x130 [ 1008.877852][ T9554] sctp_setsockopt+0x154f/0x5150 [ 1008.882815][ T9554] sock_common_setsockopt+0x5d/0x80 [ 1008.888041][ T9554] __sys_setsockopt+0x1d6/0x380 [ 1008.892965][ T9554] __x64_sys_setsockopt+0x6b/0x80 [ 1008.898160][ T9554] do_syscall_64+0xc7/0x390 [ 1008.902695][ T9554] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1008.908600][ T9554] RIP: 0033:0x45c479 [ 1008.912616][ T9554] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1008.932301][ T9554] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1008.940729][ T9554] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1008.948839][ T9554] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1008.956852][ T9554] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1008.964846][ T9554] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1008.972841][ T9554] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000007 23:09:32 executing program 1 (fault-call:5 fault-nth:8): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:32 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:09:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xfcc3, 0xa0200) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a", 0x52c) sendfile(r2, r3, 0x0, 0x10000) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x70, 0x9, 0x81, 0x7, 0x1, 0x0, 0x1, 0x1, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10000, 0x2, @perf_config_ext={0x1}, 0x1400, 0x7, 0x0, 0x5, 0x9, 0x2, 0xffff}, r1, 0xc, r2, 0x9) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1009.203545][ T9574] FAULT_INJECTION: forcing a failure. [ 1009.203545][ T9574] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.279729][ T9574] CPU: 1 PID: 9574 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1009.288459][ T9574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1009.298526][ T9574] Call Trace: [ 1009.301848][ T9574] dump_stack+0x11d/0x187 [ 1009.306215][ T9574] should_fail.cold+0x5/0xf [ 1009.310801][ T9574] __should_failslab+0x82/0xb0 [ 1009.315606][ T9574] should_failslab+0x5/0xf [ 1009.320049][ T9574] kmem_cache_alloc_trace+0x26/0x5f0 [ 1009.325436][ T9574] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1009.330826][ T9574] sctp_add_bind_addr+0x90/0x2c0 [ 1009.336020][ T9574] sctp_copy_local_addr_list+0x23d/0x290 [ 1009.341740][ T9574] ? _crng_backtrack_protect+0xd1/0x100 [ 1009.347327][ T9574] ? sctp_v6_is_any+0x3d/0x50 [ 1009.352040][ T9574] sctp_copy_one_addr+0x65/0x150 [ 1009.357013][ T9574] sctp_bind_addr_copy+0xb3/0x241 [ 1009.362070][ T9574] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1009.368252][ T9574] sctp_connect_new_asoc+0x10b/0x340 [ 1009.373613][ T9574] __sctp_connect+0x282/0x680 [ 1009.378479][ T9574] ? _copy_from_user+0x93/0xf0 [ 1009.383397][ T9574] __sctp_setsockopt_connectx+0xe9/0x130 [ 1009.389301][ T9574] sctp_setsockopt+0x154f/0x5150 [ 1009.394281][ T9574] sock_common_setsockopt+0x5d/0x80 [ 1009.399512][ T9574] __sys_setsockopt+0x1d6/0x380 [ 1009.404489][ T9574] __x64_sys_setsockopt+0x6b/0x80 [ 1009.409546][ T9574] do_syscall_64+0xc7/0x390 [ 1009.414184][ T9574] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1009.420150][ T9574] RIP: 0033:0x45c479 [ 1009.424068][ T9574] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1009.443684][ T9574] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1009.451957][ T26] audit: type=1804 audit(1583190572.379:3964): pid=9581 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir309363322/syzkaller.l56wwm/1191/file0" dev="sda1" ino=16849 res=1 [ 1009.452303][ T9574] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1009.485257][ T9574] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1009.493249][ T9574] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1009.501240][ T9574] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1009.509292][ T9574] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000008 23:09:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x52c) sendfile(r1, r2, 0x0, 0x10000) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2, 0xffffffffffffffff}) 23:09:32 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f00000000c0)=0x40) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f00000002c0)={'security\x00', 0x47, "11473c4ae1543497081bdf78c0b9c2b9a6b311684929cd09f00387319b4cdd395d7598363bacd81a6c98b29e4474d89178abb6de4d31f7eb0ebd6899a8a62bc11b3db496e6375c"}, &(0x7f0000000240)=0x6b) r3 = syz_open_pts(r2, 0xf262fe0a6827f72b) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000180)={0xc1, 0x3, 0x4, 0x0, 0x8, "13b3e72dfc3a780ba79ffdaab0d20fcec25f4f"}) 23:09:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, 0x0) 23:09:32 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x72, &(0x7f00000001c0), 0x8) [ 1009.652821][ T26] audit: type=1804 audit(1583190572.729:3965): pid=9586 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir309363322/syzkaller.l56wwm/1192/file0" dev="sda1" ino=16545 res=1 23:09:32 executing program 1 (fault-call:5 fault-nth:9): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 1009.970916][ T9604] FAULT_INJECTION: forcing a failure. [ 1009.970916][ T9604] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.997889][ T9604] CPU: 0 PID: 9604 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1010.006610][ T9604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.016671][ T9604] Call Trace: [ 1010.019981][ T9604] dump_stack+0x11d/0x187 [ 1010.024331][ T9604] should_fail.cold+0x5/0xf [ 1010.028968][ T9604] __should_failslab+0x82/0xb0 [ 1010.033829][ T9604] should_failslab+0x5/0xf [ 1010.038256][ T9604] kmem_cache_alloc_trace+0x26/0x5f0 [ 1010.043652][ T9604] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1010.049019][ T9604] sctp_add_bind_addr+0x90/0x2c0 [ 1010.053977][ T9604] sctp_copy_local_addr_list+0x23d/0x290 [ 1010.059629][ T9604] ? _crng_backtrack_protect+0xd1/0x100 [ 1010.065271][ T9604] ? sctp_v6_is_any+0x3d/0x50 [ 1010.069973][ T9604] sctp_copy_one_addr+0x65/0x150 [ 1010.074984][ T9604] sctp_bind_addr_copy+0xb3/0x241 [ 1010.080076][ T9604] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1010.086265][ T9604] sctp_connect_new_asoc+0x10b/0x340 [ 1010.091590][ T9604] __sctp_connect+0x282/0x680 [ 1010.096319][ T9604] ? _copy_from_user+0x93/0xf0 [ 1010.101115][ T9604] __sctp_setsockopt_connectx+0xe9/0x130 [ 1010.106784][ T9604] sctp_setsockopt+0x154f/0x5150 [ 1010.111762][ T9604] sock_common_setsockopt+0x5d/0x80 [ 1010.117059][ T9604] __sys_setsockopt+0x1d6/0x380 [ 1010.121954][ T9604] __x64_sys_setsockopt+0x6b/0x80 [ 1010.127011][ T9604] do_syscall_64+0xc7/0x390 [ 1010.131555][ T9604] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1010.137520][ T9604] RIP: 0033:0x45c479 [ 1010.141447][ T9604] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1010.161063][ T9604] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1010.169624][ T9604] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1010.177647][ T9604] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1010.185657][ T9604] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1010.193701][ T9604] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1010.201767][ T9604] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000009 23:09:33 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='trusted.overlay.origin\x00', &(0x7f0000000440)='y\x00', 0x2, 0x1) fchdir(r0) ioctl$UI_DEV_CREATE(r0, 0x5501) open(&(0x7f0000000340)='./file0/file0\x00', 0x80, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0xfffffffffffffffe) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000380)={0x7fff, 0x5ad, 0xc537, 0x4, 0x6, "83093bc844c80bbf"}) add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r2) r4 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000480)) writev(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:09:33 executing program 1 (fault-call:5 fault-nth:10): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:33 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) setitimer(0x0, &(0x7f0000000180)={{0x77359400}}, &(0x7f0000000200)) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r1, 0x0, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000000c0)) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) llistxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000002500)=""/4093, 0xffd) 23:09:33 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) [ 1010.589111][ T9616] FAULT_INJECTION: forcing a failure. [ 1010.589111][ T9616] name failslab, interval 1, probability 0, space 0, times 0 23:09:33 executing program 3 (fault-call:5 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)) 23:09:33 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x75, &(0x7f00000001c0), 0x8) [ 1010.752091][ T9616] CPU: 1 PID: 9616 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1010.760804][ T9616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.770991][ T9616] Call Trace: [ 1010.774310][ T9616] dump_stack+0x11d/0x187 [ 1010.778664][ T9616] should_fail.cold+0x5/0xf [ 1010.783343][ T9616] __should_failslab+0x82/0xb0 [ 1010.788195][ T9616] should_failslab+0x5/0xf [ 1010.792797][ T9616] kmem_cache_alloc_trace+0x26/0x5f0 [ 1010.798152][ T9616] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1010.803370][ T9616] sctp_add_bind_addr+0x90/0x2c0 [ 1010.806878][ T9627] FAULT_INJECTION: forcing a failure. [ 1010.806878][ T9627] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.808369][ T9616] sctp_copy_local_addr_list+0x23d/0x290 [ 1010.808484][ T9616] ? _crng_backtrack_protect+0xd1/0x100 [ 1010.832194][ T9616] ? sctp_v6_is_any+0x3d/0x50 [ 1010.836937][ T9616] sctp_copy_one_addr+0x65/0x150 [ 1010.841901][ T9616] sctp_bind_addr_copy+0xb3/0x241 [ 1010.846958][ T9616] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1010.853132][ T9616] sctp_connect_new_asoc+0x10b/0x340 [ 1010.858433][ T9616] __sctp_connect+0x282/0x680 [ 1010.863125][ T9616] ? _copy_from_user+0x93/0xf0 [ 1010.867914][ T9616] __sctp_setsockopt_connectx+0xe9/0x130 [ 1010.873574][ T9616] sctp_setsockopt+0x154f/0x5150 [ 1010.878547][ T9616] sock_common_setsockopt+0x5d/0x80 [ 1010.883758][ T9616] __sys_setsockopt+0x1d6/0x380 [ 1010.888669][ T9616] __x64_sys_setsockopt+0x6b/0x80 [ 1010.893805][ T9616] do_syscall_64+0xc7/0x390 [ 1010.898326][ T9616] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1010.904226][ T9616] RIP: 0033:0x45c479 [ 1010.908133][ T9616] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1010.927737][ T9616] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1010.936155][ T9616] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1010.944130][ T9616] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1010.952120][ T9616] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1010.960104][ T9616] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1010.968078][ T9616] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000000a [ 1010.981216][ T9627] CPU: 0 PID: 9627 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0 [ 1010.989841][ T9627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.999899][ T9627] Call Trace: [ 1011.003208][ T9627] dump_stack+0x11d/0x187 [ 1011.007621][ T9627] should_fail.cold+0x5/0xf [ 1011.012158][ T9627] __should_failslab+0x82/0xb0 [ 1011.017036][ T9627] should_failslab+0x5/0xf [ 1011.021476][ T9627] __kmalloc+0x54/0x640 [ 1011.025707][ T9627] ? tomoyo_realpath_from_path+0x85/0x3d0 [ 1011.031462][ T9627] tomoyo_realpath_from_path+0x85/0x3d0 [ 1011.037034][ T9627] tomoyo_path_number_perm+0xff/0x360 [ 1011.042420][ T9627] ? _parse_integer+0x12f/0x150 [ 1011.047319][ T9627] ? __fget_files+0xa2/0x1c0 [ 1011.051946][ T9627] tomoyo_file_ioctl+0x28/0x40 [ 1011.056758][ T9627] security_file_ioctl+0x69/0xa0 [ 1011.061726][ T9627] ksys_ioctl+0x5a/0x150 [ 1011.065992][ T9627] __x64_sys_ioctl+0x47/0x60 [ 1011.070609][ T9627] do_syscall_64+0xc7/0x390 [ 1011.075210][ T9627] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1011.081177][ T9627] RIP: 0033:0x45c479 [ 1011.085238][ T9627] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1011.104851][ T9627] RSP: 002b:00007fcd2ee90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1011.113276][ T9627] RAX: ffffffffffffffda RBX: 00007fcd2ee916d4 RCX: 000000000045c479 [ 1011.121258][ T9627] RDX: 0000000020000100 RSI: 0000000000005412 RDI: 0000000000000004 [ 1011.129241][ T9627] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1011.137224][ T9627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1011.145209][ T9627] R13: 0000000000000550 R14: 00000000004c7a3a R15: 0000000000000000 23:09:34 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xe4, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xd9}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa79280bc}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffff1d}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4b}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4004000}, 0x40880d5) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x7, 0x7fffffff, 0x0, 0xffffffff}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r4 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) [ 1011.160413][ T9627] ERROR: Out of memory at tomoyo_realpath_from_path. 23:09:34 executing program 1 (fault-call:5 fault-nth:11): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 1011.331846][ T9633] IPVS: Error connecting to the multicast addr [ 1011.354488][ T9634] FAULT_INJECTION: forcing a failure. [ 1011.354488][ T9634] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.382639][ T9634] CPU: 1 PID: 9634 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1011.391288][ T9634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1011.401352][ T9634] Call Trace: [ 1011.404716][ T9634] dump_stack+0x11d/0x187 [ 1011.409172][ T9634] should_fail.cold+0x5/0xf [ 1011.413719][ T9634] __should_failslab+0x82/0xb0 [ 1011.418664][ T9634] should_failslab+0x5/0xf [ 1011.423099][ T9634] kmem_cache_alloc_trace+0x26/0x5f0 [ 1011.428543][ T9634] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1011.433770][ T9634] sctp_add_bind_addr+0x90/0x2c0 [ 1011.438742][ T9634] sctp_copy_local_addr_list+0x23d/0x290 [ 1011.444398][ T9634] ? _crng_backtrack_protect+0xd1/0x100 [ 1011.450081][ T9634] ? sctp_v6_is_any+0x3d/0x50 [ 1011.454785][ T9634] sctp_copy_one_addr+0x65/0x150 [ 1011.459750][ T9634] sctp_bind_addr_copy+0xb3/0x241 [ 1011.464810][ T9634] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1011.471007][ T9634] sctp_connect_new_asoc+0x10b/0x340 [ 1011.476336][ T9634] __sctp_connect+0x282/0x680 [ 1011.481035][ T9634] ? _copy_from_user+0x93/0xf0 [ 1011.485915][ T9634] __sctp_setsockopt_connectx+0xe9/0x130 [ 1011.491577][ T9634] sctp_setsockopt+0x154f/0x5150 [ 1011.496546][ T9634] sock_common_setsockopt+0x5d/0x80 [ 1011.501773][ T9634] __sys_setsockopt+0x1d6/0x380 [ 1011.506910][ T9634] __x64_sys_setsockopt+0x6b/0x80 [ 1011.512080][ T9634] do_syscall_64+0xc7/0x390 [ 1011.516700][ T9634] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1011.522637][ T9634] RIP: 0033:0x45c479 [ 1011.526554][ T9634] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1011.546396][ T9634] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1011.554957][ T9634] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1011.562939][ T9634] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1011.570936][ T9634] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 23:09:34 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f00000002c0)={0x0, 0x2, 0x7, 0xfffffffffffffffb, 0xfb4, 0x7073, 0x5, 0x47a, 0x7, 0x6, 0x9, 0x4}) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) [ 1011.579025][ T9634] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1011.587012][ T9634] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000000b 23:09:34 executing program 3 (fault-call:5 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)) 23:09:34 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x76, &(0x7f00000001c0), 0x8) 23:09:34 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x2040000, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) [ 1011.798265][ T9645] FAULT_INJECTION: forcing a failure. [ 1011.798265][ T9645] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.869756][ T9645] CPU: 1 PID: 9645 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0 [ 1011.878396][ T9645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1011.888481][ T9645] Call Trace: [ 1011.891794][ T9645] dump_stack+0x11d/0x187 [ 1011.896195][ T9645] should_fail.cold+0x5/0xf [ 1011.900732][ T9645] __should_failslab+0x82/0xb0 [ 1011.905522][ T9645] should_failslab+0x5/0xf [ 1011.910056][ T9645] __kmalloc+0x54/0x640 [ 1011.914359][ T9645] ? tomoyo_encode2.part.0+0xd0/0x240 [ 1011.919780][ T9645] ? dentry_path_raw+0x33/0x40 [ 1011.924644][ T9645] ? strlen+0x38/0x60 [ 1011.928672][ T9645] tomoyo_encode2.part.0+0xd0/0x240 [ 1011.933968][ T9645] tomoyo_encode+0x32/0x50 [ 1011.938457][ T9645] tomoyo_realpath_from_path+0x11e/0x3d0 [ 1011.944108][ T9645] tomoyo_path_number_perm+0xff/0x360 [ 1011.949497][ T9645] ? _parse_integer+0x12f/0x150 [ 1011.954437][ T9645] ? __fget_files+0xa2/0x1c0 [ 1011.959055][ T9645] tomoyo_file_ioctl+0x28/0x40 [ 1011.963900][ T9645] security_file_ioctl+0x69/0xa0 [ 1011.968860][ T9645] ksys_ioctl+0x5a/0x150 [ 1011.973220][ T9645] __x64_sys_ioctl+0x47/0x60 [ 1011.977851][ T9645] do_syscall_64+0xc7/0x390 [ 1011.982383][ T9645] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1011.988280][ T9645] RIP: 0033:0x45c479 [ 1011.992187][ T9645] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1012.011923][ T9645] RSP: 002b:00007fcd2ee90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 23:09:35 executing program 1 (fault-call:5 fault-nth:12): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 1012.020463][ T9645] RAX: ffffffffffffffda RBX: 00007fcd2ee916d4 RCX: 000000000045c479 [ 1012.028449][ T9645] RDX: 0000000020000100 RSI: 0000000000005412 RDI: 0000000000000004 [ 1012.036456][ T9645] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1012.044546][ T9645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1012.052583][ T9645] R13: 0000000000000550 R14: 00000000004c7a3a R15: 0000000000000001 [ 1012.102878][ T9656] FAULT_INJECTION: forcing a failure. [ 1012.102878][ T9656] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.146640][ T9656] CPU: 0 PID: 9656 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1012.155375][ T9656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1012.165439][ T9656] Call Trace: [ 1012.168759][ T9656] dump_stack+0x11d/0x187 [ 1012.173211][ T9656] should_fail.cold+0x5/0xf [ 1012.177875][ T9656] __should_failslab+0x82/0xb0 [ 1012.182668][ T9656] should_failslab+0x5/0xf [ 1012.187106][ T9656] kmem_cache_alloc_trace+0x26/0x5f0 [ 1012.192448][ T9656] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1012.197681][ T9656] sctp_add_bind_addr+0x90/0x2c0 [ 1012.202717][ T9656] sctp_copy_local_addr_list+0x23d/0x290 [ 1012.208375][ T9656] ? _crng_backtrack_protect+0xd1/0x100 [ 1012.214024][ T9656] ? sctp_v6_is_any+0x3d/0x50 [ 1012.218731][ T9656] sctp_copy_one_addr+0x65/0x150 [ 1012.223702][ T9656] sctp_bind_addr_copy+0xb3/0x241 [ 1012.228760][ T9656] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1012.235159][ T9656] sctp_connect_new_asoc+0x10b/0x340 [ 1012.240479][ T9656] __sctp_connect+0x282/0x680 [ 1012.245208][ T9656] ? _copy_from_user+0x93/0xf0 [ 1012.250020][ T9656] __sctp_setsockopt_connectx+0xe9/0x130 [ 1012.255689][ T9656] sctp_setsockopt+0x154f/0x5150 [ 1012.260714][ T9656] sock_common_setsockopt+0x5d/0x80 [ 1012.265973][ T9656] __sys_setsockopt+0x1d6/0x380 [ 1012.270881][ T9656] __x64_sys_setsockopt+0x6b/0x80 [ 1012.276123][ T9656] do_syscall_64+0xc7/0x390 [ 1012.280736][ T9656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1012.286645][ T9656] RIP: 0033:0x45c479 [ 1012.290567][ T9656] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1012.310262][ T9656] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1012.318841][ T9656] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1012.326830][ T9656] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1012.334821][ T9656] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1012.342906][ T9656] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1012.350892][ T9656] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000000c [ 1012.359317][ T9645] ERROR: Out of memory at tomoyo_realpath_from_path. 23:09:35 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x52c) sendfile(r0, r1, 0x0, 0x10000) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a", 0x52c) sendfile(r2, r3, 0x0, 0x10000) mkdirat(r2, &(0x7f00000001c0)='./file0\x00', 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) [ 1012.452112][ T26] audit: type=1804 audit(1583190575.529:3966): pid=9658 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir037414359/syzkaller.Dc7PXS/1059/file0" dev="sda1" ino=16881 res=1 23:09:35 executing program 3 (fault-call:5 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)) [ 1012.527670][ T26] audit: type=1804 audit(1583190575.529:3967): pid=9658 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir037414359/syzkaller.Dc7PXS/1059/file0" dev="sda1" ino=16881 res=1 [ 1012.626472][ T26] audit: type=1804 audit(1583190575.639:3968): pid=9659 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir037414359/syzkaller.Dc7PXS/1059/file0" dev="sda1" ino=16881 res=1 23:09:35 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0), 0x8) 23:09:35 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x220801, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xfffffffffffffffd) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x52c) sendfile(r3, r4, 0x0, 0x10000) fallocate(r3, 0x14, 0x4, 0x6) 23:09:35 executing program 1 (fault-call:5 fault-nth:13): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 1012.835075][ T9673] FAULT_INJECTION: forcing a failure. [ 1012.835075][ T9673] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.859738][ T9673] CPU: 1 PID: 9673 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1012.868377][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1012.878538][ T9673] Call Trace: [ 1012.881859][ T9673] dump_stack+0x11d/0x187 [ 1012.886289][ T9673] should_fail.cold+0x5/0xf [ 1012.890829][ T9673] __should_failslab+0x82/0xb0 [ 1012.895723][ T9673] should_failslab+0x5/0xf [ 1012.900167][ T9673] kmem_cache_alloc_trace+0x26/0x5f0 [ 1012.905479][ T9673] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1012.910703][ T9673] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1012.916649][ T9673] sctp_add_bind_addr+0x90/0x2c0 [ 1012.921616][ T9673] sctp_copy_local_addr_list+0x23d/0x290 [ 1012.927424][ T9673] ? _crng_backtrack_protect+0xd1/0x100 [ 1012.932999][ T9673] ? sctp_v6_is_any+0x3d/0x50 [ 1012.937703][ T9673] sctp_copy_one_addr+0x65/0x150 [ 1012.942670][ T9673] sctp_bind_addr_copy+0xb3/0x241 [ 1012.947832][ T9673] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1012.954020][ T9673] sctp_connect_new_asoc+0x10b/0x340 [ 1012.959340][ T9673] __sctp_connect+0x282/0x680 [ 1012.964072][ T9673] ? _copy_from_user+0x93/0xf0 [ 1012.968868][ T9673] __sctp_setsockopt_connectx+0xe9/0x130 [ 1012.974533][ T9673] sctp_setsockopt+0x154f/0x5150 [ 1012.979541][ T9673] sock_common_setsockopt+0x5d/0x80 [ 1012.984871][ T9673] __sys_setsockopt+0x1d6/0x380 [ 1012.989883][ T9673] __x64_sys_setsockopt+0x6b/0x80 [ 1012.994934][ T9673] do_syscall_64+0xc7/0x390 [ 1012.999478][ T9673] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1013.005384][ T9673] RIP: 0033:0x45c479 [ 1013.009349][ T9673] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1013.029201][ T9673] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1013.037626][ T9673] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1013.045612][ T9673] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1013.053719][ T9673] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1013.061699][ T9673] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1013.069681][ T9673] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000000d 23:09:36 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a", 0x52c) sendfile(r0, r1, 0x0, 0x10000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000180)='./file0/file0\x00', r2, &(0x7f0000000240)='./file0\x00', 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2051101, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) io_setup(0x5f6d, &(0x7f00000002c0)=0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_cancel(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0xfff, r5, &(0x7f00000003c0)="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", 0x1000, 0x812e, 0x0, 0x1}, &(0x7f0000000340)) r6 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:09:36 executing program 1 (fault-call:5 fault-nth:14): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 1013.295958][ T9684] FAULT_INJECTION: forcing a failure. [ 1013.295958][ T9684] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.325900][ T9684] CPU: 1 PID: 9684 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1013.334697][ T9684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1013.344763][ T9684] Call Trace: [ 1013.348188][ T9684] dump_stack+0x11d/0x187 [ 1013.352547][ T9684] should_fail.cold+0x5/0xf [ 1013.357078][ T9684] __should_failslab+0x82/0xb0 [ 1013.361886][ T9684] should_failslab+0x5/0xf [ 1013.366328][ T9684] kmem_cache_alloc_trace+0x26/0x5f0 [ 1013.371651][ T9684] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1013.376987][ T9684] sctp_add_bind_addr+0x90/0x2c0 [ 1013.382018][ T9684] sctp_copy_local_addr_list+0x23d/0x290 [ 1013.387688][ T9684] ? _crng_backtrack_protect+0xd1/0x100 [ 1013.393261][ T9684] ? sctp_v6_is_any+0x3d/0x50 [ 1013.397964][ T9684] sctp_copy_one_addr+0x65/0x150 [ 1013.402939][ T9684] sctp_bind_addr_copy+0xb3/0x241 [ 1013.408047][ T9684] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1013.414230][ T9684] sctp_connect_new_asoc+0x10b/0x340 [ 1013.419546][ T9684] __sctp_connect+0x282/0x680 [ 1013.424261][ T9684] ? _copy_from_user+0x93/0xf0 [ 1013.429059][ T9684] __sctp_setsockopt_connectx+0xe9/0x130 [ 1013.434724][ T9684] sctp_setsockopt+0x154f/0x5150 [ 1013.439728][ T9684] sock_common_setsockopt+0x5d/0x80 [ 1013.445022][ T9684] __sys_setsockopt+0x1d6/0x380 [ 1013.449960][ T9684] __x64_sys_setsockopt+0x6b/0x80 [ 1013.455071][ T9684] do_syscall_64+0xc7/0x390 [ 1013.459607][ T9684] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1013.465510][ T9684] RIP: 0033:0x45c479 [ 1013.469537][ T9684] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 23:09:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)) [ 1013.489154][ T9684] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1013.497654][ T9684] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1013.505641][ T9684] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1013.513724][ T9684] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1013.521811][ T9684] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1013.529797][ T9684] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000000e 23:09:36 executing program 1 (fault-call:5 fault-nth:15): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:36 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000580), 0x12) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) syz_read_part_table(0x80000001, 0x1, &(0x7f00000000c0)=[{&(0x7f00000002c0)="e42ac3da0ead37b11048674a0a711e0b8a8aaefa569af7b6aaf0edbd7cf78e86c88f0f5e3b1780752a4151c70af8caa7cfe6ea6265d23f90ff9e55579338af27d8010dca9845e1fdc60ebc63a1081ddf92c863d0c29df5d2f0f7d12fdd6990757800876f592f1b942a067a1685106284e4d5d3ff8b0022e55c335f37abd6c1a626d3b15db1426e5307e5d969e658b676854bfd00378efa39e8146e9e73478bdc9b8ce0c0bf80ad086eca9507adbfa39817fff4942049d7a78a477189177027190e7306952c", 0xc5, 0x5}]) r3 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) [ 1013.754767][ T9693] FAULT_INJECTION: forcing a failure. [ 1013.754767][ T9693] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.807584][ T9693] CPU: 1 PID: 9693 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1013.816322][ T9693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1013.826508][ T9693] Call Trace: [ 1013.830004][ T9693] dump_stack+0x11d/0x187 [ 1013.834361][ T9693] should_fail.cold+0x5/0xf [ 1013.838953][ T9693] __should_failslab+0x82/0xb0 [ 1013.843743][ T9693] should_failslab+0x5/0xf [ 1013.848189][ T9693] kmem_cache_alloc_trace+0x26/0x5f0 [ 1013.853554][ T9693] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1013.858785][ T9693] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1013.864781][ T9693] sctp_add_bind_addr+0x90/0x2c0 [ 1013.869815][ T9693] sctp_copy_local_addr_list+0x23d/0x290 [ 1013.875575][ T9693] ? _crng_backtrack_protect+0xd1/0x100 [ 1013.881150][ T9693] ? sctp_v6_is_any+0x3d/0x50 [ 1013.885951][ T9693] sctp_copy_one_addr+0x65/0x150 [ 1013.890932][ T9693] sctp_bind_addr_copy+0xb3/0x241 [ 1013.896017][ T9693] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1013.902279][ T9693] sctp_connect_new_asoc+0x10b/0x340 [ 1013.907606][ T9693] __sctp_connect+0x282/0x680 [ 1013.912384][ T9693] ? _copy_from_user+0x93/0xf0 [ 1013.917216][ T9693] __sctp_setsockopt_connectx+0xe9/0x130 [ 1013.922874][ T9693] sctp_setsockopt+0x154f/0x5150 [ 1013.927848][ T9693] sock_common_setsockopt+0x5d/0x80 [ 1013.933072][ T9693] __sys_setsockopt+0x1d6/0x380 [ 1013.938021][ T9693] __x64_sys_setsockopt+0x6b/0x80 [ 1013.943102][ T9693] do_syscall_64+0xc7/0x390 [ 1013.947636][ T9693] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1013.953541][ T9693] RIP: 0033:0x45c479 [ 1013.957458][ T9693] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1013.977108][ T9693] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1013.985536][ T9693] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1013.993520][ T9693] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1014.001551][ T9693] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1014.009535][ T9693] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1014.017576][ T9693] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000000f 23:09:37 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x78, &(0x7f00000001c0), 0x8) 23:09:37 executing program 1 (fault-call:5 fault-nth:16): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:37 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setscheduler(r0, 0x85511be1a1ef46d0, &(0x7f0000000340)=0x100) syz_open_procfs(r0, &(0x7f0000001580)='clear_refs\x00') r1 = syz_open_dev$vcsn(&(0x7f00000015c0)='/dev/vcs#\x00', 0xed6, 0x20400) mkdirat(r1, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_dccp(0x2, 0x6, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/34, 0x22}, {&(0x7f0000000180)=""/19, 0x13}, {&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f0000000340)=""/34, 0x22}, {&(0x7f0000000380)=""/253, 0xfd}], 0x5, &(0x7f0000000580)=""/4096, 0x1000}, 0x12020) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) [ 1014.239545][ T9706] FAULT_INJECTION: forcing a failure. [ 1014.239545][ T9706] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.289776][ T9706] CPU: 1 PID: 9706 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1014.298428][ T9706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.308493][ T9706] Call Trace: [ 1014.311805][ T9706] dump_stack+0x11d/0x187 [ 1014.316154][ T9706] should_fail.cold+0x5/0xf [ 1014.320685][ T9706] __should_failslab+0x82/0xb0 [ 1014.325526][ T9706] should_failslab+0x5/0xf [ 1014.329968][ T9706] kmem_cache_alloc_trace+0x26/0x5f0 [ 1014.335284][ T9706] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1014.340509][ T9706] sctp_add_bind_addr+0x90/0x2c0 [ 1014.345479][ T9706] sctp_copy_local_addr_list+0x23d/0x290 [ 1014.351149][ T9706] ? _crng_backtrack_protect+0xd1/0x100 [ 1014.356721][ T9706] ? sctp_v6_is_any+0x3d/0x50 [ 1014.361501][ T9706] sctp_copy_one_addr+0x65/0x150 [ 1014.366469][ T9706] sctp_bind_addr_copy+0xb3/0x241 [ 1014.371543][ T9706] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1014.377731][ T9706] sctp_connect_new_asoc+0x10b/0x340 [ 1014.383039][ T9706] __sctp_connect+0x282/0x680 [ 1014.387761][ T9706] ? _copy_from_user+0x93/0xf0 [ 1014.392554][ T9706] __sctp_setsockopt_connectx+0xe9/0x130 [ 1014.398302][ T9706] sctp_setsockopt+0x154f/0x5150 [ 1014.403269][ T9706] sock_common_setsockopt+0x5d/0x80 [ 1014.408498][ T9706] __sys_setsockopt+0x1d6/0x380 [ 1014.413457][ T9706] __x64_sys_setsockopt+0x6b/0x80 [ 1014.418502][ T9706] do_syscall_64+0xc7/0x390 [ 1014.423052][ T9706] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1014.428950][ T9706] RIP: 0033:0x45c479 [ 1014.432855][ T9706] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1014.452896][ T9706] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1014.461323][ T9706] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1014.469306][ T9706] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1014.477414][ T9706] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1014.485400][ T9706] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1014.493382][ T9706] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000010 23:09:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x2, &(0x7f0000000100)) 23:09:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200001, 0x109) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e7, &(0x7f0000000200)="643b49cc00510bdde3a9aa65ea5022a195b574b5d38d3c03c79b50272f26303ffb2c82c5b17c5774cecff1a4bb73fa0f75a245db6a3665e760e1612e5df189e18b6b62085947dfddec00763a") r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) eventfd(0x2) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) socket$unix(0x1, 0x2, 0x0) 23:09:37 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200040, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000080)={0x2e0, 0x9b, 0x3663, 0x8, 0x1, "223bbee39f0482e927459345e925a3469ce54a", 0x200, 0xe59}) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x7}) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r5 = gettid() sched_getaffinity(r5, 0x8, &(0x7f0000000180)) write$cgroup_pid(r4, &(0x7f0000000580), 0x12) pause() setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000140)=0x390998cd, 0x4) r6 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x1f, 0x404100) ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x44d2c) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000100)={0x2, r3, 0x10001, 0x7}) 23:09:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000180)=0x2) 23:09:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)) 23:09:38 executing program 1 (fault-call:5 fault-nth:17): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:38 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x7b, &(0x7f00000001c0), 0x8) 23:09:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'os2.', './cgroup.cpu/syz0\x00'}, &(0x7f0000000200)='cpuacct.usage\x00', 0xe, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) [ 1015.137087][ T9734] FAULT_INJECTION: forcing a failure. [ 1015.137087][ T9734] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.179166][ T9734] CPU: 0 PID: 9734 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1015.187854][ T9734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1015.197915][ T9734] Call Trace: [ 1015.201282][ T9734] dump_stack+0x11d/0x187 [ 1015.205636][ T9734] should_fail.cold+0x5/0xf [ 1015.210167][ T9734] __should_failslab+0x82/0xb0 [ 1015.214965][ T9734] should_failslab+0x5/0xf [ 1015.219405][ T9734] kmem_cache_alloc_trace+0x26/0x5f0 [ 1015.224721][ T9734] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1015.229944][ T9734] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1015.235862][ T9734] sctp_add_bind_addr+0x90/0x2c0 [ 1015.240977][ T9734] sctp_copy_local_addr_list+0x23d/0x290 [ 1015.246728][ T9734] ? _crng_backtrack_protect+0xd1/0x100 [ 1015.252298][ T9734] ? sctp_v6_is_any+0x3d/0x50 [ 1015.257003][ T9734] sctp_copy_one_addr+0x65/0x150 [ 1015.262047][ T9734] sctp_bind_addr_copy+0xb3/0x241 [ 1015.267102][ T9734] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1015.273322][ T9734] sctp_connect_new_asoc+0x10b/0x340 [ 1015.278667][ T9734] __sctp_connect+0x282/0x680 [ 1015.283371][ T9734] ? _copy_from_user+0x93/0xf0 [ 1015.288200][ T9734] __sctp_setsockopt_connectx+0xe9/0x130 [ 1015.293853][ T9734] sctp_setsockopt+0x154f/0x5150 [ 1015.298821][ T9734] sock_common_setsockopt+0x5d/0x80 [ 1015.304144][ T9734] __sys_setsockopt+0x1d6/0x380 [ 1015.309084][ T9734] __x64_sys_setsockopt+0x6b/0x80 [ 1015.314141][ T9734] do_syscall_64+0xc7/0x390 [ 1015.318676][ T9734] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1015.324581][ T9734] RIP: 0033:0x45c479 [ 1015.328497][ T9734] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1015.348118][ T9734] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1015.356551][ T9734] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1015.364535][ T9734] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1015.372623][ T9734] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1015.380622][ T9734] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1015.388614][ T9734] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000011 23:09:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x10, &(0x7f0000000100)) 23:09:38 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000040)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:09:38 executing program 1 (fault-call:5 fault-nth:18): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:39 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:09:39 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x52c) sendfile(r0, r1, 0x0, 0x10000) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000200)=""/93, &(0x7f00000000c0)=0x5d) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) [ 1016.003813][ T9756] FAULT_INJECTION: forcing a failure. [ 1016.003813][ T9756] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.065328][ T9756] CPU: 0 PID: 9756 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1016.073963][ T9756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.084020][ T9756] Call Trace: [ 1016.087339][ T9756] dump_stack+0x11d/0x187 [ 1016.091710][ T9756] should_fail.cold+0x5/0xf [ 1016.096277][ T9756] __should_failslab+0x82/0xb0 [ 1016.101130][ T9756] should_failslab+0x5/0xf [ 1016.105570][ T9756] kmem_cache_alloc_trace+0x26/0x5f0 [ 1016.110880][ T9756] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1016.116105][ T9756] sctp_add_bind_addr+0x90/0x2c0 [ 1016.121070][ T9756] sctp_copy_local_addr_list+0x23d/0x290 [ 1016.126789][ T9756] ? _crng_backtrack_protect+0xd1/0x100 [ 1016.132411][ T9756] ? sctp_v6_is_any+0x3d/0x50 [ 1016.137221][ T9756] sctp_copy_one_addr+0x65/0x150 [ 1016.142226][ T9756] sctp_bind_addr_copy+0xb3/0x241 [ 1016.147288][ T9756] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1016.153524][ T9756] sctp_connect_new_asoc+0x10b/0x340 [ 1016.158864][ T9756] __sctp_connect+0x282/0x680 [ 1016.163565][ T9756] ? _copy_from_user+0x93/0xf0 [ 1016.168448][ T9756] __sctp_setsockopt_connectx+0xe9/0x130 [ 1016.174109][ T9756] sctp_setsockopt+0x154f/0x5150 [ 1016.179089][ T9756] sock_common_setsockopt+0x5d/0x80 [ 1016.184308][ T9756] __sys_setsockopt+0x1d6/0x380 [ 1016.189190][ T9756] __x64_sys_setsockopt+0x6b/0x80 [ 1016.194349][ T9756] do_syscall_64+0xc7/0x390 [ 1016.199034][ T9756] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1016.204970][ T9756] RIP: 0033:0x45c479 [ 1016.208877][ T9756] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1016.228490][ T9756] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1016.236914][ T9756] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1016.244897][ T9756] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1016.252965][ T9756] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 23:09:39 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x7c, &(0x7f00000001c0), 0x8) 23:09:39 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40080, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x100}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x200}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 1016.260946][ T9756] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1016.268932][ T9756] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000012 23:09:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x4c00, &(0x7f0000000100)) 23:09:39 executing program 1 (fault-call:5 fault-nth:19): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:39 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x126e7000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:09:39 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000180)={0x8, 0x2, 0x101, 0xf2, 0x6, 0x7, 0x22, "5e0e01f65561090e83495a8fccb1a440060cee62", "a74b1243d7b4c0d2417b0e45f461e1173c6efa68"}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000200)=""/73) [ 1016.650201][ T9781] FAULT_INJECTION: forcing a failure. [ 1016.650201][ T9781] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.691442][ T9781] CPU: 1 PID: 9781 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1016.700101][ T9781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.710160][ T9781] Call Trace: [ 1016.713594][ T9781] dump_stack+0x11d/0x187 [ 1016.717950][ T9781] should_fail.cold+0x5/0xf [ 1016.722472][ T9781] __should_failslab+0x82/0xb0 [ 1016.727312][ T9781] should_failslab+0x5/0xf [ 1016.731741][ T9781] kmem_cache_alloc_trace+0x26/0x5f0 [ 1016.737058][ T9781] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1016.742355][ T9781] sctp_add_bind_addr+0x90/0x2c0 [ 1016.747374][ T9781] sctp_copy_local_addr_list+0x23d/0x290 [ 1016.753033][ T9781] ? _crng_backtrack_protect+0xd1/0x100 [ 1016.758636][ T9781] ? sctp_v6_is_any+0x3d/0x50 [ 1016.763336][ T9781] sctp_copy_one_addr+0x65/0x150 [ 1016.768394][ T9781] sctp_bind_addr_copy+0xb3/0x241 [ 1016.773452][ T9781] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1016.779652][ T9781] sctp_connect_new_asoc+0x10b/0x340 [ 1016.785079][ T9781] __sctp_connect+0x282/0x680 [ 1016.789776][ T9781] ? _copy_from_user+0x93/0xf0 [ 1016.794618][ T9781] __sctp_setsockopt_connectx+0xe9/0x130 [ 1016.800310][ T9781] sctp_setsockopt+0x154f/0x5150 [ 1016.805279][ T9781] sock_common_setsockopt+0x5d/0x80 [ 1016.810536][ T9781] __sys_setsockopt+0x1d6/0x380 [ 1016.815436][ T9781] __x64_sys_setsockopt+0x6b/0x80 [ 1016.820486][ T9781] do_syscall_64+0xc7/0x390 [ 1016.825109][ T9781] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1016.831042][ T9781] RIP: 0033:0x45c479 [ 1016.834991][ T9781] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1016.854601][ T9781] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1016.863023][ T9781] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1016.871051][ T9781] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1016.879042][ T9781] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1016.887029][ T9781] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1016.895011][ T9781] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000013 23:09:40 executing program 4: r0 = userfaultfd(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x4, 0x4, 0x400}, 0x3c) socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") connect$inet6(r2, &(0x7f0000000140), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r1, &(0x7f0000000380), 0x0}, 0xc) r4 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r4, &(0x7f0000002000)='/', 0x1) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x801, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r7, &(0x7f0000000580), 0x12) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x480902) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) 23:09:40 executing program 1 (fault-call:5 fault-nth:20): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:40 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000040)=0xb, 0x4) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 1017.076239][ T9796] FAULT_INJECTION: forcing a failure. [ 1017.076239][ T9796] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.103257][ T9796] CPU: 1 PID: 9796 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1017.111890][ T9796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1017.122036][ T9796] Call Trace: [ 1017.125347][ T9796] dump_stack+0x11d/0x187 [ 1017.129698][ T9796] should_fail.cold+0x5/0xf [ 1017.134219][ T9796] __should_failslab+0x82/0xb0 [ 1017.139002][ T9796] should_failslab+0x5/0xf [ 1017.143438][ T9796] kmem_cache_alloc_trace+0x26/0x5f0 [ 1017.148747][ T9796] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1017.153972][ T9796] sctp_add_bind_addr+0x90/0x2c0 [ 1017.158938][ T9796] sctp_copy_local_addr_list+0x23d/0x290 [ 1017.164722][ T9796] ? _crng_backtrack_protect+0xd1/0x100 [ 1017.170295][ T9796] ? sctp_v6_is_any+0x3d/0x50 [ 1017.175003][ T9796] sctp_copy_one_addr+0x65/0x150 [ 1017.179974][ T9796] sctp_bind_addr_copy+0xb3/0x241 [ 1017.185153][ T9796] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1017.191473][ T9796] sctp_connect_new_asoc+0x10b/0x340 [ 1017.196788][ T9796] __sctp_connect+0x282/0x680 [ 1017.201495][ T9796] ? _copy_from_user+0x93/0xf0 [ 1017.206349][ T9796] __sctp_setsockopt_connectx+0xe9/0x130 [ 1017.212014][ T9796] sctp_setsockopt+0x154f/0x5150 [ 1017.216990][ T9796] sock_common_setsockopt+0x5d/0x80 [ 1017.222212][ T9796] __sys_setsockopt+0x1d6/0x380 [ 1017.227089][ T9796] __x64_sys_setsockopt+0x6b/0x80 [ 1017.232192][ T9796] do_syscall_64+0xc7/0x390 [ 1017.236784][ T9796] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1017.242695][ T9796] RIP: 0033:0x45c479 [ 1017.246613][ T9796] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1017.266223][ T9796] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 23:09:40 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) socket$inet(0x2, 0x2, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x12200, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:09:40 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000180)=r3) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 23:09:40 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x7d, &(0x7f00000001c0), 0x8) [ 1017.274645][ T9796] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1017.282627][ T9796] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1017.290719][ T9796] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1017.298772][ T9796] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1017.306755][ T9796] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000014 23:09:40 executing program 1 (fault-call:5 fault-nth:21): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 1017.512095][ T9821] FAULT_INJECTION: forcing a failure. [ 1017.512095][ T9821] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.549718][ T9821] CPU: 1 PID: 9821 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1017.558369][ T9821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1017.568428][ T9821] Call Trace: [ 1017.571740][ T9821] dump_stack+0x11d/0x187 [ 1017.576096][ T9821] should_fail.cold+0x5/0xf [ 1017.580636][ T9821] __should_failslab+0x82/0xb0 [ 1017.585421][ T9821] should_failslab+0x5/0xf [ 1017.589861][ T9821] kmem_cache_alloc_trace+0x26/0x5f0 [ 1017.595165][ T9821] ? delay_tsc+0x8a/0xb0 [ 1017.599497][ T9821] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1017.604718][ T9821] sctp_add_bind_addr+0x90/0x2c0 [ 1017.609751][ T9821] sctp_copy_local_addr_list+0x23d/0x290 [ 1017.615534][ T9821] ? _crng_backtrack_protect+0xd1/0x100 [ 1017.621110][ T9821] ? sctp_v6_is_any+0x3d/0x50 [ 1017.625865][ T9821] sctp_copy_one_addr+0x65/0x150 [ 1017.630826][ T9821] sctp_bind_addr_copy+0xb3/0x241 [ 1017.635876][ T9821] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1017.642047][ T9821] sctp_connect_new_asoc+0x10b/0x340 [ 1017.647348][ T9821] __sctp_connect+0x282/0x680 [ 1017.652045][ T9821] ? _copy_from_user+0x93/0xf0 [ 1017.656841][ T9821] __sctp_setsockopt_connectx+0xe9/0x130 [ 1017.662499][ T9821] sctp_setsockopt+0x154f/0x5150 [ 1017.667509][ T9821] sock_common_setsockopt+0x5d/0x80 [ 1017.672735][ T9821] __sys_setsockopt+0x1d6/0x380 [ 1017.677617][ T9821] __x64_sys_setsockopt+0x6b/0x80 [ 1017.682666][ T9821] do_syscall_64+0xc7/0x390 [ 1017.687282][ T9821] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1017.693329][ T9821] RIP: 0033:0x45c479 [ 1017.697299][ T9821] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1017.716931][ T9821] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1017.725355][ T9821] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1017.733350][ T9821] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1017.741348][ T9821] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1017.749389][ T9821] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 23:09:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x4c01, &(0x7f0000000100)) 23:09:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000580), 0x12) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) r1 = userfaultfd(0x0) r2 = memfd_create(&(0x7f0000000040)='#\'\x05nodev\x00\xefj\a\x15X\x18\xcf\x1e\xabF\x06\x8f\x1b\x00j\x98NO\x89\x92g\xfc\x19\xa6\x81e\xe1\x12S', 0x0) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r3, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000180)=0x4) write(r2, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) getsockname$netrom(r4, &(0x7f00000000c0)={{0x3, @null}, [@default, @rose, @default, @remote, @rose, @null, @netrom, @netrom]}, &(0x7f0000000140)=0x48) [ 1017.757375][ T9821] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000015 23:09:40 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x52c) sendfile(r1, r2, 0x0, 0x10000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000002c0)="8598ffac7f315548bb9785effddecfb6fe43523a44c6b6dcfa505e06bad402ee9accf17668d0e9191e949c73fbaf365eb5e1df28b4b54f67636febaaa3c4ceac3d7582f6f3d434b74ff046b819ba00d45a2edb5d1f2f78d8ccd1a42765ce53bbb94bc6365e15835eb01d2a4e58c5574c5f0398638a666e9832d2da6745fa875617a019919a0cd2e88df40bfbfd9cd9e767e9c818627d3bc1492b8a64240fc66ef89d98c96decd4cc614c076f6778c9545da333488eba088189b544bc09b8eee78cc8d6f167d148b0fdc0d82dc369f832d7de0c77c1e2c2240830e1d16a7da1ef629ef1aa670e67cb595f37177e3b6f12", 0xf0, r1}, 0x68) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000180)=0x8) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000240)={0x3, 'syz_tun\x00', {0x6}, 0x80}) 23:09:40 executing program 1 (fault-call:5 fault-nth:22): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:41 executing program 4: r0 = userfaultfd(0x0) r1 = dup(r0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r2, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 1017.932493][ T26] audit: type=1804 audit(1583190581.009:3969): pid=9839 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir037414359/syzkaller.Dc7PXS/1071/file0/file0" dev="sda1" ino=16906 res=1 [ 1017.994764][ T9843] FAULT_INJECTION: forcing a failure. [ 1017.994764][ T9843] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.017520][ T26] audit: type=1804 audit(1583190581.039:3970): pid=9839 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir037414359/syzkaller.Dc7PXS/1071/file0/file0" dev="sda1" ino=16906 res=1 [ 1018.056556][ T9843] CPU: 1 PID: 9843 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1018.065177][ T9843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1018.075245][ T9843] Call Trace: [ 1018.078562][ T9843] dump_stack+0x11d/0x187 [ 1018.082918][ T9843] should_fail.cold+0x5/0xf [ 1018.087539][ T9843] __should_failslab+0x82/0xb0 [ 1018.092328][ T9843] should_failslab+0x5/0xf [ 1018.096768][ T9843] kmem_cache_alloc_trace+0x26/0x5f0 [ 1018.102088][ T9843] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1018.107367][ T9843] sctp_add_bind_addr+0x90/0x2c0 [ 1018.112333][ T9843] sctp_copy_local_addr_list+0x23d/0x290 [ 1018.118106][ T9843] ? _crng_backtrack_protect+0xd1/0x100 [ 1018.123690][ T9843] ? sctp_v6_is_any+0x3d/0x50 [ 1018.128394][ T9843] sctp_copy_one_addr+0x65/0x150 [ 1018.133502][ T9843] sctp_bind_addr_copy+0xb3/0x241 [ 1018.138566][ T9843] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1018.144753][ T9843] sctp_connect_new_asoc+0x10b/0x340 [ 1018.150077][ T9843] __sctp_connect+0x282/0x680 [ 1018.154818][ T9843] ? _copy_from_user+0x93/0xf0 [ 1018.159718][ T9843] __sctp_setsockopt_connectx+0xe9/0x130 [ 1018.165385][ T9843] sctp_setsockopt+0x154f/0x5150 [ 1018.170372][ T9843] sock_common_setsockopt+0x5d/0x80 [ 1018.175613][ T9843] __sys_setsockopt+0x1d6/0x380 [ 1018.180494][ T9843] __x64_sys_setsockopt+0x6b/0x80 [ 1018.185601][ T9843] do_syscall_64+0xc7/0x390 [ 1018.190130][ T9843] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1018.196031][ T9843] RIP: 0033:0x45c479 [ 1018.199966][ T9843] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1018.219629][ T9843] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1018.228067][ T9843] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1018.236065][ T9843] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1018.244050][ T9843] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1018.252035][ T9843] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1018.260037][ T9843] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000016 23:09:41 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x82, &(0x7f00000001c0), 0x8) 23:09:41 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) write(r1, &(0x7f0000000080)="27b96ba0a1ee6fe79744b000000000000000", 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000040)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x4e23, 0x81, @empty}, {0xa, 0x0, 0x3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x3}, r4}}, 0x48) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r4, 0x1000}}, 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:09:41 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000000480)="8139b50109697802660629fa2522753761c3e0ef521bc23d8a01dc4ff3300313f2c1ee04d6e7874ca616ca73dedffcdb4b046831604b70f594895ebf9fced95971de10268e0ca0830f1d4e7904173722a9d0f87b189751a0da6b7a2bc6e1f9f0234f5f237b924b7a5fad87a40c9c3fa60eb3638facb5b7a64feb92b485211792dd9cce54662f13f3ee0b73b29d26b0eee7", 0x91) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) r2 = open(&(0x7f0000000240)='./file0\x00', 0x400000, 0x118) accept4$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14, 0x80800) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000300)=""/11) accept$unix(r3, 0x0, &(0x7f00000001c0)) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x52c) sendfile(r3, r4, 0x0, 0x10000) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000040)={0x0, 0x5, 0x4, 0x4000000, 0xa0b, {}, {0x5, 0x1, 0xf4, 0x2, 0x3, 0x0, "2b26b8f8"}, 0xc71, 0x3, @fd=r5, 0x3f, 0x0, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8081) 23:09:41 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x34, r3, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev}, @GTPA_VERSION={0x8, 0x2, 0xffffffff}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_LINK={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000bf37000000280012000c0001007665746800000000180002001400010008000000", @ANYRES32=0x0, @ANYBLOB="92"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00010700"/20, @ANYRES32=r7, @ANYBLOB="00000000000000000300000008000100753332004d1637399ae816cc01000d80"], 0x38}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x64, r3, 0x600, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x64}}, 0x48011) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r8, &(0x7f0000000580), 0x12) statx(r8, &(0x7f0000000600)='./file0/file0\x00', 0x6c00, 0x100, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000780)=0xc) syz_mount_image$hfsplus(&(0x7f00000003c0)='hfsplus\x00', &(0x7f0000000900)='./file1\x00', 0x8002, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000500)="07d99a18da9369e7c807f42bf8b88ff321786bd16996227cc72e8085fb099fdb1045c8a59ed00ef51746f7b3bcb2fc8e409779f6677734b3f6a4e424d83b0df1b1457e7af432a63eecc41b7c879d2a6100b0f01e81415e710f249918e59ed4932ab664e9f358c8df31f00c9a741d8e29cb77307679c2f54f80fd789ca6209bf96d59a696153e7de0e88589e9476eed", 0x8f, 0x2c}], 0x140080, &(0x7f00000007c0)={[{@decompose='decompose'}, {@gid={'gid', 0x3d, r9}}, {@part={'part', 0x3d, 0x1f}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'gtp\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio='permit_directio'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'gtp\x00'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_type={'obj_type', 0x3d, 'gtp\x00'}}, {@dont_measure='dont_measure'}, {@euid_lt={'euid<', r10}}]}) 23:09:41 executing program 1 (fault-call:5 fault-nth:23): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x4c04, &(0x7f0000000100)) [ 1018.860153][ T9870] FAULT_INJECTION: forcing a failure. [ 1018.860153][ T9870] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.898175][ T9870] CPU: 0 PID: 9870 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1018.906828][ T9870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1018.916897][ T9870] Call Trace: [ 1018.920199][ T9870] dump_stack+0x11d/0x187 [ 1018.924532][ T9870] should_fail.cold+0x5/0xf [ 1018.929068][ T9870] __should_failslab+0x82/0xb0 [ 1018.933953][ T9870] should_failslab+0x5/0xf [ 1018.938394][ T9870] kmem_cache_alloc_trace+0x26/0x5f0 [ 1018.943704][ T9870] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1018.949055][ T9870] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1018.955084][ T9870] sctp_add_bind_addr+0x90/0x2c0 [ 1018.960140][ T9870] sctp_copy_local_addr_list+0x23d/0x290 [ 1018.965791][ T9870] ? _crng_backtrack_protect+0xd1/0x100 [ 1018.972233][ T9870] ? sctp_v6_is_any+0x3d/0x50 [ 1018.976954][ T9870] sctp_copy_one_addr+0x65/0x150 [ 1018.981915][ T9870] sctp_bind_addr_copy+0xb3/0x241 [ 1018.986971][ T9870] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1018.993155][ T9870] sctp_connect_new_asoc+0x10b/0x340 [ 1018.998536][ T9870] __sctp_connect+0x282/0x680 [ 1019.003312][ T9870] ? _copy_from_user+0x93/0xf0 [ 1019.008114][ T9870] __sctp_setsockopt_connectx+0xe9/0x130 [ 1019.013774][ T9870] sctp_setsockopt+0x154f/0x5150 [ 1019.018851][ T9870] sock_common_setsockopt+0x5d/0x80 [ 1019.024121][ T9870] __sys_setsockopt+0x1d6/0x380 [ 1019.029010][ T9870] __x64_sys_setsockopt+0x6b/0x80 [ 1019.034112][ T9870] do_syscall_64+0xc7/0x390 [ 1019.038708][ T9870] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1019.044613][ T9870] RIP: 0033:0x45c479 [ 1019.048530][ T9870] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1019.068227][ T9870] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1019.076670][ T9870] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1019.084659][ T9870] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1019.092640][ T9870] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1019.100622][ T9870] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 23:09:42 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%node\xf6\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 1019.108600][ T9870] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000017 23:09:42 executing program 1 (fault-call:5 fault-nth:24): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 1019.278807][ T9886] FAULT_INJECTION: forcing a failure. [ 1019.278807][ T9886] name failslab, interval 1, probability 0, space 0, times 0 23:09:42 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x83, &(0x7f00000001c0), 0x8) [ 1019.369705][ T9886] CPU: 1 PID: 9886 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1019.378337][ T9886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1019.388412][ T9886] Call Trace: [ 1019.391737][ T9886] dump_stack+0x11d/0x187 [ 1019.396095][ T9886] should_fail.cold+0x5/0xf [ 1019.400622][ T9886] __should_failslab+0x82/0xb0 [ 1019.405397][ T9886] should_failslab+0x5/0xf [ 1019.409829][ T9886] kmem_cache_alloc_trace+0x26/0x5f0 23:09:42 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000580), 0x12) write$input_event(r0, &(0x7f0000000240)={{}, 0x15, 0x7, 0x1}, 0x18) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='cpuset.mems\x00', 0x2, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80080, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000180)=""/36, &(0x7f0000000200)=0x24) [ 1019.415193][ T9886] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1019.420545][ T9886] sctp_add_bind_addr+0x90/0x2c0 [ 1019.425582][ T9886] sctp_copy_local_addr_list+0x23d/0x290 [ 1019.431353][ T9886] ? _crng_backtrack_protect+0xd1/0x100 [ 1019.436925][ T9886] ? sctp_v6_is_any+0x3d/0x50 [ 1019.441630][ T9886] sctp_copy_one_addr+0x65/0x150 [ 1019.446594][ T9886] sctp_bind_addr_copy+0xb3/0x241 [ 1019.451651][ T9886] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1019.457835][ T9886] sctp_connect_new_asoc+0x10b/0x340 [ 1019.463208][ T9886] __sctp_connect+0x282/0x680 [ 1019.467908][ T9886] ? _copy_from_user+0x93/0xf0 [ 1019.472747][ T9886] __sctp_setsockopt_connectx+0xe9/0x130 [ 1019.478408][ T9886] sctp_setsockopt+0x154f/0x5150 [ 1019.483456][ T9886] sock_common_setsockopt+0x5d/0x80 [ 1019.488677][ T9886] __sys_setsockopt+0x1d6/0x380 [ 1019.493559][ T9886] __x64_sys_setsockopt+0x6b/0x80 [ 1019.498613][ T9886] do_syscall_64+0xc7/0x390 [ 1019.503156][ T9886] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1019.509122][ T9886] RIP: 0033:0x45c479 23:09:42 executing program 4: r0 = userfaultfd(0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x1, 0x40041) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r3, &(0x7f0000000580), 0x12) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r3, 0x4) bind$rose(r1, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) r4 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r4, &(0x7f0000002000)='/', 0x1) r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r5, &(0x7f0000001400)="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", 0x52c) r6 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x3ff) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000040)=""/62, &(0x7f0000000080)=0x3e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x9, 0xa, 0x4, 0x70000, 0x3ff, {0x0, 0x7530}, {0x3, 0x8, 0x8, 0x7f, 0x80, 0x21, "a56276be"}, 0x1000, 0x2, @userptr=0x5b4d, 0x7, 0x0, 0xffffffffffffffff}) timerfd_gettime(r7, &(0x7f00000001c0)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x5}) r8 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x432000) recvmsg$can_j1939(r8, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x2, 0x6}}, 0x20) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 1019.513111][ T9886] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1019.532761][ T9886] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1019.541251][ T9886] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1019.549277][ T9886] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1019.557373][ T9886] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1019.565375][ T9886] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1019.573369][ T9886] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000018 [ 1019.636399][ T26] audit: type=1804 audit(1583190582.709:3971): pid=9896 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir123342262/syzkaller.jydaTp/1351/file0" dev="sda1" ino=16886 res=1 23:09:42 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x52c) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r3, &(0x7f0000000580), 0x12) sendfile(r2, r3, 0x0, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x72) pipe(&(0x7f0000000040)={0xffffffffffffffff}) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3, 0x1, {0xa, 0x4e22, 0x0, @empty, 0x4}}}, 0x32) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x6, 0x10, r1, 0x3f788000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:09:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x4c05, &(0x7f0000000100)) [ 1019.800136][ T26] audit: type=1804 audit(1583190582.869:3972): pid=9904 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir123342262/syzkaller.jydaTp/1352/file0" dev="sda1" ino=16897 res=1 23:09:42 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r3, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe]}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000009c0)={0x800, 0x0, 0x3, 0x400, 0x80000000, 0x1, 0xa1cc, 0x6, r3}, &(0x7f0000000a00)=0x20) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000040)={r3, @in={{0x2, 0x4e22, @loopback}}}, 0x84) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:09:43 executing program 1 (fault-call:5 fault-nth:25): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:43 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000005, 0x11, r2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:09:43 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setscheduler(r2, 0x85511be1a1ef46d0, &(0x7f0000000340)=0x100) migrate_pages(r2, 0x48000000000, &(0x7f00000000c0)=0x5, &(0x7f0000000180)=0x100000001) ioctl$TCSBRKP(r0, 0x5425, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)) getpriority(0x2, r2) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r3, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000200)=""/68, &(0x7f00000002c0)=0x44) getsockname$unix(r3, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r4, &(0x7f0000001400)="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", 0x52c) sendfile(r4, r5, 0x0, 0x10000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000006c0)={0x0, 'macsec0\x00', {}, 0x3}) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f00000004c0)) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setscheduler(r6, 0x85511be1a1ef46d0, &(0x7f0000000340)=0x100) sched_getparam(r6, &(0x7f0000000300)) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) r7 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x3, 0x0) recvmsg$can_j1939(r7, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r7, &(0x7f0000000700)="0c9117bdfb3dae85b94c3390bb9062564bd5ee", &(0x7f0000000740)="fd7e0f5e39f40e9dd1396ad499f6ce5a5fb7e3abc3cb0ae27efe0cac98576cc5d96d103106b9827c72bef48035c423eeb2c7c44edc45dcebdf89df02ff3a56503188d432047a3d92263c1239f5ab8e3bd067de894ffb4c5247364d3b422a9d021cdd1dbfb9008d06972730817fe14cdde866205a72d84b434535618ad562ca3cf5eefca8439230d32f795ca92ec38eae92bcc3e297d0eb6ccfa604a52b10008c5ace700da622fb5e42a1cabe67f2bf632ac4b8c50d4376b5a944cdbbf553f9917509f40f7e18e28dda0bc304bacc"}, 0x20) rt_sigaction(0x2c, &(0x7f0000000580)={&(0x7f0000000500)="d1bd1200000067f343add9e0c4423547d5c421be5fe7400fc6b607000000abf20f12e2c4a17c288803000000c44219a8512bc461c960a700000000", 0x4, &(0x7f0000000540)="450f192fc4627935e744eec481af5c27897d46c462010a3b64640f01de67660f38250fc423314bf1006466470fd4bdf08c0000", {[0xff]}}, &(0x7f0000000640)={&(0x7f00000005c0)="f246acc4e2f12848003e65660f3804c9c4820da8f87209c4422dbde7c421fd5b8800008020f3470f1ba1ca0200003ef2430f59b00d0000004d98", 0x0, &(0x7f0000000600)="26f347a70400c442e9ae8c1013ffffff410f1c94cc00000000c46259be38460f910a8f29788341b6c4a3d17fba090000002ec463096c3d0008000043dbe4"}, 0x8, &(0x7f0000000680)) [ 1020.171816][ T9924] FAULT_INJECTION: forcing a failure. [ 1020.171816][ T9924] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.215576][ T9924] CPU: 0 PID: 9924 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1020.224214][ T9924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1020.234275][ T9924] Call Trace: [ 1020.237586][ T9924] dump_stack+0x11d/0x187 [ 1020.241940][ T9924] should_fail.cold+0x5/0xf [ 1020.246754][ T9924] __should_failslab+0x82/0xb0 [ 1020.251536][ T9924] should_failslab+0x5/0xf [ 1020.255974][ T9924] kmem_cache_alloc_trace+0x26/0x5f0 [ 1020.261285][ T9924] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1020.266509][ T9924] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1020.272551][ T9924] sctp_add_bind_addr+0x90/0x2c0 [ 1020.277515][ T9924] sctp_copy_local_addr_list+0x23d/0x290 [ 1020.283295][ T9924] ? _crng_backtrack_protect+0xd1/0x100 [ 1020.288877][ T9924] ? sctp_v6_is_any+0x3d/0x50 [ 1020.293607][ T9924] sctp_copy_one_addr+0x65/0x150 [ 1020.298692][ T9924] sctp_bind_addr_copy+0xb3/0x241 [ 1020.303756][ T9924] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1020.309933][ T9924] sctp_connect_new_asoc+0x10b/0x340 [ 1020.315262][ T9924] __sctp_connect+0x282/0x680 [ 1020.319949][ T9924] ? _copy_from_user+0x93/0xf0 [ 1020.324870][ T9924] __sctp_setsockopt_connectx+0xe9/0x130 [ 1020.330532][ T9924] sctp_setsockopt+0x154f/0x5150 [ 1020.335609][ T9924] sock_common_setsockopt+0x5d/0x80 [ 1020.340834][ T9924] __sys_setsockopt+0x1d6/0x380 [ 1020.345804][ T9924] __x64_sys_setsockopt+0x6b/0x80 [ 1020.350847][ T9924] do_syscall_64+0xc7/0x390 [ 1020.355385][ T9924] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1020.361284][ T9924] RIP: 0033:0x45c479 [ 1020.365193][ T9924] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1020.384868][ T9924] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1020.393479][ T9924] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1020.401467][ T9924] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1020.409452][ T9924] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1020.417437][ T9924] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1020.425556][ T9924] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000019 23:09:43 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x18) r0 = open(&(0x7f0000000080)='./file0\x00', 0x4c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x52c) sendfile(r0, r1, 0x0, 0x10000) ftruncate(r1, 0xffff) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f00000003c0)="ff9debc0606a2fbdbd524cb9f945ec10565488affe88255a4528247371cf36260c0f1e07905c5b718dbab4ea0946e8708258803f8b4cce284d9748a8c560bef7b151e36007a824e1f695022730db9ebf9c75b41498957234bc53a5be3df87d5943a1d5034d28f1c99521cc37b34167fd851b555b1c1a7045410e5dc33efcb3e4e035b6e78fe7a4697896e2d42f9983346a447980d24eeabf033cc90196493907554ad4ec33b6ce2595b652fab8", 0xad}, {&(0x7f00000002c0)="249500000000000097e2e22ed196ba22750d6878278ecbe8e312836bc7ba66fdbb1fd4c96d36291eb5b42fd2b1abf65414dac9584f9ece870f9bb456d463f9b7878a75f908cdb5b9e37dce3ec627d36cfbf2d6427d8ad41cfcf584062f57583db5a78e2e8a7273a9513e1998a68751cfd44fda6704513cb06c249cc2fefe6a9e37cd06c8d1e00b3a344c1fda2a5b8c38785f6e3e87a99ab582454907dfd20f5c759d0cacd58587a58345c0c09b365170b4fbd985895d2643d210e03e9361353332a5e2df2c1a1214e93cdd9adea0f517bbadbcd5f66edaacc64826c8c676a033ba43e178243138df81667b", 0xeb}], 0x2) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r5 = socket(0xa, 0x1, 0x7) getsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000000140), &(0x7f00000001c0)=0x4) write$cgroup_pid(r4, &(0x7f0000000580), 0x12) write$P9_ROPEN(r4, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x8, 0x0, 0x8}, 0x7}}, 0x18) 23:09:43 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x4) 23:09:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x4c80, &(0x7f0000000100)) 23:09:43 executing program 1 (fault-call:5 fault-nth:26): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 1020.944835][ T9950] FAULT_INJECTION: forcing a failure. [ 1020.944835][ T9950] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.979062][ T9950] CPU: 0 PID: 9950 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1020.987707][ T9950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1020.997766][ T9950] Call Trace: [ 1021.001078][ T9950] dump_stack+0x11d/0x187 [ 1021.005434][ T9950] should_fail.cold+0x5/0xf [ 1021.009969][ T9950] __should_failslab+0x82/0xb0 [ 1021.014750][ T9950] should_failslab+0x5/0xf [ 1021.019181][ T9950] kmem_cache_alloc_trace+0x26/0x5f0 [ 1021.024495][ T9950] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1021.029791][ T9950] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1021.035715][ T9950] sctp_add_bind_addr+0x90/0x2c0 [ 1021.040687][ T9950] sctp_copy_local_addr_list+0x23d/0x290 [ 1021.046340][ T9950] ? _crng_backtrack_protect+0xd1/0x100 [ 1021.052090][ T9950] ? sctp_v6_is_any+0x3d/0x50 [ 1021.056803][ T9950] sctp_copy_one_addr+0x65/0x150 [ 1021.061828][ T9950] sctp_bind_addr_copy+0xb3/0x241 [ 1021.066904][ T9950] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1021.073142][ T9950] sctp_connect_new_asoc+0x10b/0x340 [ 1021.078454][ T9950] __sctp_connect+0x282/0x680 [ 1021.083159][ T9950] ? _copy_from_user+0x93/0xf0 [ 1021.087994][ T9950] __sctp_setsockopt_connectx+0xe9/0x130 [ 1021.093712][ T9950] sctp_setsockopt+0x154f/0x5150 [ 1021.098692][ T9950] sock_common_setsockopt+0x5d/0x80 [ 1021.103925][ T9950] __sys_setsockopt+0x1d6/0x380 [ 1021.108870][ T9950] __x64_sys_setsockopt+0x6b/0x80 [ 1021.113920][ T9950] do_syscall_64+0xc7/0x390 [ 1021.118453][ T9950] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1021.124364][ T9950] RIP: 0033:0x45c479 [ 1021.128281][ T9950] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1021.147994][ T9950] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1021.156496][ T9950] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1021.164493][ T9950] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1021.172554][ T9950] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1021.180540][ T9950] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1021.188522][ T9950] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000001a 23:09:44 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) sendto$unix(r0, &(0x7f0000000200)="09f55bfd6d4af60562c94a792edeb6d583e5a5619354ec466b701eae4ce3046a96ea39535705a295ab9b67b38b77c54abeedf9b0b99dcc4a1b988eb3cc8189d23b3049e81ed679871127682428574ad545bfbc1343cd2dce1bd76861bf499d1e", 0x60, 0x1, &(0x7f00000002c0)=@file={0x1, './file0/file0\x00'}, 0x6e) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2) r1 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x4000) recvmsg$can_j1939(r1, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r4, &(0x7f0000000580), 0x12) write$9p(r4, &(0x7f0000000700)="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", 0x52c) sendfile(r2, r3, 0x0, 0x10000) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r9, 0x0, 0x0) connect$bt_rfcomm(r9, &(0x7f0000000480)={0x1f, @fixed={[], 0x11}, 0x5}, 0xa) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000cc0)=0xffffffa2) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000bf37000000280012000c0001007665746800000000180002001400010008000000", @ANYRES32=0x0, @ANYBLOB="92"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001100)=ANY=[@ANYBLOB="580000002400b32c000000000000004e03042d9d85b14b3155611a4704e497eedda40c86a1498bb7d9ed0c46842327abd8266a08927c471d6580b0c9c2ad24b4a1a08bf69111933c397807d58289d5ffd2327922cdedc0a04335a0fb3e06d72b1e9d867287c49f9c876e92e8aa46b29f42d583663fd896deaddc551746134f2045ab8937ca5048bb1626429699d4f0ef4363c2357abb9d250f8cd257cb87bf69909ff1880000000000000000000000000000000075c325cbff471a9b3422974c20d521a32ee64ebe356bbfde342b7b75ece65c2a7ae4861b98e01f6cddea5c1bf4316786f6", @ANYRES32=r10, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00010700"/20, @ANYRES32=r10, @ANYBLOB="00000000000000000300000008000100753332004d1637399ae816cc01000d80"], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', r10}) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2010000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="c801042212000c0828bd7008fddbdf2510088c044e224e230500000007000000000000000010000000100000030000000101000001010000", @ANYRES32=r11, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x40}, 0x20040840) r12 = openat$cgroup_int(r2, &(0x7f0000000180)='io.weight\x00', 0x2, 0x0) writev(r12, &(0x7f0000001080)=[{&(0x7f0000000d40)="7a860b790638ec63e91dfa0c68ddc596df90c62be3c6770c294dbb9115a498af49d8364a74215ba624fdc6599dbaeb9f1f0b7a47406246268280436f6fb939945d2d8a4ecd81f398d0a9b4a56cb1d51cb6ea625f16f306d6deec155e81e66cb664a35eef6a12b6f8ed26dd", 0x6b}, {&(0x7f0000000dc0)="103630d641d84b2dea876b2e61bd5bc28ab92d017a1a76f4e0004d98765ce7839ed44f53af25aa2f7841f557f1d6ab4cfbe1150fc13cace5513a91299442f4261dc23e1ce5ac74ab2504529a9c57b886a78ed8cbc462129c45a41b4ea909a20b8846476445b29f472b4558c156ea94972b67", 0x72}, {&(0x7f0000000e40)="608110e086890d911497332ffadbf0cee6b72676ffb22989957dd1db2072f79015ea23ce393e25990d6f665ca051e6fc16a122be27a558f229ccdec6dcd7f42d529b5596d07c69bc8e4e070d79d49ba42c97c08e361a6c7cd78b37ef2a687045942a02123f82110fa8a029faa757c95c2484d7dd5cb911157752c393c7ddc4c20799722fee6f9e5496e37b15b4b19f2376ec22b9c43caad15fc20627c31f2d6b1d07dc82ad59164192f7c103edbcb51615fb45d363d2fbdcdae2bc3722e4250d34a501477ef334fb7eb011e279069046b60cb4368ec389268481da6366f79fbba7970269d070751e5f4333929fc91a2a075d0689939ad8", 0xf7}, {&(0x7f0000000f40)="ff29928e07333da6edb9d42cc7db268ce3898dc631e603580c2175ae928e40221557c1c830e16b210ffd85a853d0b022c170f051c32ff95330d4a09a5a1f2af17556c1ca", 0x44}, {&(0x7f0000000fc0)="9f4166a83ab55cf059d6597c161a49", 0xf}, {&(0x7f0000001000)="8e966f8a88330ee640e7858e0cfe550095f0129ea5c6710063291219fc2af0fc2d994427bb15184c94752e6342635c713bc679b41e7d5518597258a4f0a6cd117f593b2b30693a7c2a5e8ce7ea979847c9dec103046e19ae", 0x58}], 0x6) 23:09:44 executing program 1 (fault-call:5 fault-nth:27): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 1021.329323][ T9953] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1021.410951][ T9953] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 23:09:44 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0)='NLBL_CALIPSO\x00') [ 1021.542522][ T9959] FAULT_INJECTION: forcing a failure. [ 1021.542522][ T9959] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.581346][ T9959] CPU: 0 PID: 9959 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1021.589976][ T9959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.600135][ T9959] Call Trace: [ 1021.603488][ T9959] dump_stack+0x11d/0x187 [ 1021.607862][ T9959] should_fail.cold+0x5/0xf [ 1021.612427][ T9959] __should_failslab+0x82/0xb0 [ 1021.617211][ T9959] should_failslab+0x5/0xf [ 1021.621666][ T9959] kmem_cache_alloc_trace+0x26/0x5f0 [ 1021.626992][ T9959] ? kcsan_setup_watchpoint+0x2d3/0x400 [ 1021.632589][ T9959] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1021.637871][ T9959] sctp_add_bind_addr+0x90/0x2c0 [ 1021.642839][ T9959] sctp_copy_local_addr_list+0x23d/0x290 [ 1021.648575][ T9959] ? _crng_backtrack_protect+0xd1/0x100 [ 1021.654332][ T9959] ? sctp_v6_is_any+0x3d/0x50 [ 1021.659033][ T9959] sctp_copy_one_addr+0x65/0x150 [ 1021.664001][ T9959] sctp_bind_addr_copy+0xb3/0x241 [ 1021.669075][ T9959] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1021.675260][ T9959] sctp_connect_new_asoc+0x10b/0x340 [ 1021.680659][ T9959] __sctp_connect+0x282/0x680 [ 1021.685442][ T9959] ? _copy_from_user+0x93/0xf0 [ 1021.690357][ T9959] __sctp_setsockopt_connectx+0xe9/0x130 [ 1021.696015][ T9959] sctp_setsockopt+0x154f/0x5150 [ 1021.701060][ T9959] sock_common_setsockopt+0x5d/0x80 [ 1021.706290][ T9959] __sys_setsockopt+0x1d6/0x380 [ 1021.711187][ T9959] __x64_sys_setsockopt+0x6b/0x80 [ 1021.716279][ T9959] do_syscall_64+0xc7/0x390 [ 1021.720807][ T9959] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1021.726715][ T9959] RIP: 0033:0x45c479 [ 1021.730749][ T9959] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1021.750660][ T9959] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1021.759114][ T9959] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1021.767101][ T9959] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1021.775110][ T9959] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1021.783092][ T9959] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 23:09:44 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x200001c8) [ 1021.791078][ T9959] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000001b 23:09:44 executing program 1 (fault-call:5 fault-nth:28): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x4c81, &(0x7f0000000100)) [ 1022.037614][ T9971] FAULT_INJECTION: forcing a failure. [ 1022.037614][ T9971] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.071215][ T9971] CPU: 0 PID: 9971 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1022.079862][ T9971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.089926][ T9971] Call Trace: [ 1022.093268][ T9971] dump_stack+0x11d/0x187 [ 1022.097624][ T9971] should_fail.cold+0x5/0xf [ 1022.102166][ T9971] __should_failslab+0x82/0xb0 [ 1022.106954][ T9971] should_failslab+0x5/0xf [ 1022.111887][ T9971] kmem_cache_alloc_trace+0x26/0x5f0 [ 1022.117276][ T9971] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1022.122542][ T9971] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1022.128580][ T9971] sctp_add_bind_addr+0x90/0x2c0 [ 1022.133666][ T9971] sctp_copy_local_addr_list+0x23d/0x290 [ 1022.139347][ T9971] ? _crng_backtrack_protect+0xd1/0x100 [ 1022.144921][ T9971] ? sctp_v6_is_any+0x3d/0x50 [ 1022.149753][ T9971] sctp_copy_one_addr+0x65/0x150 [ 1022.154726][ T9971] sctp_bind_addr_copy+0xb3/0x241 [ 1022.160006][ T9971] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1022.166192][ T9971] sctp_connect_new_asoc+0x10b/0x340 [ 1022.171519][ T9971] __sctp_connect+0x282/0x680 [ 1022.176219][ T9971] ? _copy_from_user+0x93/0xf0 [ 1022.181016][ T9971] __sctp_setsockopt_connectx+0xe9/0x130 [ 1022.186693][ T9971] sctp_setsockopt+0x154f/0x5150 [ 1022.191782][ T9971] sock_common_setsockopt+0x5d/0x80 [ 1022.197012][ T9971] __sys_setsockopt+0x1d6/0x380 [ 1022.201902][ T9971] __x64_sys_setsockopt+0x6b/0x80 [ 1022.206956][ T9971] do_syscall_64+0xc7/0x390 [ 1022.211488][ T9971] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1022.217391][ T9971] RIP: 0033:0x45c479 23:09:45 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0x1, &(0x7f0000000180)=0x4) openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r1, 0x0, 0x0) r2 = fspick(r1, &(0x7f0000000240)='./file0\x00', 0x0) writev(r2, &(0x7f0000000200), 0x0) [ 1022.221304][ T9971] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1022.241171][ T9971] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1022.249612][ T9971] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1022.257620][ T9971] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1022.265640][ T9971] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1022.273625][ T9971] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1022.281620][ T9971] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000001c 23:09:45 executing program 1 (fault-call:5 fault-nth:29): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000580), 0x12) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x52c) sendfile(r2, r3, 0x0, 0x10000) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='environ\x00') r5 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x964154ec8e48f8ae) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x2, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$pptp(0x18, 0x1, 0x2) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) write$capi20(0xffffffffffffffff, &(0x7f00000003c0)={0x10, 0x200, 0x82, 0x83, 0x8, 0x58}, 0x10) [ 1022.569159][ T9983] FAULT_INJECTION: forcing a failure. [ 1022.569159][ T9983] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.599895][ T9983] CPU: 0 PID: 9983 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1022.608665][ T9983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.618751][ T9983] Call Trace: [ 1022.622068][ T9983] dump_stack+0x11d/0x187 [ 1022.626425][ T9983] should_fail.cold+0x5/0xf [ 1022.630978][ T9983] __should_failslab+0x82/0xb0 [ 1022.635763][ T9983] should_failslab+0x5/0xf [ 1022.640196][ T9983] kmem_cache_alloc_trace+0x26/0x5f0 [ 1022.645501][ T9983] ? delay_tsc+0x8a/0xb0 [ 1022.649813][ T9983] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1022.655140][ T9983] sctp_add_bind_addr+0x90/0x2c0 [ 1022.660113][ T9983] sctp_copy_local_addr_list+0x23d/0x290 [ 1022.665831][ T9983] ? _crng_backtrack_protect+0xd1/0x100 [ 1022.668310][ T26] audit: type=1804 audit(1583190585.679:3973): pid=9986 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir309363322/syzkaller.l56wwm/1193/file0" dev="sda1" ino=16921 res=1 [ 1022.671403][ T9983] ? sctp_v6_is_any+0x3d/0x50 [ 1022.671426][ T9983] sctp_copy_one_addr+0x65/0x150 [ 1022.671507][ T9983] sctp_bind_addr_copy+0xb3/0x241 [ 1022.710961][ T9983] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1022.717148][ T9983] sctp_connect_new_asoc+0x10b/0x340 [ 1022.722574][ T9983] __sctp_connect+0x282/0x680 [ 1022.727330][ T9983] ? _copy_from_user+0x93/0xf0 [ 1022.732122][ T9983] __sctp_setsockopt_connectx+0xe9/0x130 [ 1022.737803][ T9983] sctp_setsockopt+0x154f/0x5150 [ 1022.742810][ T9983] sock_common_setsockopt+0x5d/0x80 [ 1022.748142][ T9983] __sys_setsockopt+0x1d6/0x380 [ 1022.753039][ T9983] __x64_sys_setsockopt+0x6b/0x80 [ 1022.758138][ T9983] do_syscall_64+0xc7/0x390 [ 1022.762672][ T9983] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1022.768574][ T9983] RIP: 0033:0x45c479 [ 1022.772571][ T9983] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1022.792307][ T9983] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1022.800732][ T9983] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1022.808714][ T9983] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1022.816775][ T9983] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1022.824757][ T9983] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1022.832733][ T9983] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000001d 23:09:46 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r2, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe]}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000009c0)={0x800, 0x0, 0x3, 0x400, 0x80000000, 0x1, 0xa1cc, 0x6, r2}, &(0x7f0000000a00)=0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={r2, 0x1000, "cdff1aba3f7037ead16dfdbad0ff694017cd560f5573daf46b1755705db20347211d286bef4bec0496502d2b436ff063513421143f325dfb5f06306bbc8b9b52526a4e59e94c334d730328659fb3b71a826aba78b518087306b97f485679b4c946ba36a1e379bca8e4ccae5caf2b52f605cb5704511f012dc30e89542658886625f1830fe83ee3c54a7fe2d05068cad6c370e99571847cb2223c5bb8ce2d6fbe0bec6a5206c13908a295b247c4666edce6bab1c39838a4d0ce35dce130f231b30d6e3c35a5549fe31359966f09f92ebce12fedfa5c4fd1e47757bf22e459bbff055389d64b4c401dddef5bf5aa628caebd2cbb7a62fca748b703a6e530143f42e66174c15bc0ce1807ef15ed37a7ad7c64526a1312f4f9ae166bb60befaad73c2f82aa82e697268d3b97ac002626d195904276af2784057fd6c2a6a4af1a04a8742d947a74dbae9f1c27151458ddfeb5e8927c4cb866b9c1d96dfa873bf9eaf8bad770fa74240508aecd3bd04cb87d01a28dc7ac218535b22212c455d1970b54a2ac60b76496833e10bcb533cbb5a0cb5641a207ed555614bf05e3026e30bcfc35f4b3642317c105256cbc786c3de5bfb3b4511def26d290050bcecb1ffd7b5042b9712b55d27aafcbebf315c1e3acaf95523642c1b36cb584f3001faa3090bd0dafdfbce2267378c545185fe03016ded4c8d80f5de05d9f58266db107525e6d59061baefab5881520a31ed0b28ca075a8a5cad9a9db0a741e94d8620fbc3bc441c5d610106c64765108807600c7625d86e01542a93217c994387d4348ca864a850bb80e35530b7e3f6280c6c8d40286a2b8cdbcb23c84edda4f4d175e345ccbb5024cbcbdef518b2fd628cb86a53902c510e6c66d4f18711f043d98834fff9f1ecbf9b6f70e8acb02503d07c5c1fa5c88c4c19fe9c292e245402871bf6708f235a59a8c5420a2c918e86b82b6254a3e66f06c697d2b8ac7bea4b513f121072c79e9553496acceb75db3677ef672f3801c99bec34a57ff3ebd543f1a6e4a49d2a019611f80a479b73567c450887407532ef64451405fd895b420fee68d4fef21cb3f1adfd097e9ff340a6e3217762f45280ac9b3e69f85564afc844ec2e33faee4e4db702d48bf1dceb404e15c3e781df32fbf3360e150dbcd102b64cfbcc667b010b6618eea4ff4b9ef2d28a6d479447640861a0add9cc281e548b0db0717e8e8177a287c81548bdcf03d84bf0cb0c11d20155eb1b69d67f6e5e217755ee169847093cd5d94dd5408cc0463bf54e590e2957b203bfd8d608da9f4ed21c96a6f891d3e367b9861af0a5a54804fbd1df085b2f252f20ee27b361270a77ba11e0416d7eae18d82333994fa7502cc6f22aaba419576bacc5ef0c92109381501c7962d7d51235ace960ffb72870bcf0e15a01343214f74d6b938bd1869338044713c47e15b68680264fd0271996b24730fa2d61c5d0a05a328ee0b02d58e2f92c671ff9a361f86614f51413e1246326f93d5011a279c239afd4311cfd4ae12edfb85ccd2eca159d35a1621e5700b95e69a9b2f891f1442ec89a81b27a0347a0542d24a92ef81cf93f3bc659fb5fa3c7c7dbf8db3f0240487f5731fb5534d40fbd0f286f43125cb152cee70775ce3dfd7bb68499ab33dff755e718c86104d2e469e6a9c9aa3b173467cccc30d6fbdc224500c2756daf172ff863cff5772b3b5ab89d2f2d16eaf41449a11525fdef74cb5a3e315fd9d5831a5f4533dd193f851cc0f4175b3f88d84449760400729cefa105d4f5aef1d3ae5edb1db5024e34772d8014a45adcf757016a0d121289a2059ca83d82db44ad893f2ca23a2b7848a8c2b9f888c2c50f3b6d35a85a27381cb012313e30bbd5e8076859f0ca5815880907c4233ee6239a7419c5132aad61f5c231940297b11232d0031690e371fccfe5b850766db4a68f0ac2becbeb28a59b7aaa94a6bdd1445d62155e93db9eaee78de7c2a61a468231e6cc3a4c4272496af8bb818c422452791071cf1faff9bdc2c9fa53f6c7800fb41274f6a1860b9aeb622a78a14ab22b4ae8e1009fdb10bbd4bc4d90c3924a27f5772c78b632c3ddb32c0666ca7f308302065dfab90f7347754562e1e2854a8cafbed0ef9fc1f4235524c375cf1d7f1d3348a12a4250a35f44b98647fe76d982598d3479cbb36a5a5330490c986fc3700c2845292d7e492d016c177cf99af1796d75bc72b5e1d17ba51faafd559ca21a20abf14c423a7abac96cdc8b941605de0b84f0c959a7f2d8c288ea51d55770fb2ae7efad50e4b1409a0a09456880bd7798b2f652f6b80d08af0716a27de8338546e93d41af7c18819894a711b49061333cb3770a62b7bcb3021e871512c7ccb0547b96a07b593fcd2a89d873ee4960fe78164613212e070a772123a416ef698153d2eb1f8863f01ee29bb6479d4a79aa4844181cc6f9d6706fac742999aec15c684de683aab187f8a1c2d9159f39b242dfb3592ce1c085317562c129668c207e5c9704b8086832f8f6398eaa1f98b7ba2477a06df67327af2b76fe971a63e478a989859839c12a9585ade8d63bc576be742061e63e436c2891dcc655be4964d70c77d501a6830b00f0b1d09f04b0cc3af274f5775042ad07aa6a62b1813307d97c6a600e8e5bf6374ff018fef6203468522c41ecbf737e634636b246d833d56b00d7ef988d123055b171c11f3b40ad42c0a42ed59bc6a42541aac5d5527076494a951d67c4cacd44bc09e2aa5408fb67246e30a9db18cb358f6c2deb0baf6ba3ce8b3cd706a32ac6e02f71aa01cb95f89c1691a6faa1099b899d206d056e9ec70c5da2bbf86598ce0e576f2a43d020f343348822c62cfae2f15d545557c39c3b53517268dceb7e47fb6fc6b7e0f69be490d19db63e04031e6b10a22ff4c1b3f29315784049073f0c5b7917c229649be9ffc5f24bdb0d9eedc18c04b3456c4888b4d21b2af5b19ad16df4beb8db08d61485ed6774c3aaa65035b4279fac83ce0f73939f37c7f3a1f1c130b251285ac55166b0d43bb1f8a6496798fca16ec9a0409097457f5b08907fdf6db3abd1c9bd42d0cd4a958a5e8dd5656c6f26abdd6addfeb1f0611006716d921e2669eb684e81de3b6e671fc7939fcda66bb801c4f4164f040b919e8c59553f98b1867bc9170466c4de239f03bbc9ce06c1ff823550ecd1c95831230332a23020bee50d66a1cb8a73580573b5189aec856c81e20090756ed9e4f38c05ea257cd9c132aec8b20451a964a396d3e5e5692f13eda74a87efc78be1161a3e12e5aa21684f7a6e6bfc46bb224f3a2f87aeb8cf92a160eab10427d6499cfd530630a09a9193ed07bf283c0dff0ceb7af310442f1e25350b8722ab9a956fdcf6a3ac99b46e4728643de277240185baffa2cd68bfc7dcc51cd36eeafc591dfcdc8e3be7407f3866e5781461027d83b2b721225c95b361f546a0c9bab5cef128956f8e9735fb73d778185d42e43940b3cd1e1bd7f4cfa79ce341caec3e39fcc305fee39fe6a561e8463d563280e0cb150cefaf9bf1df89ba412417dc466d6b45df697d3b9f15fd302f781180f0aee3f7d738745cf606115573afec60a7eb2cd040f9d4a4cf2fc08add67b4d3af73b01c573b69819ab4dcd21a6c809f8e807b56b19ad614dac915a93d4313f65932ebc723d9ac82da8e6dbe09357859e9772aa4c2ed85f627e9d68191edf438b0091fb9e846079df4fff95779430279be76dbe869c2ee800ad70f2bc0f018044950d373e0150ebd3be46308ec56c0f7ff645a9cfa0bfe367081f13160f6c334dd48241b8bca4fb7fc03b494af6e2ce68c2d63355d988f270b4e9e7acb5b26a7223a929bdef59542ced5a7f795878bf0e21bf14455bedf4c9a55f8026244b87bc069fbe5795f567c9c88042b8886dded88004bc3a58ccf1d4f9db153778404d526ebf7b9d3a4ced9aab5c1da9afd66d37161befa6944ca92735fe179a4057e17df0efae463d0c77b008731958ee3a6c8ef41024c75bc7b02432120a5e91ed3557db22f8f128b68dcd6ca4b4b0a1a14ed4e8a55eef9c609dd41cf9bc45fd4cfeba1feeadfcd6dca1b62a9cbe712075cce2db39525a40dc2d16f27aeb2198d94bbee620dafde5f2c0d93e88e59a3b0b7a3e56f6b1196d5cf30158b6ec174e89d8c2a4e9e7a2498b4cdd911e2ebf2652ea97e7a358711cc6aea599fe0cc43d7aa3ae58918ee286decbe35308399f1fe06c13c9217993f7b9f49a1060e0c2587feaff277d6f0e723179f14672b14e5d12fb4d4de66d873a54696ebc4eee9a3ace7d06b0bb2f2e4d7d954d0a19307f4314ebaa418049d19624c04c51e8d39f2e8404b0cc2257c08852ccf622afcd4bb6ef1bc51cbd200d34770ae10626f77c2d52637b9aa561f3c25487ce1dceb61ca00eb19b2d8f7fee88fb707e2d40a7ac31bab158c32723d277e12ffd353151f743c3567c6decf3bd99212994b2334a95ed6eb0c41ddcfec611d9f6d863bf9b92e9a2d234c69c8cf4aa47406d6a991bb9cc7a700d6c1268eeb435899be83397806ed42870344e36167ba9edcb7bfa374d9e6addea29e342dcd195a6fea42f76a1f564158b1b17182a116ede795445c548a19f250121005f7ae4e38cb3e041efa62f68ffe045d14c0fcd569981115988c0bb9060cfcf8f9f292b36d329aa0599e57c093740dde41109b73fee4a36f1c5e532ad870e536b3d392aea50aea7d0622c17ed932670e068b3ae7d1b7156a3d6f1973eab2164db14b5029c40d36249df7fea0c2be37f56e0babfb32881a933052f5cee601f5ba92db93b75961bda4be957829ef2c874b2ceb81e210965fb4dcc914e2540466c1b3331ca11d23107cb8c39cf59fca4d542a3598ec1fe28ea6d1e2c7f1efaad56be8db4ab3715ad111f49bd5b1a4f59b3cb02044e510aa595a47994cc6d8e475fe24b0cf31c5f1868396b58c26b4cb8247b3d83b8ffac997990510f7a4123fcacf614fe1dd2471d0139e000541bdd7bf8d31accd6d7e4e569cd593e30082aa3ca2c73959b1a332a9f3f18af13a52847722700bbf0dadc6d28b6cad65f20b88fd16bc797e7832341527091e4c69fc1502fccff35f21f85610e8792bbab02edbaa3dfeedae4276e61e407f13304928bf908d1624f0a6c0afc2151e31a4e6712db9fae852d375500339ad9b248444898a2a0a47ac3defcc2e704aeea17db874fbeeacc72560aea172b15c89982816aea5d048d2968a8d5f3d857fe48ba8c33d4974a363566ad158f1cf6a18abe3b31ba273dd5ad15b01bb642edb9cb7b780d731281d69d7ae67e4e40d7e69bbc5722eafb3352a0e52e1cb0114cb2ce58c6722f6a9522424e5caed7105814223ab24c75e99838eabe455e3fb1b71df3ac7ac4284a8d60c1ce026073cc18004dc81258785ff20042ee3e88e5ae25d78cb719f190522bb404d25196d9809d9f58bf3b75acd4a6e995d905c6fc788718b93283eba1e3508f46e3187fd265a3fe2dc223abe2328befeebc307da980bb6cc8adc464615b88a7fa8e85dd96b402bb36602385a7efc0b0b83c6d259f37255fbfe5f6cb56eb0ededea5ad2eaa69b766da02056eadbf9f527f21d4265c6dcfebba30c12c8b4e3818432b04e8a85522377e32c6b71753ed2bf1f419d696394ffbd1e6ac9c5016d06a8fe98b4636918ed7104e196bd5e8c44f8fbc9befe44a8da477eae29869571766836bf6004eb7dcd8eb9eb2c31705ac397cd0105bd7c27d7741a159acf9cba825ec96f65a0b51d101db4ec7ca1edb159065101f0c06087192941a"}, &(0x7f0000000100)=0x1008) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:46 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000500)='./file0\x00', 0x110) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x490040, 0x0) getpid() r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000003c0)=@v2={0x2, @aes128, 0x8, [], "dfc429280b4efe38e4ffbdfdfe63150f"}) recvmsg$can_j1939(r3, 0x0, 0x0) r4 = geteuid() r5 = getgid() r6 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r7 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r6, &(0x7f0000001400)="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", 0x52c) sendfile(r6, r7, 0x0, 0x10000) r8 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r9 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r8, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a", 0x52c) sendfile(r8, r9, 0x0, 0x10000) r10 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r11 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r10, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a", 0x52c) sendfile(r10, r11, 0x0, 0x10000) r12 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r12, &(0x7f0000000580), 0x12) r13 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r13) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYRES16=r2, @ANYRES32=r4, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRESDEC=r7, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYPTR64, @ANYPTR64, @ANYRESHEX=r9], @ANYRES64=r11, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYPTR, @ANYRES32=r2, @ANYRESHEX, @ANYRES16=r1, @ANYPTR64, @ANYPTR64, @ANYRES32=r12], @ANYRESHEX=r4, @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYPTR64, @ANYRESHEX=r13, @ANYRES32=r1, @ANYRES16, @ANYRESHEX=r5], @ANYRESOCT=0x0]], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x4c055) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="78696e6f3d6f6e2c696e6465783d6f66662c72656469726563745f6469723d2e2f66696c65302c7265723d2e2f66696c65302c6d6561737572652c7375626a5f757365723d637075616363742e7573616765002c6170707261697365dd91829dc0f66f4f652c66736d616769633d3078303030303030303030303030303030372c736d61636b66736861743d2e2f6367726f75702e6370752f73797a30002c646f6e745f686173682c666f776e65723c8830f5", @ANYRESDEC=r4, @ANYBLOB='\x00\x00']) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000180)={0x70000, 0x3754, 0x9, r3, 0x0, &(0x7f00000000c0)={0x980909, 0x8, [], @ptr=0x244}}) r15 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r15, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r15, 0xc0205647, &(0x7f0000001c80)={0x9c0000, 0xfffffff9, 0x7, r2, 0x0, &(0x7f0000001c40)={0x9a090c, 0x7b33}}) r17 = dup(r1) io_uring_register$IORING_REGISTER_FILES(r14, 0x2, &(0x7f0000001cc0)=[r16, 0xffffffffffffffff, 0xffffffffffffffff, r17], 0x4) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:09:46 executing program 1 (fault-call:5 fault-nth:30): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x4c82, &(0x7f0000000100)) [ 1023.040143][ T26] audit: type=1804 audit(1583190586.119:3974): pid=9999 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir037414359/syzkaller.Dc7PXS/1079/file0" dev="sda1" ino=16674 res=1 [ 1023.102309][T10003] FAULT_INJECTION: forcing a failure. [ 1023.102309][T10003] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.104470][ T9999] overlayfs: unrecognized mount option "rer=./file0" or missing value [ 1023.137962][T10003] CPU: 0 PID: 10003 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1023.146677][T10003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.156910][T10003] Call Trace: [ 1023.157462][ T26] audit: type=1804 audit(1583190586.159:3975): pid=9999 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir037414359/syzkaller.Dc7PXS/1079/file0" dev="sda1" ino=16674 res=1 [ 1023.160265][T10003] dump_stack+0x11d/0x187 [ 1023.160335][T10003] should_fail.cold+0x5/0xf [ 1023.160426][T10003] __should_failslab+0x82/0xb0 [ 1023.198831][T10003] should_failslab+0x5/0xf [ 1023.203369][T10003] kmem_cache_alloc_trace+0x26/0x5f0 [ 1023.208674][T10003] ? delay_tsc+0x8a/0xb0 [ 1023.212934][T10003] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1023.218158][T10003] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1023.224094][T10003] sctp_add_bind_addr+0x90/0x2c0 [ 1023.229066][T10003] sctp_copy_local_addr_list+0x23d/0x290 [ 1023.234755][T10003] ? _crng_backtrack_protect+0xd1/0x100 [ 1023.240341][T10003] ? sctp_v6_is_any+0x3d/0x50 [ 1023.245126][T10003] sctp_copy_one_addr+0x65/0x150 [ 1023.250110][T10003] sctp_bind_addr_copy+0xb3/0x241 [ 1023.255179][T10003] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1023.261362][T10003] sctp_connect_new_asoc+0x10b/0x340 [ 1023.266745][T10003] __sctp_connect+0x282/0x680 [ 1023.271441][T10003] ? _copy_from_user+0x93/0xf0 [ 1023.276241][T10003] __sctp_setsockopt_connectx+0xe9/0x130 [ 1023.277528][ T26] audit: type=1804 audit(1583190586.159:3976): pid=9999 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir037414359/syzkaller.Dc7PXS/1079/file0" dev="sda1" ino=16674 res=1 [ 1023.281888][T10003] sctp_setsockopt+0x154f/0x5150 [ 1023.281925][T10003] sock_common_setsockopt+0x5d/0x80 [ 1023.317045][T10003] __sys_setsockopt+0x1d6/0x380 [ 1023.322011][T10003] __x64_sys_setsockopt+0x6b/0x80 [ 1023.327065][T10003] do_syscall_64+0xc7/0x390 [ 1023.331627][T10003] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1023.337555][T10003] RIP: 0033:0x45c479 23:09:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000580), 0x12) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x0, 0x2}, 0x8) 23:09:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) getsockopt$inet6_int(r1, 0x29, 0xf6, &(0x7f0000000000), &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1023.341479][T10003] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1023.361092][T10003] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1023.369551][T10003] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1023.377525][T10003] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1023.385621][T10003] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1023.393605][T10003] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1023.401608][T10003] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000001e [ 1023.403455][ T26] audit: type=1804 audit(1583190586.169:3977): pid=9999 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir037414359/syzkaller.Dc7PXS/1079/file0" dev="sda1" ino=16674 res=1 [ 1023.448688][T10017] overlayfs: unrecognized mount option "rer=./file0" or missing value 23:09:46 executing program 1 (fault-call:5 fault-nth:31): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:46 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000180)="49a052ee383efe99a0f66cf137d24be335ea545d8c27b6fa67ad79f3b9d4dd658726e7", 0xffffffffffffff24}], 0x2) 23:09:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r1, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe]}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000009c0)={0x800, 0x0, 0x3, 0x400, 0x80000000, 0x1, 0xa1cc, 0x6, r1}, &(0x7f0000000a00)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r1, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1023.742220][T10029] FAULT_INJECTION: forcing a failure. [ 1023.742220][T10029] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.789767][T10029] CPU: 1 PID: 10029 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1023.798532][T10029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.808607][T10029] Call Trace: [ 1023.811914][T10029] dump_stack+0x11d/0x187 [ 1023.816311][T10029] should_fail.cold+0x5/0xf [ 1023.820861][T10029] __should_failslab+0x82/0xb0 [ 1023.825632][T10029] should_failslab+0x5/0xf [ 1023.830060][T10029] kmem_cache_alloc_trace+0x26/0x5f0 [ 1023.835400][T10029] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1023.840616][T10029] sctp_add_bind_addr+0x90/0x2c0 [ 1023.845570][T10029] sctp_copy_local_addr_list+0x23d/0x290 [ 1023.851219][T10029] ? _crng_backtrack_protect+0xd1/0x100 [ 1023.856786][T10029] ? sctp_v6_is_any+0x3d/0x50 [ 1023.861485][T10029] sctp_copy_one_addr+0x65/0x150 [ 1023.866437][T10029] sctp_bind_addr_copy+0xb3/0x241 [ 1023.871488][T10029] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1023.877679][T10029] sctp_connect_new_asoc+0x10b/0x340 [ 1023.882987][T10029] __sctp_connect+0x282/0x680 [ 1023.887673][T10029] ? _copy_from_user+0x93/0xf0 [ 1023.892447][T10029] __sctp_setsockopt_connectx+0xe9/0x130 [ 1023.898083][T10029] sctp_setsockopt+0x154f/0x5150 [ 1023.903097][T10029] sock_common_setsockopt+0x5d/0x80 [ 1023.908315][T10029] __sys_setsockopt+0x1d6/0x380 [ 1023.913270][T10029] __x64_sys_setsockopt+0x6b/0x80 [ 1023.918307][T10029] do_syscall_64+0xc7/0x390 [ 1023.922836][T10029] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1023.928824][T10029] RIP: 0033:0x45c479 [ 1023.932732][T10029] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1023.952421][T10029] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1023.960846][T10029] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1023.968924][T10029] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1023.976909][T10029] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1023.984890][T10029] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1023.992869][T10029] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000001f 23:09:47 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x9}, 0x8) r1 = getpgid(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x7, 0x0, 0x10001, 0xffff}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x4, 0x9, 0x0, 0x80, 0x7, 0xa5, 0x5, 0x8, 0x4, 0x12, 0x4, 0x81, 0x3fb}, {0x8119, 0xffff, 0x6, 0x7a, 0x83, 0x20, 0x7, 0x3, 0xef, 0xb3, 0x9, 0x1, 0x6af6adbc}, {0x57f, 0xdc0, 0x4, 0xc5, 0x3, 0x80, 0x6, 0x8, 0x4, 0x0, 0x6, 0x9, 0x800}], 0x101}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f00000000c0)={0x8, r3, 0x2, 0x6}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:47 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:09:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5409, &(0x7f0000000100)) 23:09:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x7, @mcast2}, 0x1c) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x100000001, 0x10081) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x640, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000100)={0x3, r2}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:47 executing program 1 (fault-call:5 fault-nth:32): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4c102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x80, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, {0xa, 0x4e22, 0x4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, r2, 0x7f}}, 0x48) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:47 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000180)={0x8, 0x9}) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) [ 1024.694956][T10070] FAULT_INJECTION: forcing a failure. [ 1024.694956][T10070] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.737672][T10070] CPU: 0 PID: 10070 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1024.746461][T10070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1024.756525][T10070] Call Trace: [ 1024.760020][T10070] dump_stack+0x11d/0x187 [ 1024.764384][T10070] should_fail.cold+0x5/0xf [ 1024.768924][T10070] __should_failslab+0x82/0xb0 [ 1024.773715][T10070] should_failslab+0x5/0xf [ 1024.778226][T10070] kmem_cache_alloc_trace+0x26/0x5f0 [ 1024.783601][T10070] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1024.788819][T10070] sctp_add_bind_addr+0x90/0x2c0 [ 1024.793788][T10070] sctp_copy_local_addr_list+0x23d/0x290 [ 1024.799502][T10070] ? _crng_backtrack_protect+0xd1/0x100 [ 1024.805071][T10070] ? sctp_v6_is_any+0x3d/0x50 [ 1024.809785][T10070] sctp_copy_one_addr+0x65/0x150 [ 1024.814799][T10070] sctp_bind_addr_copy+0xb3/0x241 [ 1024.819852][T10070] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1024.826121][T10070] sctp_connect_new_asoc+0x10b/0x340 [ 1024.831433][T10070] __sctp_connect+0x282/0x680 [ 1024.836141][T10070] ? _copy_from_user+0x93/0xf0 [ 1024.840933][T10070] __sctp_setsockopt_connectx+0xe9/0x130 [ 1024.846589][T10070] sctp_setsockopt+0x154f/0x5150 [ 1024.851635][T10070] sock_common_setsockopt+0x5d/0x80 [ 1024.856861][T10070] __sys_setsockopt+0x1d6/0x380 [ 1024.861806][T10070] __x64_sys_setsockopt+0x6b/0x80 [ 1024.866858][T10070] do_syscall_64+0xc7/0x390 [ 1024.871390][T10070] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1024.877317][T10070] RIP: 0033:0x45c479 [ 1024.881232][T10070] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1024.900843][T10070] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1024.909356][T10070] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1024.917373][T10070] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1024.925363][T10070] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1024.933354][T10070] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1024.941337][T10070] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000020 23:09:48 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x80) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)="17", 0x1}], 0x2) 23:09:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0xb, 0x84) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x52c) sendfile(r1, r2, 0x0, 0x10000) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r3, &(0x7f0000000580), 0x12) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000009c0)={0x800, 0x0, 0x3, 0x400, 0x80000000, 0x1, 0xa1cc, 0x6, r4}, &(0x7f0000000a00)=0x20) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000300)={r4, 0x80000001}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r5, @in6={{0xa, 0x4e24, 0x200, @mcast2}}, 0x7, 0x1}, &(0x7f00000002c0)=0x90) r6 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r6, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:48 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x52c) sendfile(r1, r2, 0x0, 0x10000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000bf37000000280012000c0001007665746800000000180002001400010008000000", @ANYRES32=0x0, @ANYBLOB="92"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00010700"/20, @ANYRES32=r6, @ANYBLOB="00000000000000000300000008000100753332004d1637399ae816cc01000d80"], 0x38}}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000000)={@remote, @local, r6}, 0xc) 23:09:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x540b, &(0x7f0000000100)) [ 1025.131918][ T26] audit: type=1804 audit(1583190588.209:3978): pid=10081 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir309363322/syzkaller.l56wwm/1200/file0" dev="sda1" ino=16943 res=1 23:09:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x400, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x34, r2, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000080) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1025.235178][ T26] audit: type=1804 audit(1583190588.309:3979): pid=10088 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir167061834/syzkaller.2p5nEZ/1054/file0" dev="sda1" ino=16674 res=1 23:09:48 executing program 0: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000580), 0x12) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r3, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x4}, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x6, 0x1000}, &(0x7f0000000300)=0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x2}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={r2, r3, 0x0, 0x1, &(0x7f0000000080)='\x00', r4}, 0x30) pread64(r0, &(0x7f0000000000)=""/62, 0x3e, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f00000004c0)={0x2, 0x0, [0x0, 0x0]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @broadcast}], 0x10) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23, 0x3fe, @mcast1}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000200)="6364cac790d1548e180da51c0f5227724f45a2ca63672ba9ab4e0bfabc3da69b22b9b41f0023a9f49723f82cb9ddd50d7ce9de3036c8062dd16cd0bc02ccd253e17b71960361ebcebe328a019844902d1ee81f7fa34deeaec527b79bf7ba18d2a8e9a6974e813cf9f044bf478350929d4a40f2981641eb328a5b180cb41e550f7710a9ab571b7825c1068e79bf37b23745145ab89defb43912ae8e900f665a81406eb60b314d8cff8becc5cca2b9de82492cdcf29f906b095fdc67623a46ef574ca27aa2a22c36b69e937a641d48f60fdcddc01db1196e5989d486de510b1bbc72bff3ccb3d3", 0xe6) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000580), 0x12) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @local}], 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:48 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x10) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:09:48 executing program 1 (fault-call:5 fault-nth:33): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:48 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x16, 0x1, 0x222, &(0x7f00000000c0)=[0x0, 0x0], 0x2}, 0x20) [ 1025.853918][T10113] FAULT_INJECTION: forcing a failure. [ 1025.853918][T10113] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.891896][T10113] CPU: 1 PID: 10113 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1025.900615][T10113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1025.910783][T10113] Call Trace: [ 1025.914185][T10113] dump_stack+0x11d/0x187 [ 1025.918602][T10113] should_fail.cold+0x5/0xf [ 1025.923167][T10113] __should_failslab+0x82/0xb0 [ 1025.927987][T10113] should_failslab+0x5/0xf [ 1025.932464][T10113] kmem_cache_alloc_trace+0x26/0x5f0 [ 1025.937922][T10113] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1025.943150][T10113] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1025.949080][T10113] sctp_add_bind_addr+0x90/0x2c0 [ 1025.954045][T10113] sctp_copy_local_addr_list+0x23d/0x290 [ 1025.959703][T10113] ? _crng_backtrack_protect+0xd1/0x100 [ 1025.965278][T10113] ? sctp_v6_is_any+0x3d/0x50 [ 1025.969980][T10113] sctp_copy_one_addr+0x65/0x150 [ 1025.974963][T10113] sctp_bind_addr_copy+0xb3/0x241 [ 1025.980019][T10113] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1025.986292][T10113] sctp_connect_new_asoc+0x10b/0x340 [ 1025.991610][T10113] __sctp_connect+0x282/0x680 [ 1025.996310][T10113] ? _copy_from_user+0x93/0xf0 [ 1026.001105][T10113] __sctp_setsockopt_connectx+0xe9/0x130 [ 1026.006770][T10113] sctp_setsockopt+0x154f/0x5150 [ 1026.011752][T10113] sock_common_setsockopt+0x5d/0x80 [ 1026.017106][T10113] __sys_setsockopt+0x1d6/0x380 [ 1026.021996][T10113] __x64_sys_setsockopt+0x6b/0x80 [ 1026.027099][T10113] do_syscall_64+0xc7/0x390 [ 1026.031672][T10113] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1026.037584][T10113] RIP: 0033:0x45c479 [ 1026.041574][T10113] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1026.061182][T10113] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1026.069670][T10113] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1026.077658][T10113] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1026.085660][T10113] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1026.093645][T10113] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1026.101759][T10113] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000021 23:09:49 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40200, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:49 executing program 1 (fault-call:5 fault-nth:34): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x540c, &(0x7f0000000100)) [ 1026.361052][T10126] FAULT_INJECTION: forcing a failure. [ 1026.361052][T10126] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.418994][T10126] CPU: 0 PID: 10126 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1026.427711][T10126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.437828][T10126] Call Trace: [ 1026.441200][T10126] dump_stack+0x11d/0x187 [ 1026.445556][T10126] should_fail.cold+0x5/0xf [ 1026.450086][T10126] __should_failslab+0x82/0xb0 [ 1026.454879][T10126] should_failslab+0x5/0xf [ 1026.459360][T10126] kmem_cache_alloc_trace+0x26/0x5f0 [ 1026.464724][T10126] ? delay_tsc+0x8a/0xb0 [ 1026.469027][T10126] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1026.474249][T10126] sctp_add_bind_addr+0x90/0x2c0 [ 1026.479215][T10126] sctp_copy_local_addr_list+0x23d/0x290 [ 1026.485089][T10126] ? _crng_backtrack_protect+0xd1/0x100 [ 1026.490672][T10126] ? sctp_v6_is_any+0x3d/0x50 [ 1026.495384][T10126] sctp_copy_one_addr+0x65/0x150 [ 1026.500353][T10126] sctp_bind_addr_copy+0xb3/0x241 [ 1026.505489][T10126] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1026.511676][T10126] sctp_connect_new_asoc+0x10b/0x340 [ 1026.517066][T10126] __sctp_connect+0x282/0x680 [ 1026.521760][T10126] ? _copy_from_user+0x93/0xf0 [ 1026.526560][T10126] __sctp_setsockopt_connectx+0xe9/0x130 [ 1026.532223][T10126] sctp_setsockopt+0x154f/0x5150 [ 1026.537266][T10126] sock_common_setsockopt+0x5d/0x80 [ 1026.542494][T10126] __sys_setsockopt+0x1d6/0x380 [ 1026.547425][T10126] __x64_sys_setsockopt+0x6b/0x80 [ 1026.552500][T10126] do_syscall_64+0xc7/0x390 [ 1026.557033][T10126] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1026.563056][T10126] RIP: 0033:0x45c479 [ 1026.566972][T10126] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1026.586679][T10126] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1026.595155][T10126] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1026.603142][T10126] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1026.611140][T10126] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 23:09:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)={0x4, 0xe, 0x4, 0x200000, 0x3, {r2, r3/1000+30000}, {0x3, 0x8, 0x6, 0x0, 0x5, 0x0, "87855302"}, 0x10000, 0x1, @planes=&(0x7f00000000c0)={0x3, 0x8, @userptr=0x9, 0x3}, 0x6, 0x0, 0xffffffffffffffff}) write$P9_RSETATTR(r4, &(0x7f0000000200)={0x7, 0x1b, 0x2}, 0x7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}, 0x80000}, 0xfffffd41) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000580), 0x12) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000040)={0x200, 0x6}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r3, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe]}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000009c0)={0x800, 0x0, 0x3, 0x400, 0x80000000, 0x1, 0xa1cc, 0x6, r3}, &(0x7f0000000a00)=0x20) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000140)={{0x0, @addr=0xffff225e}, 0x8, 0x0, 0x6}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={r3, 0x0, 0x5}, 0x8) [ 1026.619132][T10126] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1026.627191][T10126] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000022 23:09:49 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x10000, 0x4, 0x1, r2}) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:09:49 executing program 1 (fault-call:5 fault-nth:35): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) uname(&(0x7f0000000000)=""/71) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1026.927176][T10149] FAULT_INJECTION: forcing a failure. [ 1026.927176][T10149] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.944125][T10149] CPU: 0 PID: 10149 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1026.952941][T10149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.963065][T10149] Call Trace: [ 1026.966391][T10149] dump_stack+0x11d/0x187 [ 1026.970745][T10149] should_fail.cold+0x5/0xf [ 1026.975332][T10149] __should_failslab+0x82/0xb0 [ 1026.980108][T10149] should_failslab+0x5/0xf [ 1026.984538][T10149] kmem_cache_alloc_trace+0x26/0x5f0 [ 1026.989857][T10149] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1026.995108][T10149] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1027.001081][T10149] sctp_add_bind_addr+0x90/0x2c0 [ 1027.006085][T10149] sctp_copy_local_addr_list+0x23d/0x290 [ 1027.011737][T10149] ? _crng_backtrack_protect+0xd1/0x100 [ 1027.017332][T10149] ? sctp_v6_is_any+0x3d/0x50 [ 1027.022036][T10149] sctp_copy_one_addr+0x65/0x150 [ 1027.027000][T10149] sctp_bind_addr_copy+0xb3/0x241 [ 1027.032152][T10149] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1027.038331][T10149] sctp_connect_new_asoc+0x10b/0x340 [ 1027.043645][T10149] __sctp_connect+0x282/0x680 [ 1027.048344][T10149] ? _copy_from_user+0x93/0xf0 [ 1027.053219][T10149] __sctp_setsockopt_connectx+0xe9/0x130 [ 1027.058892][T10149] sctp_setsockopt+0x154f/0x5150 [ 1027.063853][T10149] sock_common_setsockopt+0x5d/0x80 [ 1027.069077][T10149] __sys_setsockopt+0x1d6/0x380 [ 1027.073962][T10149] __x64_sys_setsockopt+0x6b/0x80 [ 1027.079071][T10149] do_syscall_64+0xc7/0x390 [ 1027.083663][T10149] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1027.089562][T10149] RIP: 0033:0x45c479 [ 1027.093480][T10149] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1027.113097][T10149] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 23:09:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000580), 0x12) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r1, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe]}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000009c0)={0x800, 0x0, 0x3, 0x400, 0x80000000, 0x1, 0xa1cc, 0x6, r1}, &(0x7f0000000a00)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}, 0x2, 0xffffffd9, 0x80, 0x80, 0x2}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0xb383, 0x820c, 0x6, 0x0, r2}, &(0x7f0000000200)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:09:50 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r1, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe]}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000009c0)={0x800, 0x0, 0x3, 0x400, 0x80000000, 0x1, 0xa1cc, 0x6, r1}, &(0x7f0000000a00)=0x20) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1, &(0x7f0000000280)=""/245, 0xf5}, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r3, &(0x7f0000000580), 0x12) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r4, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe]}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000009c0)={0x800, 0x0, 0x3, 0x400, 0x80000000, 0x1, 0xa1cc, 0x6, r4}, &(0x7f0000000a00)=0x20) r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r5, &(0x7f0000001400)="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", 0x52c) sendfile(r5, r6, 0x0, 0x10000) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r7, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe]}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000009c0)={0x800, 0x0, 0x3, 0x400, 0x80000000, 0x1, 0xa1cc, 0x6, r7}, &(0x7f0000000a00)=0x20) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000003c0)={r7, 0x50, 0x8, 0x5962, 0x8cc5, 0x5}, &(0x7f0000000400)=0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={r8, 0x1ffe}, 0xfeb7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1027.121550][T10149] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1027.129538][T10149] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1027.137623][T10149] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1027.145657][T10149] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1027.153693][T10149] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000023 [ 1027.212503][ T26] audit: type=1804 audit(1583190590.289:3980): pid=10155 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir309363322/syzkaller.l56wwm/1207/file0" dev="sda1" ino=16903 res=1 23:09:50 executing program 1 (fault-call:5 fault-nth:36): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:50 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffff7) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:50 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x5, @remote, 0x4}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) fchdir(r0) 23:09:50 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r0, 0x0, 0x0) r1 = accept$nfc_llcp(r0, &(0x7f00000002c0), &(0x7f0000000340)=0x60) write$binfmt_elf64(r1, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x4, 0x81, 0x5, 0x81, 0x2, 0x6, 0x7ff, 0xaf, 0x40, 0xd8, 0xb1, 0x5, 0x38, 0x2, 0x8, 0xa0b, 0x800}, [{0x6474e551, 0x5, 0x9, 0x8, 0x40, 0x8, 0x9, 0x7}, {0x3, 0x7, 0x7f, 0x8, 0x1, 0x800, 0x8, 0xffffffffffffff97}], "d0b0988123abf0a024817179cf2e405045c3e9632919eb2d2bccadeef6abdad1554eab28be990bfe4802f5df10f3059fb5f30d982ffdacee73cc110d297f257932e75b697746d50440def3afd0f3c2ec644adc5130a8efd862eccb8892ca2f19bdd9acd0221456a73a8c05a8b4ff906644dfa35fa1ca09a421a186a6f9aacc57d6e0b37f2ec80c33fe0d5c4fb0ccf1c7f4376530b74c8fb438a959ba419dbc2b5b21940d9058f08cb803be8a7ad9f2af475a7f", [[], [], [], [], [], []]}, 0x763) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000180)={0x9, 0x4, 0x4}) mkdirat(r2, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) getresgid(&(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240)) [ 1027.429051][T10167] FAULT_INJECTION: forcing a failure. [ 1027.429051][T10167] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.486352][T10167] CPU: 0 PID: 10167 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1027.495074][T10167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1027.505130][T10167] Call Trace: [ 1027.508450][T10167] dump_stack+0x11d/0x187 [ 1027.512798][T10167] should_fail.cold+0x5/0xf [ 1027.517326][T10167] __should_failslab+0x82/0xb0 [ 1027.522127][T10167] should_failslab+0x5/0xf [ 1027.526558][T10167] kmem_cache_alloc_trace+0x26/0x5f0 [ 1027.531890][T10167] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1027.537125][T10167] sctp_add_bind_addr+0x90/0x2c0 [ 1027.542230][T10167] sctp_copy_local_addr_list+0x23d/0x290 [ 1027.547871][T10167] ? _crng_backtrack_protect+0xd1/0x100 [ 1027.553449][T10167] ? sctp_v6_is_any+0x3d/0x50 [ 1027.558208][T10167] sctp_copy_one_addr+0x65/0x150 [ 1027.563229][T10167] sctp_bind_addr_copy+0xb3/0x241 [ 1027.568283][T10167] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1027.574467][T10167] sctp_connect_new_asoc+0x10b/0x340 [ 1027.579818][T10167] __sctp_connect+0x282/0x680 [ 1027.584516][T10167] ? _copy_from_user+0x93/0xf0 [ 1027.589336][T10167] __sctp_setsockopt_connectx+0xe9/0x130 [ 1027.595008][T10167] sctp_setsockopt+0x154f/0x5150 [ 1027.600011][T10167] sock_common_setsockopt+0x5d/0x80 [ 1027.605241][T10167] __sys_setsockopt+0x1d6/0x380 [ 1027.610232][T10167] __x64_sys_setsockopt+0x6b/0x80 [ 1027.615273][T10167] do_syscall_64+0xc7/0x390 [ 1027.619789][T10167] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1027.625695][T10167] RIP: 0033:0x45c479 [ 1027.629593][T10167] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1027.649246][T10167] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1027.657672][T10167] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1027.665667][T10167] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1027.673652][T10167] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 23:09:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x540d, &(0x7f0000000100)) 23:09:50 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r1, 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x1ae81, 0x0) linkat(r1, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1027.681655][T10167] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1027.689650][T10167] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000024 23:09:50 executing program 1 (fault-call:5 fault-nth:37): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:50 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f00000000c0)) r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x47}, &(0x7f0000000200)=0x8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x2, 0x0) 23:09:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000580), 0x12) sync_file_range(r1, 0xc8, 0x2, 0x4) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1028.047523][T10198] FAULT_INJECTION: forcing a failure. [ 1028.047523][T10198] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.074909][T10198] CPU: 1 PID: 10198 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1028.083795][T10198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1028.093860][T10198] Call Trace: [ 1028.097253][T10198] dump_stack+0x11d/0x187 [ 1028.101677][T10198] should_fail.cold+0x5/0xf [ 1028.106254][T10198] __should_failslab+0x82/0xb0 [ 1028.111035][T10198] should_failslab+0x5/0xf [ 1028.115470][T10198] kmem_cache_alloc_trace+0x26/0x5f0 [ 1028.120783][T10198] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1028.126033][T10198] sctp_add_bind_addr+0x90/0x2c0 [ 1028.131010][T10198] sctp_copy_local_addr_list+0x23d/0x290 [ 1028.136664][T10198] ? _crng_backtrack_protect+0xd1/0x100 [ 1028.142260][T10198] ? sctp_v6_is_any+0x3d/0x50 [ 1028.147039][T10198] sctp_copy_one_addr+0x65/0x150 [ 1028.152056][T10198] sctp_bind_addr_copy+0xb3/0x241 [ 1028.157125][T10198] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1028.163353][T10198] sctp_connect_new_asoc+0x10b/0x340 [ 1028.168679][T10198] __sctp_connect+0x282/0x680 [ 1028.173382][T10198] ? _copy_from_user+0x93/0xf0 [ 1028.178179][T10198] __sctp_setsockopt_connectx+0xe9/0x130 [ 1028.183837][T10198] sctp_setsockopt+0x154f/0x5150 [ 1028.188802][T10198] sock_common_setsockopt+0x5d/0x80 [ 1028.194073][T10198] __sys_setsockopt+0x1d6/0x380 [ 1028.199097][T10198] __x64_sys_setsockopt+0x6b/0x80 [ 1028.204152][T10198] do_syscall_64+0xc7/0x390 [ 1028.208682][T10198] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1028.214584][T10198] RIP: 0033:0x45c479 [ 1028.218553][T10198] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1028.238165][T10198] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1028.246674][T10198] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1028.254687][T10198] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1028.262707][T10198] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1028.270694][T10198] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1028.278679][T10198] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000025 23:09:51 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '['}, {0x20, './cgroup.cpu/syz0\x00'}, {0x20, 'posix_acl_access&)'}, {0x20, 'cpuacct.usage\x00'}, {}, {0x20, 'md5sumeth0!em1'}, {0x20, './cgroup.cpu/syz0\x00'}, {0x20, 'cpuacct.usage\x00'}, {0x20, './cgroup.cpu/syz0\x00'}], 0xa, "25d798bdac1fea0c3d557194aefacc87362250b2bf42342cbb2f42e83bccb3fbbbe1d160d541b1178a7bf4cc0a76e207fb8f9ec28a3fcc2a66845b5d6c9b456a949a93f8dc9d55f66bd018961e1e833d8937b369a5e42d008f0b8b2e49405c593ab2f4f4bff384aaea411827ffb9ebe5c2785d5a52c77e4760f1b4d89f581ef5f4c8e8d863508425522c455c235c3adc15094f28bce932611403511a486c7a9eed1c0eda01946fb8092161e5352867"}, 0x136) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f00000000c0)='+', 0x1}], 0x2) 23:09:51 executing program 5: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000140)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r3, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe]}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000009c0)={0x800, 0x0, 0x3, 0x400, 0x80000000, 0x1, 0xa1cc, 0x6, r3}, &(0x7f0000000a00)=0x20) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x3, @loopback, 0x6}}}, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4ea3, 0x0, @dev={0xfe, 0x80, [], 0x39}}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40400, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f00000000c0)) 23:09:51 executing program 1 (fault-call:5 fault-nth:38): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:51 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0xc, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x90) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:09:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x52c) sendfile(r1, r2, 0x0, 0x10000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000000201010400000000000000000a000000180002801400018008000100ac14140008000200493400000000"], 0x2c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x7, 0x7, 0x5}) 23:09:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5413, &(0x7f0000000100)) [ 1028.708295][T10226] FAULT_INJECTION: forcing a failure. [ 1028.708295][T10226] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.757580][ T26] audit: type=1804 audit(1583190591.829:3981): pid=10228 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir309363322/syzkaller.l56wwm/1212/file0" dev="sda1" ino=16959 res=1 [ 1028.812046][T10226] CPU: 0 PID: 10226 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1028.820798][T10226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1028.830862][T10226] Call Trace: [ 1028.834251][T10226] dump_stack+0x11d/0x187 [ 1028.838735][T10226] should_fail.cold+0x5/0xf [ 1028.843269][T10226] __should_failslab+0x82/0xb0 [ 1028.848051][T10226] should_failslab+0x5/0xf [ 1028.852520][T10226] kmem_cache_alloc_trace+0x26/0x5f0 [ 1028.857824][T10226] ? delay_tsc+0x8a/0xb0 [ 1028.862083][T10226] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1028.867301][T10226] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1028.873206][T10226] sctp_add_bind_addr+0x90/0x2c0 [ 1028.878503][T10226] sctp_copy_local_addr_list+0x23d/0x290 [ 1028.884154][T10226] ? _crng_backtrack_protect+0xd1/0x100 [ 1028.889791][T10226] ? sctp_v6_is_any+0x3d/0x50 [ 1028.894481][T10226] sctp_copy_one_addr+0x65/0x150 [ 1028.899424][T10226] sctp_bind_addr_copy+0xb3/0x241 [ 1028.904475][T10226] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1028.910666][T10226] sctp_connect_new_asoc+0x10b/0x340 [ 1028.915970][T10226] __sctp_connect+0x282/0x680 [ 1028.920651][T10226] ? _copy_from_user+0x93/0xf0 [ 1028.925422][T10226] __sctp_setsockopt_connectx+0xe9/0x130 [ 1028.931127][T10226] sctp_setsockopt+0x154f/0x5150 [ 1028.936150][T10226] sock_common_setsockopt+0x5d/0x80 [ 1028.941355][T10226] __sys_setsockopt+0x1d6/0x380 [ 1028.946233][T10226] __x64_sys_setsockopt+0x6b/0x80 [ 1028.951277][T10226] do_syscall_64+0xc7/0x390 [ 1028.955807][T10226] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1028.961792][T10226] RIP: 0033:0x45c479 [ 1028.965713][T10226] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1028.985315][T10226] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1028.993781][T10226] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1029.001757][T10226] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 23:09:52 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = geteuid() r2 = getgid() r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r3, &(0x7f0000000580), 0x12) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r4, &(0x7f0000000580), 0x12) r5 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x60001000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYRES32=r2, @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYPTR64, @ANYRESDEC], @ANYRES32=r3, @ANYRESHEX=r1, @ANYRES32, @ANYRESOCT], @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRESHEX=r4, @ANYRES64, @ANYRES64=r5]], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x4044) r6 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r7 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r6, &(0x7f0000001400)="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", 0x52c) sendfile(r6, r7, 0x0, 0x10000) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f0000000340)={0x2, 0x2, @raw_data=[0x0, 0xf3f, 0xfffffff7, 0x0, 0x6, 0x7, 0xfffffff7, 0x8, 0x5bc4, 0x45d7c050, 0x7, 0x68000000, 0x4, 0x2, 0x8, 0x3]}) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000180)='./file1\x00', 0x6, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4b8a30b9d38c8a2f10a3c12d4e9ee2cf0c39c2c63c57d2596baf3785ae853aa4f05f31b3079fe809e85003fdd8357343f5accdb9cd0aef823d2f6bead81d1793c7f78f7c6a990fa70b33723797995c9256d6a84d9a7ffefe3f91bcac2ccc873ab461bdd260ad439908eb060c6f1bede4aa49df755b4bcc42288e49e58dc1c5371028a347", 0x84, 0x100000001}], 0x2000040, &(0x7f0000000500)={[{@shortname_lower='shortname=lower'}, {@shortname_winnt='shortname=winnt'}], [{@dont_hash='dont_hash'}]}) r8 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f00000001c0)}, {&(0x7f00000000c0)='k', 0x1}], 0x2) [ 1029.009739][T10226] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1029.017713][T10226] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1029.025698][T10226] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000026 23:09:52 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x52c) sendfile(r1, r2, 0x0, 0x10000) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x4040004) [ 1029.141653][ T26] audit: type=1804 audit(1583190592.219:3982): pid=10239 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir309363322/syzkaller.l56wwm/1213/file0" dev="sda1" ino=16958 res=1 23:09:52 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x181200) mount$9p_xen(&(0x7f0000000000)='syz\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2000, &(0x7f0000000240)={'trans=xen,', {[{@cache_none='cache=none'}, {@version_9p2000='version=9p2000'}, {@cachetag={'cachetag', 0x3d, '.ppp1[mime_type\'wlan1(,$md5sum/'}}, {@debug={'debug', 0x3d, 0xb90}}, {@nodevmap='nodevmap'}, {@fscache='fscache'}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise_type='appraise_type=imasig'}, {@subj_type={'subj_type', 0x3d, '/dev/audio#\x00'}}, {@subj_type={'subj_type', 0x3d, '}(vboxnet0#trustedprocvboxnet1\'ceth0$'}}, {@hash='hash'}]}}) recvmsg$can_j1939(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:52 executing program 1 (fault-call:5 fault-nth:39): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 1029.243593][T10244] FAT-fs (loop2): Unrecognized mount option "dont_hash" or missing value [ 1029.297124][ T26] audit: type=1804 audit(1583190592.219:3983): pid=10239 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir309363322/syzkaller.l56wwm/1213/file0" dev="sda1" ino=16958 res=1 [ 1029.343209][T10248] FAT-fs (loop2): Unrecognized mount option "dont_hash" or missing value 23:09:52 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000bf37000000280012000c0001007665746800000000180002001400010008000000", @ANYRES32=0x0, @ANYBLOB="92"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000040000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="00000000000000000300000008000100753332004d1637399ae816cc01000d80"], 0x38}}, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000003c0)={0x1, 0x1f, 0x5342, 0x20, 0x800, 0x6}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@rand_addr="582598a384438f443749fff08be2fa24", @in=@local, 0x4e23, 0x2, 0x4e24, 0x2, 0xa, 0x40, 0x20, 0x5e, r4, r5}, {0xc183, 0x380000000000, 0x4, 0x7, 0x800, 0x20, 0x2, 0x2}, {0x41, 0x5, 0x1, 0x6}, 0x6, 0x0, 0x0, 0x1, 0x3, 0x2}, {{@in6=@empty, 0x4d6, 0xff}, 0x2, @in=@local, 0x3505, 0x1, 0x2, 0x3, 0x0, 0x20000008, 0xfffffc01}}, 0xe8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1029.417293][T10254] FAULT_INJECTION: forcing a failure. [ 1029.417293][T10254] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.449011][T10254] CPU: 0 PID: 10254 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1029.457728][T10254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1029.467809][T10254] Call Trace: [ 1029.471221][T10254] dump_stack+0x11d/0x187 [ 1029.475580][T10254] should_fail.cold+0x5/0xf [ 1029.480191][T10254] __should_failslab+0x82/0xb0 [ 1029.484974][T10254] should_failslab+0x5/0xf [ 1029.489412][T10254] kmem_cache_alloc_trace+0x26/0x5f0 [ 1029.494745][T10254] ? kcsan_setup_watchpoint+0x2d3/0x400 [ 1029.500324][T10254] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1029.505549][T10254] sctp_add_bind_addr+0x90/0x2c0 [ 1029.510565][T10254] sctp_copy_local_addr_list+0x23d/0x290 [ 1029.516222][T10254] ? _crng_backtrack_protect+0xd1/0x100 [ 1029.521793][T10254] ? sctp_v6_is_any+0x3d/0x50 [ 1029.526509][T10254] sctp_copy_one_addr+0x65/0x150 [ 1029.531471][T10254] sctp_bind_addr_copy+0xb3/0x241 [ 1029.536538][T10254] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1029.542792][T10254] sctp_connect_new_asoc+0x10b/0x340 [ 1029.548097][T10254] __sctp_connect+0x282/0x680 [ 1029.552791][T10254] ? _copy_from_user+0x93/0xf0 [ 1029.557634][T10254] __sctp_setsockopt_connectx+0xe9/0x130 [ 1029.563294][T10254] sctp_setsockopt+0x154f/0x5150 [ 1029.568255][T10254] sock_common_setsockopt+0x5d/0x80 [ 1029.573545][T10254] __sys_setsockopt+0x1d6/0x380 [ 1029.578428][T10254] __x64_sys_setsockopt+0x6b/0x80 [ 1029.583523][T10254] do_syscall_64+0xc7/0x390 [ 1029.588052][T10254] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1029.593953][T10254] RIP: 0033:0x45c479 [ 1029.597858][T10254] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1029.617526][T10254] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1029.625953][T10254] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1029.634092][T10254] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1029.642223][T10254] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1029.650284][T10254] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1029.658293][T10254] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000027 23:09:52 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0xc5000884) 23:09:52 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x7, @empty, 0x6}, @in={0x2, 0x4e1e, @local}], 0x2c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5414, &(0x7f0000000100)) 23:09:53 executing program 1 (fault-call:5 fault-nth:40): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 1030.147086][T10278] FAULT_INJECTION: forcing a failure. [ 1030.147086][T10278] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.198737][T10278] CPU: 1 PID: 10278 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1030.207459][T10278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1030.217641][T10278] Call Trace: [ 1030.221045][T10278] dump_stack+0x11d/0x187 [ 1030.225469][T10278] should_fail.cold+0x5/0xf [ 1030.229999][T10278] __should_failslab+0x82/0xb0 [ 1030.234777][T10278] should_failslab+0x5/0xf [ 1030.239210][T10278] kmem_cache_alloc_trace+0x26/0x5f0 [ 1030.244641][T10278] ? delay_tsc+0x8a/0xb0 [ 1030.248982][T10278] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1030.254277][T10278] sctp_add_bind_addr+0x90/0x2c0 [ 1030.259254][T10278] sctp_copy_local_addr_list+0x23d/0x290 [ 1030.264923][T10278] ? _crng_backtrack_protect+0xd1/0x100 [ 1030.270558][T10278] ? sctp_v6_is_any+0x3d/0x50 [ 1030.275266][T10278] sctp_copy_one_addr+0x65/0x150 [ 1030.280232][T10278] sctp_bind_addr_copy+0xb3/0x241 [ 1030.285291][T10278] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1030.291481][T10278] sctp_connect_new_asoc+0x10b/0x340 [ 1030.296879][T10278] __sctp_connect+0x282/0x680 [ 1030.301648][T10278] ? _copy_from_user+0x93/0xf0 [ 1030.306447][T10278] __sctp_setsockopt_connectx+0xe9/0x130 [ 1030.312119][T10278] sctp_setsockopt+0x154f/0x5150 [ 1030.317094][T10278] sock_common_setsockopt+0x5d/0x80 [ 1030.322387][T10278] __sys_setsockopt+0x1d6/0x380 [ 1030.327298][T10278] __x64_sys_setsockopt+0x6b/0x80 [ 1030.332425][T10278] do_syscall_64+0xc7/0x390 [ 1030.336978][T10278] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1030.342887][T10278] RIP: 0033:0x45c479 [ 1030.346800][T10278] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1030.366560][T10278] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1030.374984][T10278] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1030.382969][T10278] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1030.390955][T10278] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 23:09:53 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000180)) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r3, &(0x7f0000000580), 0x12) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000200)=0x2, 0x4) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:09:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) r1 = open(&(0x7f0000000000)='./file0\x00', 0x10600, 0x100) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r2, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe]}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000009c0)={0x800, 0x0, 0x3, 0x400, 0x80000000, 0x1, 0xa1cc, 0x6, r2}, &(0x7f0000000a00)=0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e23, 0x667b, @empty, 0x2}}, 0x7, 0x800, 0x0, 0x9, 0x0, 0x1ff, 0x3}, 0x9c) [ 1030.399147][T10278] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1030.407132][T10278] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000028 23:09:53 executing program 1 (fault-call:5 fault-nth:41): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:53 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) r1 = gettid() capget(&(0x7f0000000000)={0x155b17ac, r1}, &(0x7f00000000c0)={0x5, 0x1f, 0x1ff, 0x5, 0x80000001}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:53 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{0x3, 0x8f, 0x3e, 0x1000}, {0x33, 0x1, 0xd5, 0x9}, {0x0, 0x2, 0x7f, 0x7ff}, {0x7, 0xf8, 0x0, 0x7}, {0x70d9, 0x4f, 0x40, 0x6}, {0xffe, 0x6, 0x80, 0x4}, {0x4, 0x0, 0x8, 0x800}]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000340)=0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000580), 0x12) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x410302, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000002c0), &(0x7f0000000300)=0x4) openat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r3 = dup(r1) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000200)=""/191) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1030.724468][T10296] FAULT_INJECTION: forcing a failure. [ 1030.724468][T10296] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.754978][T10296] CPU: 1 PID: 10296 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1030.763693][T10296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1030.773757][T10296] Call Trace: [ 1030.777082][T10296] dump_stack+0x11d/0x187 [ 1030.781584][T10296] should_fail.cold+0x5/0xf [ 1030.786123][T10296] __should_failslab+0x82/0xb0 [ 1030.790960][T10296] should_failslab+0x5/0xf [ 1030.795402][T10296] kmem_cache_alloc_trace+0x26/0x5f0 [ 1030.800716][T10296] ? delay_tsc+0x8a/0xb0 [ 1030.805064][T10296] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1030.810273][T10296] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1030.816188][T10296] sctp_add_bind_addr+0x90/0x2c0 [ 1030.821163][T10296] sctp_copy_local_addr_list+0x23d/0x290 [ 1030.826822][T10296] ? _crng_backtrack_protect+0xd1/0x100 [ 1030.832402][T10296] ? sctp_v6_is_any+0x3d/0x50 [ 1030.837168][T10296] sctp_copy_one_addr+0x65/0x150 [ 1030.842263][T10296] sctp_bind_addr_copy+0xb3/0x241 [ 1030.847337][T10296] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1030.853549][T10296] sctp_connect_new_asoc+0x10b/0x340 [ 1030.858853][T10296] __sctp_connect+0x282/0x680 [ 1030.863573][T10296] ? _copy_from_user+0x93/0xf0 [ 1030.868389][T10296] __sctp_setsockopt_connectx+0xe9/0x130 [ 1030.874057][T10296] sctp_setsockopt+0x154f/0x5150 [ 1030.879024][T10296] ? delay_tsc+0x8a/0xb0 [ 1030.883304][T10296] sock_common_setsockopt+0x5d/0x80 [ 1030.888528][T10296] __sys_setsockopt+0x1d6/0x380 [ 1030.893415][T10296] __x64_sys_setsockopt+0x6b/0x80 [ 1030.898575][T10296] do_syscall_64+0xc7/0x390 [ 1030.903112][T10296] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1030.909025][T10296] RIP: 0033:0x45c479 [ 1030.912993][T10296] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1030.932650][T10296] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1030.941074][T10296] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1030.949147][T10296] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1030.957250][T10296] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1030.965233][T10296] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 23:09:53 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a", 0x52c) sendfile(r1, r2, 0x0, 0x10000) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000180), &(0x7f0000000200)=0x4) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x52c) sendfile(r3, r4, 0x0, 0x10000) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f00000000c0)={0x1, [0x0]}) r5 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:09:54 executing program 0: setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1030.973254][T10296] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000029 23:09:54 executing program 1 (fault-call:5 fault-nth:42): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5415, &(0x7f0000000100)) 23:09:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xa30000, 0x2, 0x4, r0, 0x0, &(0x7f0000000000)={0x30372, 0x8, [], @value=0x7}}) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000008, 0x110, 0xffffffffffffffff, 0x82000000) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1031.269828][T10316] FAULT_INJECTION: forcing a failure. [ 1031.269828][T10316] name failslab, interval 1, probability 0, space 0, times 0 [ 1031.307230][T10316] CPU: 1 PID: 10316 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1031.315969][T10316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1031.326130][T10316] Call Trace: [ 1031.329460][T10316] dump_stack+0x11d/0x187 [ 1031.333818][T10316] should_fail.cold+0x5/0xf [ 1031.338424][T10316] __should_failslab+0x82/0xb0 [ 1031.343272][T10316] should_failslab+0x5/0xf [ 1031.347754][T10316] kmem_cache_alloc_trace+0x26/0x5f0 [ 1031.353155][T10316] ? delay_tsc+0x8a/0xb0 [ 1031.357432][T10316] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1031.362656][T10316] sctp_add_bind_addr+0x90/0x2c0 [ 1031.367698][T10316] sctp_copy_local_addr_list+0x23d/0x290 [ 1031.373392][T10316] ? _crng_backtrack_protect+0xd1/0x100 [ 1031.378993][T10316] ? sctp_v6_is_any+0x3d/0x50 [ 1031.383807][T10316] sctp_copy_one_addr+0x65/0x150 [ 1031.388818][T10316] sctp_bind_addr_copy+0xb3/0x241 [ 1031.393878][T10316] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1031.400107][T10316] sctp_connect_new_asoc+0x10b/0x340 [ 1031.405577][T10316] __sctp_connect+0x282/0x680 [ 1031.410283][T10316] ? _copy_from_user+0x93/0xf0 [ 1031.415194][T10316] __sctp_setsockopt_connectx+0xe9/0x130 [ 1031.420910][T10316] sctp_setsockopt+0x154f/0x5150 [ 1031.425888][T10316] sock_common_setsockopt+0x5d/0x80 [ 1031.431213][T10316] __sys_setsockopt+0x1d6/0x380 [ 1031.436176][T10316] __x64_sys_setsockopt+0x6b/0x80 [ 1031.441293][T10316] do_syscall_64+0xc7/0x390 [ 1031.445828][T10316] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1031.451732][T10316] RIP: 0033:0x45c479 [ 1031.455646][T10316] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1031.475258][T10316] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1031.483764][T10316] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1031.491861][T10316] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1031.499998][T10316] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1031.507983][T10316] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 23:09:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)={0x2, 'syz_tun\x00', {0x6}, 0x185}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:54 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000002c0)) r1 = open(&(0x7f0000000200)='./file0/../file0\x00', 0x6000, 0xa9) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x52c) sendfile(r3, r4, 0x0, 0x10000) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x3}}, 0x28) [ 1031.515966][T10316] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000002a 23:09:54 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x7, 0x400000) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000580), 0x12) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)=0x0) r4 = geteuid() r5 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0xc00000000, 0x4202) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r6, &(0x7f0000000580), 0x12) r7 = geteuid() r8 = getgid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x60001000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x4044) r9 = geteuid() r10 = getgid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x60001000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x4044) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x200000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}, {@dfltuid={'dfltuid', 0x3d, r4}}, {@dfltuid={'dfltuid', 0x3d, r7}}, {@debug={'debug', 0x3d, 0x100000001}}, {@access_uid={'access', 0x3d, r4}}], [{@uid_eq={'uid', 0x3d, r9}}, {@fsmagic={'fsmagic', 0x3d, 0x2d}}, {@pcr={'pcr', 0x3d, 0x28}}, {@subj_type={'subj_type', 0x3d, '\'ppp1posix_acl_access-ppp1^em1proc'}}, {@pcr={'pcr', 0x3d, 0x30}}]}}) r11 = getgid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x60001000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES32=r11, @ANYRES32=r4, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x4044) r12 = getuid() r13 = geteuid() r14 = getgid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x60001000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES32=r14, @ANYRES32=r13, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x4044) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1060048, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '^!\xa5@'}}, {@afid={'afid', 0x3d, 0x3}}, {@version_L='version=9p2000.L'}], [{@obj_type={'obj_type', 0x3d, 'eth0-'}}, {@dont_hash='dont_hash'}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, r3}}, {@euid_eq={'euid', 0x3d, r4}}, {@fowner_gt={'fowner>', r12}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'lo'}}, {@hash='hash'}, {@euid_lt={'euid<', r13}}]}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @mcast2}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:54 executing program 1 (fault-call:5 fault-nth:43): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:54 executing program 0: r0 = syz_open_dev$mouse(&(0x7f00000006c0)='/dev/input/mouse#\x00', 0x405, 0x220c2) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000002ae000000422f8e480000000000000000000000000000000001000016"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f00000001c0)=0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000040)=0x1) io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r4, &(0x7f0000000000)="59030502edb010f6000aa5c5164a3f435a37", 0xfdcd}]) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r6 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r6, 0x0, 0x0) r7 = open(&(0x7f0000000740)='./file0\x00', 0x88400, 0x10) preadv(r7, &(0x7f0000000940)=[{&(0x7f0000000780)=""/95, 0x5f}, {&(0x7f0000000800)=""/212, 0xd4}, {&(0x7f0000000900)=""/40, 0x28}], 0x3, 0xea2) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r8, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe]}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f00000009c0)={0x7fe, 0x0, 0x3, 0x3fa, 0x88000000, 0x1, 0x9, 0x2, r8}, &(0x7f0000000a00)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000140)={r8, 0x38bd}, 0xc) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x8800, 0x0) r10 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r11 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r10, &(0x7f0000001400)="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", 0x52c) sendfile(r10, r11, 0x0, 0x10000) r12 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f0000000480)={0x0, 0x3f}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000000500)={r13, 0x3}, &(0x7f0000000540)=0x8) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000000c14000827bd7000fcdbdf25081a03000000000008003d000500000008003d0000000000080003000300000008003d00050000000800030002000000"], 0x40}}, 0x15) 23:09:55 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x1ff) acct(0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) [ 1031.882778][T10337] FAULT_INJECTION: forcing a failure. [ 1031.882778][T10337] name failslab, interval 1, probability 0, space 0, times 0 [ 1031.944963][T10337] CPU: 0 PID: 10337 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1031.953688][T10337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1031.961487][T10340] skbuff: bad partial csum: csum=4342/10 headroom=64 headlen=3712 [ 1031.963744][T10337] Call Trace: [ 1031.963773][T10337] dump_stack+0x11d/0x187 [ 1031.963801][T10337] should_fail.cold+0x5/0xf [ 1031.983747][T10337] __should_failslab+0x82/0xb0 [ 1031.988535][T10337] should_failslab+0x5/0xf [ 1031.993087][T10337] kmem_cache_alloc_trace+0x26/0x5f0 [ 1031.998398][T10337] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1032.003748][T10337] sctp_add_bind_addr+0x90/0x2c0 [ 1032.008712][T10337] sctp_copy_local_addr_list+0x23d/0x290 [ 1032.014665][T10337] ? _crng_backtrack_protect+0xd1/0x100 [ 1032.020318][T10337] ? sctp_v6_is_any+0x3d/0x50 [ 1032.025090][T10337] sctp_copy_one_addr+0x65/0x150 [ 1032.030058][T10337] sctp_bind_addr_copy+0xb3/0x241 [ 1032.035190][T10337] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1032.041377][T10337] sctp_connect_new_asoc+0x10b/0x340 [ 1032.046802][T10337] __sctp_connect+0x282/0x680 [ 1032.051512][T10337] ? _copy_from_user+0x93/0xf0 [ 1032.056311][T10337] __sctp_setsockopt_connectx+0xe9/0x130 [ 1032.062009][T10337] sctp_setsockopt+0x154f/0x5150 [ 1032.067031][T10337] sock_common_setsockopt+0x5d/0x80 [ 1032.072333][T10337] __sys_setsockopt+0x1d6/0x380 [ 1032.077246][T10337] __x64_sys_setsockopt+0x6b/0x80 [ 1032.082298][T10337] do_syscall_64+0xc7/0x390 [ 1032.086837][T10337] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1032.092842][T10337] RIP: 0033:0x45c479 [ 1032.096755][T10337] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1032.116518][T10337] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1032.125017][T10337] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1032.133003][T10337] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1032.140993][T10337] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1032.149032][T10337] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1032.157011][T10337] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000002b 23:09:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5416, &(0x7f0000000100)) 23:09:55 executing program 1 (fault-call:5 fault-nth:44): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x1239c3) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:55 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r0, 0x0, 0x0) bind$rose(r0, &(0x7f0000000180)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @bcast}, 0x1c) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e20, @remote}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)='lo\x00', 0x20, 0x6, 0x1}) openat$cgroup_int(r1, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r3, &(0x7f0000000580), 0x12) writev(r3, &(0x7f0000000400), 0x0) [ 1032.531581][T10354] FAULT_INJECTION: forcing a failure. [ 1032.531581][T10354] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.564824][T10354] CPU: 0 PID: 10354 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1032.573544][T10354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1032.583601][T10354] Call Trace: [ 1032.586927][T10354] dump_stack+0x11d/0x187 [ 1032.591388][T10354] should_fail.cold+0x5/0xf [ 1032.596021][T10354] __should_failslab+0x82/0xb0 [ 1032.600923][T10354] should_failslab+0x5/0xf [ 1032.605363][T10354] kmem_cache_alloc_trace+0x26/0x5f0 [ 1032.610692][T10354] sctp_add_bind_addr+0x90/0x2c0 [ 1032.615788][T10354] sctp_copy_local_addr_list+0x23d/0x290 [ 1032.621503][T10354] ? _crng_backtrack_protect+0xd1/0x100 [ 1032.627082][T10354] ? sctp_v6_is_any+0x3d/0x50 [ 1032.631785][T10354] sctp_copy_one_addr+0x65/0x150 [ 1032.636753][T10354] sctp_bind_addr_copy+0xb3/0x241 [ 1032.641861][T10354] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1032.648065][T10354] sctp_connect_new_asoc+0x10b/0x340 [ 1032.653469][T10354] __sctp_connect+0x282/0x680 [ 1032.658178][T10354] ? _copy_from_user+0x93/0xf0 [ 1032.662981][T10354] __sctp_setsockopt_connectx+0xe9/0x130 [ 1032.668644][T10354] sctp_setsockopt+0x154f/0x5150 [ 1032.673748][T10354] sock_common_setsockopt+0x5d/0x80 [ 1032.679098][T10354] __sys_setsockopt+0x1d6/0x380 [ 1032.684024][T10354] __x64_sys_setsockopt+0x6b/0x80 [ 1032.689081][T10354] do_syscall_64+0xc7/0x390 [ 1032.693613][T10354] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1032.699518][T10354] RIP: 0033:0x45c479 [ 1032.703434][T10354] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1032.723070][T10354] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 23:09:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1032.731581][T10354] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1032.739566][T10354] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1032.747667][T10354] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1032.755657][T10354] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1032.763639][T10354] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000002c 23:09:55 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r1, 0x0, 0x0) bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @remote, 0x1}, 0x10) 23:09:56 executing program 1 (fault-call:5 fault-nth:45): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:56 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x4fa04, 0x0) r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x2040) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000180)={0x6fd7, 0x2036315a, 0x3, 0x1ff, 0x1, @stepwise={{0x5, 0x7}, {0x35, 0xa0f3}, {0xff, 0x200}}}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:09:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400800, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5418, &(0x7f0000000100)) 23:09:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="3f0e8a8200032ab97000ffdbdf25020000000900000073797a3200000000140002000000000000000000000000000000000005000400020000001400020073797a5f74756e0000000000000000000900030073797a320000000005000400020000000900010073797a3200000000050004000100000005000400"], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1033.337178][T10387] FAULT_INJECTION: forcing a failure. [ 1033.337178][T10387] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.396242][T10387] CPU: 1 PID: 10387 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1033.405063][T10387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1033.415122][T10387] Call Trace: [ 1033.418432][T10387] dump_stack+0x11d/0x187 [ 1033.422860][T10387] should_fail.cold+0x5/0xf [ 1033.427387][T10387] __should_failslab+0x82/0xb0 [ 1033.432171][T10387] should_failslab+0x5/0xf [ 1033.436610][T10387] kmem_cache_alloc_trace+0x26/0x5f0 [ 1033.441915][T10387] ? delay_tsc+0x8a/0xb0 [ 1033.446186][T10387] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1033.451406][T10387] sctp_add_bind_addr+0x90/0x2c0 [ 1033.456371][T10387] sctp_copy_local_addr_list+0x23d/0x290 [ 1033.462034][T10387] ? _crng_backtrack_protect+0xd1/0x100 [ 1033.467609][T10387] ? sctp_v6_is_any+0x3d/0x50 [ 1033.472389][T10387] sctp_copy_one_addr+0x65/0x150 [ 1033.477353][T10387] sctp_bind_addr_copy+0xb3/0x241 [ 1033.482442][T10387] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1033.488618][T10387] sctp_connect_new_asoc+0x10b/0x340 [ 1033.493924][T10387] __sctp_connect+0x282/0x680 [ 1033.498615][T10387] ? _copy_from_user+0x93/0xf0 [ 1033.503423][T10387] __sctp_setsockopt_connectx+0xe9/0x130 [ 1033.509085][T10387] sctp_setsockopt+0x154f/0x5150 [ 1033.514106][T10387] sock_common_setsockopt+0x5d/0x80 [ 1033.519417][T10387] __sys_setsockopt+0x1d6/0x380 [ 1033.524294][T10387] __x64_sys_setsockopt+0x6b/0x80 [ 1033.529368][T10387] do_syscall_64+0xc7/0x390 [ 1033.533891][T10387] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1033.539838][T10387] RIP: 0033:0x45c479 [ 1033.543779][T10387] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1033.563390][T10387] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1033.571841][T10387] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1033.579847][T10387] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1033.587833][T10387] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 23:09:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200000, 0x0) 23:09:56 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x2) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r1, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000180)={'icmp\x00'}, &(0x7f0000000200)=0x1e) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) [ 1033.595816][T10387] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1033.603799][T10387] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000002d 23:09:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) socket$xdp(0x2c, 0x3, 0x0) 23:09:56 executing program 1 (fault-call:5 fault-nth:46): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:57 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)={0x9, 0xc, 0x4, 0x1000000, 0x3, {0x77359400}, {0x5, 0x2, 0x5, 0x0, 0x5, 0xb6, "d00ff8f6"}, 0x7f, 0x1, @planes=&(0x7f00000000c0)={0x8, 0x1000, @fd, 0x3f}, 0x3, 0x0, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x1410, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0xa0c0, 0x0) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000180)={0x4004, 0x7, 0x20, 0x2}) 23:09:57 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = dup3(r1, r2, 0x0) ioctl$EVIOCGREP(r3, 0x40047452, &(0x7f0000d1df52)=""/174) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:57 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x40, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setscheduler(r1, 0x85511be1a1ef46d0, &(0x7f0000000340)=0x100) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000100)={0x1, 0x1, 0x1, 0x2, r1}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:57 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x10000, 0x0) write$9p(r0, &(0x7f0000000500)="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", 0x52c) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r4, &(0x7f0000000580), 0x12) r5 = syz_open_dev$rtc(&(0x7f0000000340)='/dev/rtc#\x00', 0x7, 0x680) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f00000003c0)={0x6, 'bridge_slave_0\x00', {0x6}, 0x1}) sendfile(r5, r3, 0x0, 0x401) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000200)='?vmnet0trusted\x00', 0xf) r7 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r8, 0xc01864ba, &(0x7f0000000180)={0x8, 0x2, 0x71, 0xbbbbbbbb}) writev(r7, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:09:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @rand_addr=0x46}], 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000580), 0x12) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0xfffffffffffffd1f) [ 1034.238319][T10425] FAULT_INJECTION: forcing a failure. [ 1034.238319][T10425] name failslab, interval 1, probability 0, space 0, times 0 23:09:57 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000580), 0x12) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r3, &(0x7f0000000580), 0x12) r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r6 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r7 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r6, &(0x7f0000001400)="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", 0x52c) sendfile(r6, r7, 0x0, 0x10000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564703a73797a310002000044000400200001000a00000000000000fe800000000000000000000000000000db000000200002000a00000000000000ff02000000000000000000000000000100000e9c646eebe987c3e6c30000"], 0x6c}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)={0x378, r5, 0x10, 0x70bd31, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf78b}, @TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x6}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1045}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd03}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x0, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x85f}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x5, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xfecd, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0x14}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x418d6d65}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3cf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x47}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe321}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_NAME={0x0, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc02}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x206}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdad6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x378}, 0x1, 0x0, 0x0, 0x20040801}, 0x1) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x5}) r10 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r11 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r10, &(0x7f0000001400)="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", 0x52c) r12 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r12, 0x40106614, &(0x7f00000001c0)) sendfile(r10, r11, 0x0, 0x10000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000000c0)={r9, r13, 0x80000000}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 1034.288644][T10425] CPU: 0 PID: 10425 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1034.297493][T10425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1034.307553][T10425] Call Trace: [ 1034.310911][T10425] dump_stack+0x11d/0x187 [ 1034.315305][T10425] should_fail.cold+0x5/0xf [ 1034.319872][T10425] __should_failslab+0x82/0xb0 [ 1034.324773][T10425] should_failslab+0x5/0xf [ 1034.329213][T10425] kmem_cache_alloc_trace+0x26/0x5f0 [ 1034.334531][T10425] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1034.339760][T10425] sctp_add_bind_addr+0x90/0x2c0 [ 1034.344826][T10425] sctp_copy_local_addr_list+0x23d/0x290 [ 1034.350480][T10425] ? _crng_backtrack_protect+0xd1/0x100 [ 1034.357360][T10425] ? sctp_v6_is_any+0x3d/0x50 [ 1034.362120][T10425] sctp_copy_one_addr+0x65/0x150 [ 1034.367162][T10425] sctp_bind_addr_copy+0xb3/0x241 [ 1034.367192][T10425] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1034.378457][T10425] sctp_connect_new_asoc+0x10b/0x340 [ 1034.383854][T10425] __sctp_connect+0x282/0x680 [ 1034.388561][T10425] ? _copy_from_user+0x93/0xf0 [ 1034.393407][T10425] __sctp_setsockopt_connectx+0xe9/0x130 [ 1034.399089][T10425] sctp_setsockopt+0x154f/0x5150 [ 1034.404075][T10425] sock_common_setsockopt+0x5d/0x80 [ 1034.409294][T10425] __sys_setsockopt+0x1d6/0x380 [ 1034.414178][T10425] __x64_sys_setsockopt+0x6b/0x80 [ 1034.419224][T10425] do_syscall_64+0xc7/0x390 [ 1034.423770][T10425] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1034.429669][T10425] RIP: 0033:0x45c479 [ 1034.433577][T10425] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1034.453183][T10425] RSP: 002b:00007ff111a57c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1034.461602][T10425] RAX: ffffffffffffffda RBX: 00007ff111a586d4 RCX: 000000000045c479 [ 1034.469577][T10425] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000003 [ 1034.477615][T10425] RBP: 000000000076bfc0 R08: 000000000000001c R09: 0000000000000000 23:09:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x541b, &(0x7f0000000100)) 23:09:57 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) inotify_add_watch(r2, &(0x7f00000019c0)='./file0\x00', 0xa0) fchdir(r2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) process_vm_writev(r3, &(0x7f0000001680)=[{&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/231, 0xe7}, {&(0x7f0000001280)=""/227, 0xe3}, {&(0x7f0000001380)=""/112, 0x70}, {&(0x7f0000001400)=""/215, 0xd7}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000001500)=""/250, 0xfa}, {&(0x7f0000001600)=""/111, 0x6f}], 0x9, &(0x7f0000001ac0)=[{&(0x7f0000001740)=""/175, 0xaf}, {&(0x7f0000001800)=""/20, 0x14}, {&(0x7f0000001840)=""/192, 0xc0}, {&(0x7f0000001900)=""/142, 0x8e}, {&(0x7f00000019c0)}, {&(0x7f0000001a00)=""/143, 0x8f}], 0x6, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:09:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0xc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:57 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) accept(r0, 0x0, &(0x7f0000000180)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000580), 0x12) openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) [ 1034.485590][T10425] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000004 [ 1034.493668][T10425] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000002e 23:09:57 executing program 1 (fault-call:5 fault-nth:47): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:57 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000580), 0x12) name_to_handle_at(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xf9, 0x7, "1353eecea188d39bbfce6764aee42129df1f977178afc198b8e63911cfe666eb6163f7d3dd6e35c8167f249bc82a8804e610dec22be2489faf5d87f491b4e449e0e42317e137e51bc2510cafe77644213256db62f5a69344219e418dcfbf409428bb0a12e00d77f18abad45920a808c04ed45a5a6595a97d7eb43720b2314e58e6d1fa26187ab4e692f89a706b1e5201878885a43348743f7b4b7313153ac7e82f4e83408f500198515cae794456aa65b619e34753bdadc642501f7230b425fda3ac7d8628ecd087e32fa3b9b8ddbab7f3571667ca979b2881cc72de33bb755a6c37b22e4ce3055c0ca0469a143be55daf"}, &(0x7f0000000180), 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:09:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000580), 0x12) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) r2 = geteuid() r3 = getgid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x60001000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x4044) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffff8000, 0x5, &(0x7f0000000500)=[{&(0x7f0000000200)="594af7e0f190d50866477c639d08939c61be676dcbab4038fc870c5e050f8faad58fbd961a1c15b2132bb50697033b5f27299bb117183ef9d3ec01ef674e21d00771489f2bffd17f5d0b6cdec3a397246ab395397f693f3bbf86502affcda77fb1eacc6bfb168123fbaee2a162f37a6ad8c5a61082575555eba5969879e2", 0x7e, 0x1ff}, {&(0x7f0000000280)="2ea6ee5f0397dc3b439b46c5c88ac66f456259d73d61d17fb4f12e871eb91fd94ee294995b88f04f3ac97342bc226fedd9e179d59db57b01d98ae6abfa346118ccf2a2268487c73a0f0fd83f41c4125289ede61f0177a40fb0ca3270771c592e6d5f8bf7d615fa7d3bc836e1709eb7fc6fd7775ca3068ee9039907b210b69547e956c68d002ca464d8c90fedb0c9f374ba1de85a6e6f648e0b204c597332200f24830941b09df178265829d5570674c03e1ab925f8d5ea79c50d39853a5038ec668b29d9ee7d4af7439c4c02311c0f716411ae", 0xd3, 0x85f}, {&(0x7f0000000380)="538e327669a0cf7b1a55a87548a3030369e8", 0x12, 0x1}, {&(0x7f00000003c0)="fc75294a", 0x4, 0x4}, {&(0x7f0000000400)="9026a7cacf6bfbb6561b619464a6f7f0db3673ae0eaf52b24d9fd1bb4d7865d214261157e89203e7862b63aed313b126276deb1e9d71994062f3bfbd2397d244299cc925a273d2ca696f5f17c5a46999809bd75e860ab53081425cffbda02788f8a4b92a43e0a85d41e7ff587bced3499d0ae9e4eb7ba4e360c7dc205f5fcec626aa35d2bf8859cda83350c691499bfb5066f31e91b5d2b63be34e2df5d6017edd8e942e6b813c44d5c50a8ad63ccdf88d92a90eb5c4d0ce197e21dbe512baf3d10e0bde70c262f2699ca9", 0xcb, 0x1}], 0x400, &(0x7f00000005c0)={[{@session={'session'}}], [{@uid_gt={'uid>', r2}}, {@obj_user={'obj_user'}}]}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0xe8c, @empty, 0x3}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x7d, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e20, @broadcast}], 0x68) r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r6, &(0x7f0000000580), 0x12) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, &(0x7f0000000640)) write$9p(r4, &(0x7f0000001400)="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", 0x52c) sendfile(r4, r5, 0x0, 0x10000) finit_module(r4, &(0x7f0000000600)='\x00', 0x1) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1034.789345][T10458] FAULT_INJECTION: forcing a failure. [ 1034.789345][T10458] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.808913][T10458] CPU: 0 PID: 10458 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1034.817625][T10458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1034.827684][T10458] Call Trace: [ 1034.831031][T10458] dump_stack+0x11d/0x187 [ 1034.835469][T10458] should_fail.cold+0x5/0xf [ 1034.840002][T10458] __should_failslab+0x82/0xb0 [ 1034.844799][T10458] should_failslab+0x5/0xf [ 1034.849216][T10458] kmem_cache_alloc_trace+0x26/0x5f0 [ 1034.854517][T10458] ? delay_tsc+0x8a/0xb0 [ 1034.858778][T10458] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1034.864004][T10458] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1034.869921][T10458] sctp_add_bind_addr+0x90/0x2c0 [ 1034.874989][T10458] sctp_copy_local_addr_list+0x23d/0x290 [ 1034.880627][T10458] ? _crng_backtrack_protect+0xd1/0x100 [ 1034.886201][T10458] ? sctp_v6_is_any+0x3d/0x50 [ 1034.891082][T10458] sctp_copy_one_addr+0x65/0x150 [ 1034.896139][T10458] sctp_bind_addr_copy+0xb3/0x241 [ 1034.901188][T10458] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1034.907366][T10458] sctp_connect_new_asoc+0x10b/0x340 [ 1034.912669][T10458] __sctp_connect+0x282/0x680 [ 1034.917381][T10458] ? _copy_from_user+0x93/0xf0 [ 1034.922179][T10458] __sctp_setsockopt_connectx+0xe9/0x130 [ 1034.927832][T10458] sctp_setsockopt+0x154f/0x5150 [ 1034.932814][T10458] sock_common_setsockopt+0x5d/0x80 [ 1034.938034][T10458] __sys_setsockopt+0x1d6/0x380 [ 1034.942900][T10458] __x64_sys_setsockopt+0x6b/0x80 [ 1034.948042][T10458] do_syscall_64+0xc7/0x390 [ 1034.952570][T10458] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1034.958456][T10458] RIP: 0033:0x45c479 [ 1034.962355][T10458] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1034.981994][T10458] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1034.990568][T10458] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1034.998554][T10458] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1035.006632][T10458] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1035.014617][T10458] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1035.022594][T10458] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000002f [ 1035.038622][ T26] audit: type=1804 audit(1583190597.879:3984): pid=10465 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir309363322/syzkaller.l56wwm/1231/file0" dev="sda1" ino=16983 res=1 [ 1035.056089][T10463] hfsplus: unable to parse mount options [ 1035.146889][T10465] hfsplus: unable to parse mount options 23:09:58 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x400, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x348840, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:09:58 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000a40)=0x2300000, 0x4) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x200000) sendmsg$kcm(r2, &(0x7f0000000a00)={&(0x7f0000000200)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default]}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000180)="4bf3ca90d79cc4885ce939ff4fcd888aa09f00408fc8b369b0b19f1875f1106c25", 0x21}, {&(0x7f00000002c0)="9111698387deb572f293b81f0b920b4e99bd66a3f1f68107e03fa5809a6f264a16b99f4f0ad71c34a7a0dec1edc59457c082c0cb22d6556ddac22f303b81d025987f87149e58b0a859f07055f64483225f24e2bb91edae52e650204c90dafcae4c280bb9122592350c09f375a0543fcaefd41c1b911570ededc36e6a1021374a0a48632a7a347dcd8b8c7c6d7893fce604ef6a8d3b462058a037464b960b3e8164e7918b6743f08b65faae50f4e6758ae5cd8a5d34398e338cc6ababd44bc78e6b21043618658a401816be7de4c9216e420f0096c7ee58f9b09a56f25b4f9ae9500b3072ef845def524288dc0895fcbc5c308c9f1d52539b", 0xf8}, {&(0x7f00000003c0)="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", 0xff}, {&(0x7f0000000500)="221f9b105cd294e8d6016f653a2efa235ccd983d88df13deddd68ab5d1fb3262c598a9fa175813a83502be27fcbe37d46f244ded8e20042359ac12ee40c5e69737da61bed8ab552425e7309c9ed4f5c7a0790a0d991326680bd78b592720141b4912ee1b71b29ea62ebe98df86d76f24530591c63b99b3dfa2b00417f844b2f825f844154874edbaac174796276bafa09703bb33e7dc954e588a863b7938dd7790cab408c7bd3c457adc18232317b306a9ca9cf7c2609a07478e24b208fcc9d4b9f342ab4fe93c7ca058599d8fe68bcbaee877", 0xd3}, {&(0x7f0000000600)="43347467456f04af58de6bc587596eb18895722a2dcc102ddfa920eccc333c67ef50820472c5c4f2244721df9ba727a7de2f0a5df305b352b4b748ad05689aba06ce770a8d3511e60245eaea39b941bff778681eefa1744fdffb8434dab8faad2001002eb2597eee19876e5975591d0010888148fe55", 0x76}, {&(0x7f0000000680)="7b93f336924a78c8a878c1045f9c4fe58ff352c7b5bd366529c1349e29bf008ec1f7c916340a3852b9cd2b4bc99e9db870e9af01aab0d993d12641a8a9b29cb0fc81470c660e8360d59a7b2c91eb4f0be81bdcea65a99d475464c0a1392a84a7f7d49ad2e31f8f3588ebc7aad087b5606affb19f92b9ab81432b1fe1e8ca91fb7602159c678e31791f1d96a003606aea37c65e0f88c060795fdfedb14d12fb70fcfaf40530f85b7abc54a5ddef8ad35287e7f3cc713c56002b8ee5ed22febeaf693da522cbd17eb4017c9ff964f0", 0xce}, {&(0x7f0000000780)="3ec179611ab9bd812523a0d37dcf1a7ec2fbf6c0c7a2b4551aa8b2ae078a73e5c3c806b46d050fccd48eac59e7bad177bd2eee91d0091be3168b4d011548f1f09b2e039365df609fa9e7273f8e9672425d8c8f5095d01443004cea7024f163545aa0c32d8d1de188bb8b524887d6712795369c8fcbb4fced7d3830e96e9933e7d6e305e51264a886bcca18ca66e016ab6126ea8378d006522bef19c9593f9ff009c2b64395be36644684a730a7f7dab46f9078da2b6c8b23f42f37d92c7d89216f462ae4db7beb2537652cc76e0f0a813b82", 0xd2}], 0x7, &(0x7f0000000900)=[{0x80, 0x26, 0x101, "c901073dd9fb5283eb8ed2d65d48b9b297f51ec792685c805071b40efa5559d53c884b7cf66fbbb60f62d85ded32e86a92a583d5ad8544495565715037277f4875c3dce63393d290fb421c5c5692d14653714c0b02f35658d51538ae39254109900054c9ff399ea0979e4d6c"}, {0x70, 0x111, 0x4, "2d9746d00f8d487d62f0ed5ec004ece7883559bedbad1fe2b76ee4d136a15de0800a90b990db3d7d367c8da7073c14c6db0d75505dda0c2047c12ab51a4c700afe29dba7badefac887ca19d8c9e80097ba20f7c07ce878038f924d45cd"}], 0xf0}, 0x40410) 23:09:58 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x80000000, 0x3}, 0xc) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a", 0x52c) sendfile(r2, r3, 0x0, 0x10000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xfffb, 0x30, 0xc170, 0xe94f}, &(0x7f00000000c0)=0x18) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:09:58 executing program 1 (fault-call:5 fault-nth:48): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r2, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe]}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000009c0)={0x800, 0x0, 0x3, 0x400, 0x80000000, 0x1, 0xa1cc, 0x6, r2}, &(0x7f0000000a00)=0x20) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r2, 0x7, 0x0, 0x5, 0xffff0001, 0x4}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r3, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1035.340989][T10483] FAULT_INJECTION: forcing a failure. [ 1035.340989][T10483] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.390789][T10483] CPU: 1 PID: 10483 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1035.399519][T10483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1035.409573][T10483] Call Trace: [ 1035.412884][T10483] dump_stack+0x11d/0x187 [ 1035.417251][T10483] should_fail.cold+0x5/0xf [ 1035.421842][T10483] __should_failslab+0x82/0xb0 [ 1035.426639][T10483] should_failslab+0x5/0xf [ 1035.431084][T10483] kmem_cache_alloc_trace+0x26/0x5f0 [ 1035.436412][T10483] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1035.441629][T10483] sctp_add_bind_addr+0x90/0x2c0 [ 1035.446588][T10483] sctp_copy_local_addr_list+0x23d/0x290 [ 1035.452235][T10483] ? _crng_backtrack_protect+0xd1/0x100 [ 1035.457821][T10483] ? sctp_v6_is_any+0x3d/0x50 [ 1035.462533][T10483] sctp_copy_one_addr+0x65/0x150 [ 1035.467531][T10483] sctp_bind_addr_copy+0xb3/0x241 [ 1035.472732][T10483] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1035.478906][T10483] sctp_connect_new_asoc+0x10b/0x340 [ 1035.484318][T10483] __sctp_connect+0x282/0x680 [ 1035.489012][T10483] ? _copy_from_user+0x93/0xf0 [ 1035.493817][T10483] __sctp_setsockopt_connectx+0xe9/0x130 [ 1035.499542][T10483] sctp_setsockopt+0x154f/0x5150 [ 1035.504524][T10483] sock_common_setsockopt+0x5d/0x80 [ 1035.509752][T10483] __sys_setsockopt+0x1d6/0x380 [ 1035.514681][T10483] __x64_sys_setsockopt+0x6b/0x80 [ 1035.519734][T10483] do_syscall_64+0xc7/0x390 [ 1035.524251][T10483] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1035.530140][T10483] RIP: 0033:0x45c479 [ 1035.534044][T10483] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1035.553749][T10483] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1035.562174][T10483] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1035.570153][T10483] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1035.578126][T10483] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1035.586101][T10483] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1035.594223][T10483] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000030 23:09:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x541d, &(0x7f0000000100)) 23:09:58 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0xc8) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:09:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x6, 0x230802) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:58 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000240)='#\'%no\x93\xceNz\n\xd2\xca\xc22\xbd\b\xa4\x15\xf8\xde\xfe\xd2\x01\x00\x00\x00\x00\x00\x00\x00A\xfe\x11\xa8\xb3\\\xf4\x8b[y{\xf8+w\xf9m\x17\xaf\xa6$\xb1\x14\xfe9\xda#\x90\x05\xf8\x175\xaf\xaf\x14T\x92\x1ev\xf6\xca\xf3N\xf6\xd7@|l\x96\xaf4\xb5\x88\xb1\xb5V\xa4:\xee9\xc5\x06\xf7\xd6\x19_\xd1\\A\x150\x96\xe2\xc6\x87Z\xc3\xcbs\xe8y\xdd\x8d\x9a\xc8\x95X\xf67~\xb3H\xcc6\x98\x96\xd0\x12\xf9<\x9fw\xca\xb6\xd9\x17y\xc8\x8e\x0eT\x16Tb\xc5C\x05gq\x98\xb1j\xd7\xf5\x00\b\x90\x18D\x86\xd9>|\x1c\xbb\xece8\x89w\xd5F;\x86\x05\xf5\xa3#?}WH\xb6t\xa7\x8e\x80\xb5l 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1036.094771][T10515] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1036.103195][T10515] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1036.111206][T10515] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1036.119335][T10515] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1036.127318][T10515] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1036.135300][T10515] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000031 23:09:59 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x17a24, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000580), 0x12) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000580), 0x12) recvmsg$can_j1939(r2, &(0x7f00000007c0)={&(0x7f00000005c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/4, 0x4}, {&(0x7f0000000640)=""/191, 0xbf}, {&(0x7f0000000700)=""/55, 0x37}], 0x3, &(0x7f0000000780)}, 0x12020) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000800)={'vxcan1\x00', r3}) r4 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x200400, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) recvmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000200)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, &(0x7f0000000500)=""/163, 0xa3}, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:09:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r1, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe]}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000009c0)={0x800, 0x0, 0x3, 0x400, 0x80000000, 0x1, 0xa1cc, 0x6, r1}, &(0x7f0000000a00)=0x20) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/full\x00', 0x20000, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a", 0x52c) sendfile(r3, r4, 0x0, 0x10000) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r5, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe]}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000009c0)={0x800, 0x0, 0x3, 0x400, 0x80000000, 0x1, 0xa1cc, 0x6, r5}, &(0x7f0000000a00)=0x20) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000bc0)={r5, 0x750}, &(0x7f0000000c00)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={r6, 0x61}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:59 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r3, 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) fchdir(r2) ioctl$CAPI_CLR_FLAGS(r2, 0x80044325, &(0x7f0000000040)=0x1) r5 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0x200) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r7, &(0x7f0000000580), 0x12) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x7}) r8 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r8, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000180)={r9, 0x21, 0x5, 0x5}, &(0x7f00000001c0)=0x10) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) ioctl$UFFDIO_UNREGISTER(r10, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f00003f1000/0xf000)=nil, 0xf000}) 23:09:59 executing program 1 (fault-call:5 fault-nth:50): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:09:59 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x0, @mcast1}], 0x1c) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000580), 0x12) geteuid() getgid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x240448c4) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x1ff, 0x8, &(0x7f0000000a80)=[{&(0x7f0000000200)="bbbbd12cae274f9c2d686a9364bd8f96c32d1d348fad7dd10f14821d7e9bd66e8de8bf9f387fe1cd01931874fede5276598dc4e182d06c21010848574bc97d8ed00d87f3349538e29bcc07feb4237c95bd25fa85f0ab3613853f3b8571acb3910b4dc8f326295f4e920cc83aa89dabd6482bb0c1ca5a8646201345889a8c80d06a9a5e2a3f38305b908c3ef064e9ef1a3c60b57bbfc7230998f9025618e22864c42cb4e2206ec0683d656eed1235537f1c0a7cf864814718a998986db52f035bdf7e4b2018cdae99c38ff99cf6dce30b07f3092b933f0de95b85a97e1273682474b70caec42e1e8a252635caec676de952700110dd6b04d9", 0xf8}, {&(0x7f00000003c0)="af6c2ef776522f1a37d985b2d6b35e44a9640b77c2b0822ffa2c344b682d0efc76b366321ea53977ef6c9ddc780331a3a67064ef6976a4cf52f4adf01b0f2cf514cd48bca7feb23fe27c42a8cc1b37fcf21bc6136ade76d7bf2495034f49365095a8ac2dd9fcc0eafe3ddea04e4281cc59690f7cd56bc1c65fee1b1dbf1793409f059518ee4f30342d214b47f4634a430fc464a2a85a64173ed3b6abe1c9d0c35dd2", 0xa2}, {&(0x7f0000000140), 0x0, 0x1}, {&(0x7f0000000480)="f9237bacdc64cc621faf24de73e00dbd1354a2eadd44a7800bc48aca97b4b79bd02b0a782daa5ce09260627fcec803f917f65515cf6cc3b21634f78cd964b8a091788fad03215e9d4cfc7f052730595ff7e239e4884bcea1b2c036f0e119e3b23143e29a402c08575ae5dbcc91223c263653dced59fea2ca23249b271c0f98cf96d8e50f36c69b3df7e49b2cde3218", 0x8f, 0x2}, {&(0x7f0000000300)="0931e6f374e59bc8defc661323b8b7113e9142b1a806a930b7adecf3c1922e1305288f28670cd8cd14c2c6e0bc877991f913c0fc1eea18ef594128aeb4554d8fc8f206901b9d6a099a2cca769bbfbb5135356aa293bde1d8131c4c57d73d9347b20bdbb55f0446658182cd84cb2d3d5240ef273e0f3fe3ad9c3158ed4aa5", 0x7e, 0x9}, {&(0x7f0000001940)="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", 0x1000, 0x1}, {&(0x7f0000000900)="5f49e81eec3f6e5fcdcd50a4f93353ad4c8e95be1f003e95e49ad306abf713011bbff02b9fd64fb567fb62393889995e1d9bd449e8e97f40dd3667ee6b972e2efa0c359bbdad9e7f7488e7a3c2a63ef996d8252be517", 0x56, 0x4000006}, {&(0x7f0000000980)="42292631245ad52b505fbfa17897ac27a705e45a2392e57ee9ffda550a74d5bf220a80379275b228d174507c7c28fbc08f05980917de222a65957167efe5951cf0105a154cb9cb87e3d77d14f7f98e53bb95cea7d5d6c0bcc7d67b4d862ff261bd28f17265d8bb7b4dbaf63b8027d3a2ce30645e5d52fceff2955cdcb330787b6729aa4df1fa88ec8fd94d00f2469eeaaf5b2c96cf3b0ec2e91123be68e41596d0063a22a870a8639384e6c6ee5a93e951571f3b606bd531b3fff06271eb40cda216d882", 0xc4, 0x46b6}], 0x2191801, &(0x7f0000000840)=ANY=[@ANYBLOB='utf8=0,shormname=win95,uni_xlate=0,shortname=win95,uni_xlate=0,uni_xlate=1,nonumtail=0,iocharset=macroman,nnonumtail=1,shortname=win95,\x00']) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x2001, 0x12000}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x52c) sendfile(r2, r3, 0x0, 0x10000) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x0, 0xfffd}, 0x8) [ 1036.356478][ T26] audit: type=1804 audit(1583190599.429:3985): pid=10533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir309363322/syzkaller.l56wwm/1235/file0" dev="sda1" ino=16865 res=1 [ 1036.428127][T10543] FAULT_INJECTION: forcing a failure. [ 1036.428127][T10543] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.450351][T10543] CPU: 1 PID: 10543 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1036.459068][T10543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1036.469128][T10543] Call Trace: [ 1036.472514][T10543] dump_stack+0x11d/0x187 [ 1036.476873][T10543] should_fail.cold+0x5/0xf [ 1036.481442][T10543] __should_failslab+0x82/0xb0 [ 1036.486215][T10543] should_failslab+0x5/0xf [ 1036.490647][T10543] kmem_cache_alloc_trace+0x26/0x5f0 [ 1036.495951][T10543] ? delay_tsc+0x8a/0xb0 [ 1036.500214][T10543] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1036.505525][T10543] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1036.511435][T10543] sctp_add_bind_addr+0x90/0x2c0 [ 1036.516391][T10543] sctp_copy_local_addr_list+0x23d/0x290 [ 1036.522038][T10543] ? _crng_backtrack_protect+0xd1/0x100 [ 1036.527604][T10543] ? sctp_v6_is_any+0x3d/0x50 [ 1036.532318][T10543] sctp_copy_one_addr+0x65/0x150 [ 1036.537288][T10543] sctp_bind_addr_copy+0xb3/0x241 [ 1036.542345][T10543] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1036.548562][T10543] sctp_connect_new_asoc+0x10b/0x340 [ 1036.553864][T10543] __sctp_connect+0x282/0x680 [ 1036.558549][T10543] ? _copy_from_user+0x93/0xf0 [ 1036.563364][T10543] __sctp_setsockopt_connectx+0xe9/0x130 [ 1036.568997][T10543] sctp_setsockopt+0x154f/0x5150 [ 1036.574000][T10543] sock_common_setsockopt+0x5d/0x80 [ 1036.579408][T10543] __sys_setsockopt+0x1d6/0x380 [ 1036.584289][T10543] __x64_sys_setsockopt+0x6b/0x80 [ 1036.589370][T10543] do_syscall_64+0xc7/0x390 [ 1036.593894][T10543] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1036.599792][T10543] RIP: 0033:0x45c479 [ 1036.603719][T10543] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1036.623334][T10543] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1036.631855][T10543] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1036.639857][T10543] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1036.647949][T10543] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1036.655923][T10543] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1036.663951][T10543] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000032 23:09:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x541e, &(0x7f0000000100)) 23:09:59 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, 0x1000, 0x1}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:09:59 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)="337cceb71e7ad1d815b610e13a7e317e69c6b038da571da3b838b83fb99060d0d67a3d73ca52eeac2978e9f482560f6a9ac3a2ef47878cb2688d426ad0442dd46242dcbcf5263cd0499e4aa8fa9ecdd9d82e8442a60f2c40c473438d9c368707c5f8c3e34f456030906f51fddefae84e7cd04ac419733e88703f45ebbfa725abec5e1e9a9bf151e853d38ea5e45765dcecfc5c637724f247fbc9a2fc5b43627d599dff9d0f28d5446b32352a10e302c07c46002aef3278be6de28bee1f1eda1f685223b3feaa194def287dc60f55fd9617455feb03852b2c30de585195b2a2495b188cda5eabb16075134b07a1faa8f9183eb23d683618b04d337ef86b271b6453c7aef70897e7bbf4d31324d40078fb8388e19fbb03", 0x116}, {&(0x7f00000000c0)="1e4cb06578d41bdc08", 0x9}], 0x2) pread64(r1, &(0x7f0000000140)=""/168, 0xa8, 0x1) 23:09:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r1, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x52c) sendfile(r3, r4, 0x0, 0x10000) r5 = mq_open(&(0x7f0000000100)='/dev/audio#\x00', 0x800, 0x44, &(0x7f0000000140)={0x5, 0x6d81, 0x7, 0xfff}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x80000, 0x0) r7 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x2) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r8, &(0x7f0000000580), 0x12) r9 = socket(0x21, 0x5, 0x40) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000002c0)={0xffffffff, &(0x7f0000000280)=[r3, r5, r0, r6, r7, r8, r9]}, 0x7) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000000)={0x2, 0x5}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:09:59 executing program 1 (fault-call:5 fault-nth:51): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 1036.816089][ T26] audit: type=1804 audit(1583190599.889:3986): pid=10559 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir309363322/syzkaller.l56wwm/1236/file0" dev="sda1" ino=16849 res=1 23:09:59 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) write(r2, &(0x7f0000000140)="070005529daefe9ebb914432a8efe1e97c0d06f60f9318e430bc937de9c0a06651d10f3332a81f55ca8b0695cc45014e9e6751330565276e81f3f1725ac405ffd00dbd68ce40210bfaa2f73815283d47a84c1de47ceb79f916fbb22b723c9a5ac313ec0ef7e44be43391700b2bbe7ff2aa8401485c0b7423468582235be14c2d15aac355e80e31f2db04e38828e5e0b03a656611b6000000000000000000d5b2898eb344e7c579c968362ae62c76fedcc7fac43c936574491d07134cc0ec8d5d0a30fd432f63736993c0c346aedefd87f482ca", 0xcc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:10:00 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000580), 0x12) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) 23:10:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ftruncate(0xffffffffffffffff, 0x857a) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xf02, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0xea}, 0x8) [ 1036.936841][T10568] FAULT_INJECTION: forcing a failure. [ 1036.936841][T10568] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.016101][T10568] CPU: 0 PID: 10568 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1037.024813][T10568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1037.034865][T10568] Call Trace: [ 1037.038168][T10568] dump_stack+0x11d/0x187 [ 1037.042506][T10568] should_fail.cold+0x5/0xf [ 1037.047109][T10568] __should_failslab+0x82/0xb0 [ 1037.051928][T10568] should_failslab+0x5/0xf [ 1037.056379][T10568] kmem_cache_alloc_trace+0x26/0x5f0 [ 1037.061670][T10568] ? delay_tsc+0x8a/0xb0 [ 1037.065933][T10568] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1037.071139][T10568] sctp_add_bind_addr+0x90/0x2c0 [ 1037.076083][T10568] sctp_copy_local_addr_list+0x23d/0x290 [ 1037.081724][T10568] ? _crng_backtrack_protect+0xd1/0x100 [ 1037.087341][T10568] ? sctp_v6_is_any+0x3d/0x50 [ 1037.092030][T10568] sctp_copy_one_addr+0x65/0x150 [ 1037.096976][T10568] sctp_bind_addr_copy+0xb3/0x241 [ 1037.102015][T10568] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1037.108229][T10568] sctp_connect_new_asoc+0x10b/0x340 [ 1037.113549][T10568] __sctp_connect+0x282/0x680 [ 1037.118363][T10568] ? _copy_from_user+0x93/0xf0 [ 1037.123171][T10568] __sctp_setsockopt_connectx+0xe9/0x130 [ 1037.128814][T10568] sctp_setsockopt+0x154f/0x5150 [ 1037.133768][T10568] sock_common_setsockopt+0x5d/0x80 [ 1037.138977][T10568] __sys_setsockopt+0x1d6/0x380 [ 1037.143870][T10568] __x64_sys_setsockopt+0x6b/0x80 [ 1037.148959][T10568] do_syscall_64+0xc7/0x390 [ 1037.153492][T10568] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1037.159381][T10568] RIP: 0033:0x45c479 [ 1037.163304][T10568] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1037.183224][T10568] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1037.191643][T10568] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1037.199613][T10568] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1037.207638][T10568] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1037.215607][T10568] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1037.223574][T10568] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000033 23:10:00 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000580), 0x12) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x2, 0x1, [0x1b5]}, &(0x7f00000000c0)=0xa) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000580), 0x12) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x52c) sendfile(r3, r4, 0x0, 0x10000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={r5, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000000200)={0x0, "2409e4db8a7dca044448cc4430dba51d50d914c6ad8bfd7a2d98c443251ead43"}) 23:10:00 executing program 1 (fault-call:5 fault-nth:52): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:00 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000180)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x8000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000580), 0x12) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4) [ 1037.476723][T10589] FAULT_INJECTION: forcing a failure. [ 1037.476723][T10589] name failslab, interval 1, probability 0, space 0, times 0 23:10:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r1, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe]}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000009c0)={0x800, 0x0, 0x3, 0x400, 0x80000000, 0x1, 0xa1cc, 0x6, r1}, &(0x7f0000000a00)=0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r1, 0x95, "79e77b401dcc599edcb98ce2a607498b73a49ed8ef408132c849da7c0d855c1aeca6fa5dc6023281c812c88821f5fdade58f82fb7839de95cc918050613ee8cf694039953db0b6b7a07e9ca41a80dd7fbbc3ce8e493943de6c263a3d24109c2c238f36b6cd27b03729bca3f68c0ebe26b91922d59a0bc2258e624804c4d9e9a15bf3a0eb7be88f33013ec84a9dff382f2b2a645bbe"}, &(0x7f0000000000)=0x9d) [ 1037.505332][ T26] audit: type=1804 audit(1583190600.579:3987): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir167061834/syzkaller.2p5nEZ/1065/file0" dev="sda1" ino=16516 res=1 [ 1037.642267][T10589] CPU: 1 PID: 10589 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1037.650998][T10589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1037.661057][T10589] Call Trace: [ 1037.664369][T10589] dump_stack+0x11d/0x187 [ 1037.668753][T10589] should_fail.cold+0x5/0xf [ 1037.673330][T10589] __should_failslab+0x82/0xb0 [ 1037.678106][T10589] should_failslab+0x5/0xf [ 1037.682539][T10589] kmem_cache_alloc_trace+0x26/0x5f0 [ 1037.687868][T10589] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1037.693201][T10589] sctp_add_bind_addr+0x90/0x2c0 [ 1037.698165][T10589] sctp_copy_local_addr_list+0x23d/0x290 [ 1037.703856][T10589] ? _crng_backtrack_protect+0xd1/0x100 [ 1037.709419][T10589] ? sctp_v6_is_any+0x3d/0x50 [ 1037.714134][T10589] sctp_copy_one_addr+0x65/0x150 [ 1037.719166][T10589] sctp_bind_addr_copy+0xb3/0x241 [ 1037.724217][T10589] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1037.730440][T10589] sctp_connect_new_asoc+0x10b/0x340 [ 1037.735837][T10589] __sctp_connect+0x282/0x680 [ 1037.740650][T10589] ? _copy_from_user+0x93/0xf0 [ 1037.745438][T10589] __sctp_setsockopt_connectx+0xe9/0x130 [ 1037.751084][T10589] sctp_setsockopt+0x154f/0x5150 [ 1037.756028][T10589] sock_common_setsockopt+0x5d/0x80 [ 1037.761261][T10589] __sys_setsockopt+0x1d6/0x380 [ 1037.766196][T10589] __x64_sys_setsockopt+0x6b/0x80 [ 1037.771320][T10589] do_syscall_64+0xc7/0x390 [ 1037.775890][T10589] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1037.781791][T10589] RIP: 0033:0x45c479 [ 1037.785692][T10589] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1037.805390][T10589] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1037.813805][T10589] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1037.821863][T10589] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1037.829912][T10589] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1037.837892][T10589] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1037.845952][T10589] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000034 23:10:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x541e, &(0x7f0000000100)) 23:10:01 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mq_unlink(&(0x7f00000002c0)='cpuset.mem_hardwall\x00') r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a", 0x52c) sendfile(r1, r2, 0x0, 0x10000) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0xff, @none, 0xbd5, 0x1}, 0xe) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r3, &(0x7f0000000580), 0x12) r4 = accept4(r3, &(0x7f0000000200)=@ipx, &(0x7f0000000180)=0x80, 0x80800) r5 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r5, 0x0, 0x0) ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000340)={0x171, 0x14, &(0x7f00000005c0)}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="66696c746572040000000000000000000000000000000000000000000000005dd70000000000000000000062010000000000000000000000006a5a4f052ff8e9a84d34a0f96dba9e466f5d7c302107161e"], 0x48) r6 = openat$cgroup_int(r0, &(0x7f0000000300)='cpuset.mem_hardwall\x00', 0x2, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:10:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r1, 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000000)={0x101, 0x6, 0x82c, 0x5}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0xff, @mcast2, 0x401}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x64b, @dev={0xfe, 0x80, [], 0x11}, 0x5}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @loopback}], 0x78) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:10:01 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x100000, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000080)) fallocate(r1, 0x4c, 0x2f2, 0x3) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:10:01 executing program 1 (fault-call:5 fault-nth:53): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 1038.024106][T10614] FAULT_INJECTION: forcing a failure. [ 1038.024106][T10614] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.056691][T10614] CPU: 1 PID: 10614 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 23:10:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a", 0x52c) sendfile(r1, r2, 0x0, 0x10000) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000002380)=[{&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000100)=""/75, 0x4b}, {&(0x7f0000001200)=""/130, 0x82}, {&(0x7f00000012c0)=""/79, 0x4f}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/27, 0x1b}], 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1038.065491][T10614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1038.075546][T10614] Call Trace: [ 1038.078858][T10614] dump_stack+0x11d/0x187 [ 1038.083218][T10614] should_fail.cold+0x5/0xf [ 1038.087751][T10614] __should_failslab+0x82/0xb0 [ 1038.092691][T10614] should_failslab+0x5/0xf [ 1038.097143][T10614] kmem_cache_alloc_trace+0x26/0x5f0 [ 1038.102445][T10614] ? delay_tsc+0x8a/0xb0 [ 1038.106713][T10614] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1038.111974][T10614] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1038.117954][T10614] sctp_add_bind_addr+0x90/0x2c0 [ 1038.122922][T10614] sctp_copy_local_addr_list+0x23d/0x290 [ 1038.128574][T10614] ? _crng_backtrack_protect+0xd1/0x100 [ 1038.134144][T10614] ? sctp_v6_is_any+0x3d/0x50 [ 1038.138842][T10614] sctp_copy_one_addr+0x65/0x150 [ 1038.143800][T10614] sctp_bind_addr_copy+0xb3/0x241 [ 1038.148900][T10614] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1038.155078][T10614] sctp_connect_new_asoc+0x10b/0x340 23:10:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r1, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000200)=ANY=[@ANYBLOB="38d000001d000000848b810106038b808a06850306838d0e820086098204898388060f01867120a692277c595d28939714388984758f63ff2401493d9f608c1a2a22546dbdb5ef2172db4697265ff7a2b3c1357ee5c91b4854c1b1c3db059073eeba1738672c5e12abca2cae8811e1b3e5801395b475211fcad76ad7cedfbd87b2a8476c284b9f720ee39097102bfc0e7c401e315746cb1a"]) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1038.159727][ T26] audit: type=1804 audit(1583190601.229:3988): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir309363322/syzkaller.l56wwm/1240/file0" dev="sda1" ino=17015 res=1 [ 1038.160482][T10614] __sctp_connect+0x282/0x680 [ 1038.160508][T10614] ? _copy_from_user+0x93/0xf0 [ 1038.195053][T10614] __sctp_setsockopt_connectx+0xe9/0x130 [ 1038.200721][T10614] sctp_setsockopt+0x154f/0x5150 [ 1038.205688][T10614] sock_common_setsockopt+0x5d/0x80 [ 1038.210981][T10614] __sys_setsockopt+0x1d6/0x380 [ 1038.215885][T10614] __x64_sys_setsockopt+0x6b/0x80 [ 1038.220959][T10614] do_syscall_64+0xc7/0x390 [ 1038.225485][T10614] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1038.231378][T10614] RIP: 0033:0x45c479 [ 1038.235294][T10614] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1038.254912][T10614] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1038.263377][T10614] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 23:10:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000580), 0x12) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r3, &(0x7f0000000580), 0x12) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000005c0)=0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f0000000200)="d3fbcb15bd7f160b77d17f8e117ed6496796761e3d345906b6a760d96183f87c12b929a69df668ac2af8e71bcc575ac1bc2aa9eaf0ce8675ca876f0bd95b802ef1410227391bb3ebeb892f4bb3db053b4b1dc0536121d48fb3ef829d188626c5effaa929738530a22c4a62af671dde2241a1c1216932ce06cd735838247bee249612900c185025b529336fa513a2cc2998417c2ca8f3e3fe634357af77cea5514ddd9b14fd78d7701539abd0be0a377724945939248bb5e8300b82da08be1ffd179801ed7b9ed7805781b63ea65a4faf1c5d656479ce289c5916f02c78b99ec0934a2c5f1ac1a559c675", &(0x7f0000000300)=""/231, &(0x7f00000000c0)="3ecd00457fefd8d640e107a8d85d9d7bcd25c9", &(0x7f0000000100)="45b4b2fc953c098d811bef3102bdd5abecf7a182d53983ab5f6db7fef7faeac7b18387ce041a063f4b5404cd92c41e2e645d627b38884707d4791c0863b71dcbe1bf70a11ca120024e0967d8fee2f47595696f1d473ab7bcc79bc6e632e9f42b862407dd54dfe384618489c3dcb92607e7", 0x7}, 0x38) [ 1038.271359][T10614] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1038.279508][T10614] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1038.287492][T10614] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1038.295475][T10614] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000035 23:10:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x52c) sendfile(r1, r2, 0x0, 0x10000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x2, 'veth0_macvtap\x00', {0x1}, 0x7}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x97b6}, 0x8) 23:10:01 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x52c) sendfile(r2, r3, 0x0, 0x10000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000040)={0x5, 0x0, 0x3006, 0x8, 0x7, 0x0, 0x200, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:10:01 executing program 1 (fault-call:5 fault-nth:54): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:01 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) getpeername$netrom(r0, &(0x7f0000000140)={{0x3, @null}, [@remote, @bcast, @bcast, @netrom, @null, @bcast, @remote, @null]}, &(0x7f0000000040)=0x48) [ 1038.551972][T10645] FAULT_INJECTION: forcing a failure. [ 1038.551972][T10645] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.600338][T10645] CPU: 1 PID: 10645 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1038.609049][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1038.619113][T10645] Call Trace: [ 1038.622430][T10645] dump_stack+0x11d/0x187 [ 1038.626814][T10645] should_fail.cold+0x5/0xf [ 1038.632101][T10645] __should_failslab+0x82/0xb0 [ 1038.636914][T10645] should_failslab+0x5/0xf [ 1038.641416][T10645] kmem_cache_alloc_trace+0x26/0x5f0 [ 1038.644395][ T26] audit: type=1804 audit(1583190601.719:3989): pid=10651 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir167061834/syzkaller.2p5nEZ/1066/file0" dev="sda1" ino=16969 res=1 [ 1038.646875][T10645] ? delay_tsc+0x8a/0xb0 [ 1038.646971][T10645] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1038.681299][T10645] sctp_add_bind_addr+0x90/0x2c0 [ 1038.686379][T10645] sctp_copy_local_addr_list+0x23d/0x290 [ 1038.692048][T10645] ? _crng_backtrack_protect+0xd1/0x100 [ 1038.697632][T10645] ? sctp_v6_is_any+0x3d/0x50 [ 1038.702355][T10645] sctp_copy_one_addr+0x65/0x150 [ 1038.707300][T10645] sctp_bind_addr_copy+0xb3/0x241 [ 1038.712379][T10645] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1038.718577][T10645] sctp_connect_new_asoc+0x10b/0x340 [ 1038.723884][T10645] __sctp_connect+0x282/0x680 [ 1038.728568][T10645] ? _copy_from_user+0x93/0xf0 [ 1038.733346][T10645] __sctp_setsockopt_connectx+0xe9/0x130 [ 1038.739131][T10645] sctp_setsockopt+0x154f/0x5150 [ 1038.744100][T10645] sock_common_setsockopt+0x5d/0x80 [ 1038.749322][T10645] __sys_setsockopt+0x1d6/0x380 [ 1038.754195][T10645] __x64_sys_setsockopt+0x6b/0x80 [ 1038.759231][T10645] do_syscall_64+0xc7/0x390 [ 1038.763765][T10645] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1038.769670][T10645] RIP: 0033:0x45c479 [ 1038.773644][T10645] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1038.793256][T10645] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1038.801751][T10645] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1038.809724][T10645] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1038.817758][T10645] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1038.825749][T10645] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1038.833819][T10645] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000036 23:10:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5421, &(0x7f0000000100)) 23:10:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x3, 0x9000}, 0x4) fchdir(r1) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_DELCHAIN={0x98, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x22}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x40}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x40}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWSET={0x90, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x54, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xac}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELOBJ={0x7c, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14}}, 0x214}}, 0x4000) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:10:02 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:10:02 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:10:02 executing program 1 (fault-call:5 fault-nth:55): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 1039.012427][T10666] FAULT_INJECTION: forcing a failure. [ 1039.012427][T10666] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.072669][T10666] CPU: 1 PID: 10666 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1039.081474][T10666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1039.091534][T10666] Call Trace: [ 1039.095011][T10666] dump_stack+0x11d/0x187 [ 1039.099352][T10666] should_fail.cold+0x5/0xf [ 1039.103924][T10666] __should_failslab+0x82/0xb0 [ 1039.108769][T10666] should_failslab+0x5/0xf [ 1039.113200][T10666] kmem_cache_alloc_trace+0x26/0x5f0 23:10:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x52c) sendfile(r1, r2, 0x0, 0x10000) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r3, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe]}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000009c0)={0x800, 0x0, 0x3, 0x400, 0x80000000, 0x1, 0xa1cc, 0x6, r3}, &(0x7f0000000a00)=0x20) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={r3, 0x80}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r4, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1039.118532][T10666] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1039.123758][T10666] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1039.129704][T10666] sctp_add_bind_addr+0x90/0x2c0 [ 1039.134672][T10666] sctp_copy_local_addr_list+0x23d/0x290 [ 1039.140321][T10666] ? _crng_backtrack_protect+0xd1/0x100 [ 1039.146011][T10666] ? sctp_v6_is_any+0x3d/0x50 [ 1039.150727][T10666] sctp_copy_one_addr+0x65/0x150 [ 1039.155702][T10666] sctp_bind_addr_copy+0xb3/0x241 [ 1039.160761][T10666] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1039.166988][T10666] sctp_connect_new_asoc+0x10b/0x340 [ 1039.172314][T10666] __sctp_connect+0x282/0x680 [ 1039.177030][T10666] ? _copy_from_user+0x93/0xf0 [ 1039.181938][T10666] __sctp_setsockopt_connectx+0xe9/0x130 [ 1039.187590][T10666] sctp_setsockopt+0x154f/0x5150 [ 1039.192593][T10666] sock_common_setsockopt+0x5d/0x80 [ 1039.196857][ T26] audit: type=1804 audit(1583190602.269:3990): pid=10677 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir309363322/syzkaller.l56wwm/1244/file0" dev="sda1" ino=17217 res=1 [ 1039.197807][T10666] __sys_setsockopt+0x1d6/0x380 [ 1039.197836][T10666] __x64_sys_setsockopt+0x6b/0x80 [ 1039.197877][T10666] do_syscall_64+0xc7/0x390 [ 1039.237164][T10666] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1039.243069][T10666] RIP: 0033:0x45c479 [ 1039.246994][T10666] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 23:10:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000100)=[0x48, 0x1000, 0xc548, 0xe6, 0x3f31, 0xc7], 0x6, 0x0, r2, r0}) r3 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x4e) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) mq_unlink(&(0x7f00000002c0)='cgroup\x00') connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000280)=[{{0x4, 0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}], 0x10) [ 1039.266795][T10666] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1039.275300][T10666] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1039.283310][T10666] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1039.291284][T10666] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1039.299267][T10666] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1039.307362][T10666] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000037 23:10:02 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa, 0x2}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x80200000000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r7 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r6, &(0x7f0000001400)="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", 0x52c) sendfile(r6, r7, 0x0, 0x10000) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000080)={0x7, 0x6, 0x4, 0x400, 0x8f63, {r4, r5/1000+30000}, {0x5, 0x2, 0x2, 0x1, 0x0, 0x9, "32ee16d9"}, 0x134a04b3, 0x4, @userptr=0x521, 0x788, 0x0, r6}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000100)={0x0, 'batadv_slave_1\x00', {0x3}, 0x16d}) 23:10:02 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000580), 0x12) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) read$eventfd(r2, &(0x7f0000000140), 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x200, @local, 0x9}}, 0x4, 0x81, 0x7fffffff, 0x0, 0x10, 0xf3c, 0x6}, &(0x7f0000000100)=0x9c) 23:10:02 executing program 1 (fault-call:5 fault-nth:56): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:02 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3, 0x2202) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r1, 0x80184153, &(0x7f0000000780)={0x0, &(0x7f0000000740)=[&(0x7f00000002c0)="412cd242b6a2aa84af3539013c9797d46fd564cefb3203ab7aff8d9af2c530fc060fa3e901b858ac8912a5ce6c6b85bab22f911d5f417fee5aa2a2e6d612a7284f580d0712e76b7110417bb0dfe363c1f60b296e950e3dd74cb45cc49ff546ddfa005414538e0ddf309b5c5ebb83f41838bc2d5093c3c211046d0e435f15738c0767ad211fcc6ab564ff7c99dd36ce21b0dd0eb942729e0bfc632da0d37bbd1dc573179c643d5391aa295efbef09fd00c79eb1f228f17317f1d0421159bfaa", &(0x7f0000000380)="7e92e683c73e204156a07c90b643f22534ae28b6414a96f1e372e9b1a614eefc09a4f2acb6551a390d85c4241c001db51cbdf438d2dbeee9b0e1fc46b6fb5cebbb808ab7efc51e7bd70bbe98c6c542fa8374bed478c63eac676db248da2368e495694de74be0c96654d34d6ba848fea8765d4cec99f531946c6eb9e8996583f54316a0", &(0x7f0000000440)="e95d8e730f709e80430d9e499121c1bed840b99bd0dab31e96132036c9d6eaa75f228d42c0232700500f167629b15f43eee0ce9de768f29faf6485", &(0x7f0000000480)="958225ed5d325835f4287511add51479e2df5041933d", &(0x7f00000005c0)="ec8a7f3b4890243f9a5a1ba214552f26f95d465796dfa1078832a6d9d8807bbc6370cfc5c399a211ebb6f4ac9568c43d3ce7853f06c729ec41435c939c511ec45727be3ddba3a3aa47fab891322897c32c097ab1241f94c0eb7e9a248ce68089da901af2c8a2cff71200762832c100d7d0bdb485db8ba15cfe75bbcbd52be2d44ce2b4f6", &(0x7f0000000680)="228ad82efbc8fcce0450007349845370a0cab39e917e564119500b07c30a663f202f41866992e4999c7b4214005666f4e8d54d92b41601f230dfac165055eb3ca571f41142f63367ae22f3fae21b68cc8165a6ecbd7f07f1202d10f3f8182f825ee85694ae3a086d23a4cf4081e588a804f025c7d43344005e43808218c0bd80ebf221cbf27221afc57af8b4eed056cdfc8b4fb6e0410a9c0c20f9b15aaa25ec8138238f04945b7493f51f9e1f59865bb41658c5380caadb5145a394a75ed2", &(0x7f0000000500)="41c0f671d21f3f74343678804e42aea7aa275964ade6b488a02117156173266b15dd951495e4815179420c1bb915e7e9e3438782f26b66c5543b466b5f53e07d40cc5b4865e125c67217631e2f8509b87b"]}) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000580), 0x12) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac14142ae0000001010000000b000000ac1414aaac1414bbe0000002"], 0x1c) r3 = openat$cgroup_int(r0, &(0x7f0000000180)='notify_on_release\x00', 0x2, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000200)=""/118) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:10:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x2}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r1, 0x9}, 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1039.645659][T10699] FAULT_INJECTION: forcing a failure. [ 1039.645659][T10699] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.742424][T10699] CPU: 0 PID: 10699 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1039.751162][T10699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1039.761217][T10699] Call Trace: [ 1039.764527][T10699] dump_stack+0x11d/0x187 [ 1039.768906][T10699] should_fail.cold+0x5/0xf [ 1039.773555][T10699] __should_failslab+0x82/0xb0 [ 1039.778339][T10699] should_failslab+0x5/0xf [ 1039.782818][T10699] kmem_cache_alloc_trace+0x26/0x5f0 [ 1039.788119][T10699] ? delay_tsc+0x8a/0xb0 [ 1039.792427][T10699] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1039.797682][T10699] sctp_add_bind_addr+0x90/0x2c0 [ 1039.802646][T10699] sctp_copy_local_addr_list+0x23d/0x290 [ 1039.808314][T10699] ? _crng_backtrack_protect+0xd1/0x100 [ 1039.813922][T10699] ? sctp_v6_is_any+0x3d/0x50 [ 1039.818621][T10699] sctp_copy_one_addr+0x65/0x150 [ 1039.823582][T10699] sctp_bind_addr_copy+0xb3/0x241 [ 1039.828637][T10699] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1039.834819][T10699] sctp_connect_new_asoc+0x10b/0x340 [ 1039.840165][T10699] __sctp_connect+0x282/0x680 [ 1039.844860][T10699] ? _copy_from_user+0x93/0xf0 [ 1039.849658][T10699] __sctp_setsockopt_connectx+0xe9/0x130 [ 1039.855318][T10699] sctp_setsockopt+0x154f/0x5150 [ 1039.860291][T10699] sock_common_setsockopt+0x5d/0x80 [ 1039.865561][T10699] __sys_setsockopt+0x1d6/0x380 [ 1039.870444][T10699] __x64_sys_setsockopt+0x6b/0x80 [ 1039.875501][T10699] do_syscall_64+0xc7/0x390 [ 1039.880081][T10699] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1039.886086][T10699] RIP: 0033:0x45c479 [ 1039.890006][T10699] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1039.909693][T10699] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1039.918140][T10699] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1039.926120][T10699] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1039.934122][T10699] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1039.942151][T10699] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1039.950139][T10699] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000038 23:10:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5423, &(0x7f0000000100)) 23:10:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000140)) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006ff0b554af33936f00"/88]) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0x1ca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1f, 0x0, @dev={0xfe, 0x80, [], 0x10}}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000002c0)={r2, 0x2}, 0x8) 23:10:03 executing program 1 (fault-call:5 fault-nth:57): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:03 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video37\x00', 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000500)={0x1, 0x3, 0x1000, 0x40, &(0x7f00000003c0)="8b59ae42d3af37fa127e9c7cb84c9f775b868ff06d3e22437af0e9abf50f0cf60f8785261a09908ba66498062da943e727eccc2ecfc18e09c624ff33122825ae", 0x5a, 0x0, &(0x7f0000000400)="ea8cd5df6228c64d1ad6727666ebdb7f8e9a4f95671f612921cf52848b0c671d48c3bbe15ef0a330a4c5f04126bc5bbd6d594385f6ed4ba0ad5e046f8204453e887432c6364e5b700023c33d880962fb0e5a863eedbfc1013235"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x2}, 0x6) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0df59c0c", 0x4}]) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r4, 0x0, 0x0) io_cancel(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x47da, r3, &(0x7f00000005c0)="209d1e359eca1fe6eee5d4608f4c23a32f734af4e3b04decfa84cd9e1938cf585c0b8b8254ede6cc62f6d43619d706cb68c5d4cca7b5487f3d64945a2f89855e7df8578d03df36b1d4d45f85e601ec01082af94cd77a1969b81247ddd833521683ce7cac50b8f169fc60c19ac3dd04b1fccb6e711d2efe980c04b5906b31a7214c35496f4d1ee9e4b3de6a479b2a7e99636d55ce3f08c1f04be4e3e60871d03915df6a6875b0add4", 0xa8, 0x1000, 0x0, 0x0, r4}, &(0x7f0000000680)) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r5, &(0x7f0000000580), 0x12) getsockopt$netrom_NETROM_T2(r5, 0x103, 0x2, &(0x7f0000000180)=0xfff, &(0x7f00000002c0)=0x4) open(&(0x7f0000000100)='./file0\x00', 0xa00, 0x88) rt_sigqueueinfo(0x0, 0x23, &(0x7f0000000200)={0xc, 0x0, 0x30}) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getpeername$llc(r6, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000340)=0x10) r7 = openat$cgroup_int(r6, &(0x7f00000000c0)='memory.swap.max\x00', 0x2, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) [ 1040.148517][T10716] sctp: [Deprecated]: syz-executor.0 (pid 10716) Use of int in maxseg socket option. [ 1040.148517][T10716] Use struct sctp_assoc_value instead [ 1040.160204][T10715] FAULT_INJECTION: forcing a failure. [ 1040.160204][T10715] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.212831][T10722] sctp: [Deprecated]: syz-executor.0 (pid 10722) Use of int in maxseg socket option. [ 1040.212831][T10722] Use struct sctp_assoc_value instead [ 1040.236061][T10715] CPU: 0 PID: 10715 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1040.244847][T10715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1040.254910][T10715] Call Trace: [ 1040.258218][T10715] dump_stack+0x11d/0x187 [ 1040.262640][T10715] should_fail.cold+0x5/0xf [ 1040.267246][T10715] __should_failslab+0x82/0xb0 [ 1040.272039][T10715] should_failslab+0x5/0xf [ 1040.276474][T10715] kmem_cache_alloc_trace+0x26/0x5f0 [ 1040.281794][T10715] ? delay_tsc+0x8a/0xb0 [ 1040.286076][T10715] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1040.291291][T10715] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1040.297246][T10715] sctp_add_bind_addr+0x90/0x2c0 [ 1040.302243][T10715] sctp_copy_local_addr_list+0x23d/0x290 [ 1040.307896][T10715] ? _crng_backtrack_protect+0xd1/0x100 [ 1040.313483][T10715] ? sctp_v6_is_any+0x3d/0x50 [ 1040.318384][T10715] sctp_copy_one_addr+0x65/0x150 [ 1040.323360][T10715] sctp_bind_addr_copy+0xb3/0x241 [ 1040.328452][T10715] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1040.334707][T10715] sctp_connect_new_asoc+0x10b/0x340 [ 1040.340027][T10715] __sctp_connect+0x282/0x680 [ 1040.344748][T10715] ? _copy_from_user+0x93/0xf0 [ 1040.349545][T10715] __sctp_setsockopt_connectx+0xe9/0x130 [ 1040.355288][T10715] sctp_setsockopt+0x154f/0x5150 [ 1040.360267][T10715] sock_common_setsockopt+0x5d/0x80 [ 1040.365496][T10715] __sys_setsockopt+0x1d6/0x380 [ 1040.370378][T10715] __x64_sys_setsockopt+0x6b/0x80 [ 1040.375489][T10715] do_syscall_64+0xc7/0x390 [ 1040.380069][T10715] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1040.385977][T10715] RIP: 0033:0x45c479 [ 1040.389888][T10715] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 23:10:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@remote, r3}, 0x14) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x52c) sendfile(r1, r4, 0x0, 0x10000) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1040.409675][T10715] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1040.418127][T10715] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1040.426109][T10715] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1040.434090][T10715] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1040.442080][T10715] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1040.450134][T10715] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000039 [ 1040.516404][ T26] audit: type=1804 audit(1583190603.589:3991): pid=10731 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir309363322/syzkaller.l56wwm/1248/file0" dev="sda1" ino=17233 res=1 23:10:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x52c) sendfile(r1, r2, 0x0, 0x10000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x2, 'veth0_macvtap\x00', {0x1}, 0x7}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x97b6}, 0x8) 23:10:03 executing program 1 (fault-call:5 fault-nth:58): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:03 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x52c) sendfile(r0, r1, 0x0, 0x10000) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0)=0x1, 0x4) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000180)={0x5, 0x2, 0x5, 0x6, 0x1, 0x99, 0x3}) 23:10:03 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r1, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe]}, 0x0) r2 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x100000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x60, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x2, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000e68d6ce8000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000ba566de5de960cdb2226fdb7141896f3145933b36266b12a7c1bbae4b45899bb468699bce078beb07420b12ae1e17a8f37b7a08a6734e7a4ad1eeeffc9714368f638c28137d5e092245dd711b01a9dcaf6a4d25dd954c76a300b3e2e118a75ed6636c4795a600ad58d203d7c0b61bf446c7faf2e3a7ffca4d0c306ff8833902babb0e4083d773c94be49a5249e68d9"]}, 0x197) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000009c0)={0x800, 0x0, 0x3, 0x400, 0x80000000, 0x1, 0xa1cc, 0x6, r1}, &(0x7f0000000a00)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r1, 0x60, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}, @in={0x2, 0x4e20, @rand_addr=0x6}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}]}, &(0x7f0000000140)=0x10) [ 1040.628612][ T26] audit: type=1804 audit(1583190603.629:3992): pid=10731 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir309363322/syzkaller.l56wwm/1248/file0" dev="sda1" ino=17233 res=1 [ 1040.767691][T10743] FAULT_INJECTION: forcing a failure. [ 1040.767691][T10743] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.782614][T10743] CPU: 0 PID: 10743 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1040.791376][T10743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1040.801437][T10743] Call Trace: [ 1040.804784][T10743] dump_stack+0x11d/0x187 [ 1040.809232][T10743] should_fail.cold+0x5/0xf [ 1040.813862][T10743] __should_failslab+0x82/0xb0 [ 1040.818642][T10743] should_failslab+0x5/0xf [ 1040.823101][T10743] kmem_cache_alloc_trace+0x26/0x5f0 [ 1040.828415][T10743] ? delay_tsc+0x8a/0xb0 [ 1040.832738][T10743] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1040.837963][T10743] sctp_add_bind_addr+0x90/0x2c0 [ 1040.843033][T10743] sctp_copy_local_addr_list+0x23d/0x290 [ 1040.848683][T10743] ? _crng_backtrack_protect+0xd1/0x100 [ 1040.854336][T10743] ? sctp_v6_is_any+0x3d/0x50 [ 1040.859039][T10743] sctp_copy_one_addr+0x65/0x150 [ 1040.864010][T10743] sctp_bind_addr_copy+0xb3/0x241 [ 1040.869072][T10743] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1040.875271][T10743] sctp_connect_new_asoc+0x10b/0x340 [ 1040.880583][T10743] __sctp_connect+0x282/0x680 [ 1040.885393][T10743] ? _copy_from_user+0x93/0xf0 [ 1040.890244][T10743] __sctp_setsockopt_connectx+0xe9/0x130 [ 1040.895902][T10743] sctp_setsockopt+0x154f/0x5150 [ 1040.900878][T10743] sock_common_setsockopt+0x5d/0x80 [ 1040.906185][T10743] __sys_setsockopt+0x1d6/0x380 [ 1040.911076][T10743] __x64_sys_setsockopt+0x6b/0x80 [ 1040.916143][T10743] do_syscall_64+0xc7/0x390 [ 1040.920678][T10743] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1040.926687][T10743] RIP: 0033:0x45c479 [ 1040.930669][T10743] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1040.950404][T10743] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1040.958898][T10743] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1040.966915][T10743] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1040.974899][T10743] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1040.982881][T10743] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1040.990866][T10743] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000003a 23:10:04 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:10:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x1239c3) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1040.999905][ T26] audit: type=1804 audit(1583190603.859:3993): pid=10737 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir309363322/syzkaller.l56wwm/1249/file0" dev="sda1" ino=16676 res=1 23:10:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x4c81, &(0x7f0000000100)) 23:10:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5424, &(0x7f0000000100)) 23:10:04 executing program 1 (fault-call:5 fault-nth:59): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:04 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000580), 0x12) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0x0, 0x8, {0xc5b}}, 0x18) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000580), 0x12) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000180)="0c60ed3dd6176b862b", 0x9}], 0x2) [ 1041.368765][T10767] FAULT_INJECTION: forcing a failure. [ 1041.368765][T10767] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.392089][T10767] CPU: 1 PID: 10767 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1041.400911][T10767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1041.410973][T10767] Call Trace: [ 1041.414296][T10767] dump_stack+0x11d/0x187 [ 1041.418778][T10767] should_fail.cold+0x5/0xf [ 1041.423322][T10767] __should_failslab+0x82/0xb0 [ 1041.428113][T10767] should_failslab+0x5/0xf [ 1041.432552][T10767] kmem_cache_alloc_trace+0x26/0x5f0 [ 1041.438017][T10767] ? delay_tsc+0x8a/0xb0 [ 1041.442344][T10767] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1041.447675][T10767] sctp_add_bind_addr+0x90/0x2c0 [ 1041.452715][T10767] sctp_copy_local_addr_list+0x23d/0x290 [ 1041.458417][T10767] ? _crng_backtrack_protect+0xd1/0x100 [ 1041.464000][T10767] ? sctp_v6_is_any+0x3d/0x50 [ 1041.468760][T10767] sctp_copy_one_addr+0x65/0x150 [ 1041.473814][T10767] sctp_bind_addr_copy+0xb3/0x241 [ 1041.478885][T10767] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1041.485070][T10767] sctp_connect_new_asoc+0x10b/0x340 [ 1041.490461][T10767] __sctp_connect+0x282/0x680 [ 1041.495167][T10767] ? _copy_from_user+0x93/0xf0 [ 1041.499964][T10767] __sctp_setsockopt_connectx+0xe9/0x130 [ 1041.505627][T10767] sctp_setsockopt+0x154f/0x5150 [ 1041.510607][T10767] sock_common_setsockopt+0x5d/0x80 [ 1041.515938][T10767] __sys_setsockopt+0x1d6/0x380 [ 1041.520823][T10767] __x64_sys_setsockopt+0x6b/0x80 [ 1041.525906][T10767] do_syscall_64+0xc7/0x390 [ 1041.530443][T10767] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1041.536352][T10767] RIP: 0033:0x45c479 [ 1041.540272][T10767] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1041.559883][T10767] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1041.568459][T10767] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1041.576475][T10767] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1041.584461][T10767] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1041.592449][T10767] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1041.600506][T10767] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000003b 23:10:05 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x2}, 0x4) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$GETVAL(r3, 0x4, 0xc, &(0x7f0000000040)=""/36) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e21, @broadcast}], 0x10) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f00000000c0)=0x81) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x0, 0x6, [0x1f, 0x3, 0xfff9, 0x4, 0x1, 0x0]}, &(0x7f0000000480)=0x14) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000004c0)={r6, 0x8, 0x1, 0x400, 0x83a5, 0x5}, 0x14) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r7) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000000400)={0x1, 0x7, 0x1000, 0xc4, &(0x7f0000000240)="6d7942c990d1b6175645db2c71787915d250053ba7fa5a9a8d8d30696bb86c1f1c94b613881d877bf713888eed535f400a2c635dcd7093518aabf8f97d9c1ba7ea530624d3a323c051cbb6ebdf7b67797ed286118c4121f6d48da3ea1ef81bc4a9975ffbc476a6dd8534a9813b3a212ee58ee896a60a04248f7d99138bd5d52477114b995fd3c4180d5958777f8230c2463c6177776aff6e402d1864ca1039739aaf784ba60f12d21faca32b4acff9e059005e87db1c77e6ee299bbe6376157ecfd439d6", 0x87, 0x0, &(0x7f0000000340)="bb921e6b25941749a424bd9254118df59dd78b23c194a4f6aaf61d40d1354c7759af6b3d1a425f3102794565895fbda1dd406708fa8fbf4171c666e361569d92f5b1471c4f6c29e93cdf2b65a1c14f589cc552dbac02965d4350e57355cbed536a20bc5ee91b53fb87e195f654b911c1960fa43dc1678ea00891c78611bc14881111c62bfd1e89"}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x800}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:10:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x4c80, &(0x7f0000000100)) 23:10:05 executing program 1 (fault-call:5 fault-nth:60): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:05 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @local}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:10:05 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) prctl$PR_GET_THP_DISABLE(0x2a) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:10:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5425, &(0x7f0000000100)) [ 1042.353248][T10788] FAULT_INJECTION: forcing a failure. [ 1042.353248][T10788] name failslab, interval 1, probability 0, space 0, times 0 23:10:05 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @remote}], 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @mcast2, 0x3fffffff}, 0x45) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1042.439750][T10788] CPU: 0 PID: 10788 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1042.448480][T10788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1042.458712][T10788] Call Trace: [ 1042.462024][T10788] dump_stack+0x11d/0x187 [ 1042.466385][T10788] should_fail.cold+0x5/0xf [ 1042.470927][T10788] __should_failslab+0x82/0xb0 [ 1042.475827][T10788] should_failslab+0x5/0xf [ 1042.480294][T10788] kmem_cache_alloc_trace+0x26/0x5f0 [ 1042.485616][T10788] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1042.490879][T10788] sctp_add_bind_addr+0x90/0x2c0 [ 1042.495855][T10788] sctp_copy_local_addr_list+0x23d/0x290 [ 1042.501538][T10788] ? _crng_backtrack_protect+0xd1/0x100 [ 1042.507123][T10788] ? sctp_v6_is_any+0x3d/0x50 [ 1042.511845][T10788] sctp_copy_one_addr+0x65/0x150 [ 1042.516814][T10788] sctp_bind_addr_copy+0xb3/0x241 [ 1042.522029][T10788] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1042.528223][T10788] sctp_connect_new_asoc+0x10b/0x340 [ 1042.533540][T10788] __sctp_connect+0x282/0x680 [ 1042.538291][T10788] ? _copy_from_user+0x93/0xf0 [ 1042.543147][T10788] __sctp_setsockopt_connectx+0xe9/0x130 [ 1042.548812][T10788] sctp_setsockopt+0x154f/0x5150 [ 1042.553834][T10788] sock_common_setsockopt+0x5d/0x80 [ 1042.559166][T10788] __sys_setsockopt+0x1d6/0x380 [ 1042.564049][T10788] __x64_sys_setsockopt+0x6b/0x80 [ 1042.569113][T10788] do_syscall_64+0xc7/0x390 [ 1042.573646][T10788] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1042.579552][T10788] RIP: 0033:0x45c479 [ 1042.583476][T10788] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1042.603091][T10788] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1042.611519][T10788] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1042.619501][T10788] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1042.627484][T10788] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1042.635576][T10788] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1042.643557][T10788] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000003c 23:10:05 executing program 1 (fault-call:5 fault-nth:61): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:05 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x105100) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000003c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000300), 0x1, {0xa, 0x4e23, 0xfffffe01, @ipv4={[], [], @loopback}, 0xfffffff8}, r2}}, 0x38) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0), 0x8) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = accept(r1, &(0x7f00000000c0)=@tipc, &(0x7f0000000140)=0x80) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r4, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe]}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000009c0)={0x800, 0x0, 0x3, 0x400, 0x80000000, 0x1, 0xa1cc, 0x6, r4}, &(0x7f0000000a00)=0x20) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r4, &(0x7f0000000240)=0x4) 23:10:05 executing program 4: r0 = userfaultfd(0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000002000/0x1000)=nil, 0x1000}, 0x2}) r2 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r2, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x840) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000100)={0xba4, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x9e0, 0x8, 0x0, 0x1, [{0x9dc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x278, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x4}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @remote}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @broadcast}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x8}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x1b}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr="ea3779eaadc460533a16592c7dadf775"}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x21}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x16}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x3}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc2 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1043.182162][T10806] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1043.190659][T10806] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1043.198741][T10806] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1043.206727][T10806] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1043.214817][T10806] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1043.222805][T10806] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000003d 23:10:06 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000080)=0xf5, 0x4) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:10:06 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x52c) sendfile(r2, r3, 0x0, 0x10000) r4 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)=0x5) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:10:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5427, &(0x7f0000000100)) [ 1043.707368][ T26] audit: type=1804 audit(1583190606.779:3994): pid=10832 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir123342262/syzkaller.jydaTp/1371/file0" dev="sda1" ino=17281 res=1 23:10:06 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x52c) sendfile(r0, r1, 0x0, 0x10000) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000200)=""/93, &(0x7f00000000c0)=0x5d) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:10:06 executing program 4: r0 = userfaultfd(0x0) memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a", 0x52c) sendfile(r1, r2, 0x0, 0x10000) write(r2, &(0x7f0000000200)="2ac1b73e863532fa2b7c8e24f267428e79f8831e889dea251d614eaaca000000d57a0000ad9f0000002ec7183eda613d72bf58bf6883efb0ee7142aa3c7a9cd885a998b70b26ac7eb91014773e9a517e7b7fac023be99cd48dbb0347cfc43b2a47c7c44090d98b3ef8bbe97ffec5b12f6ebf334b14a546d724dcf64ab94585281aa3bc2a01a2c3ad19b8dbed259971678174b3dee28b07400000003b83dbf7654ae1272ca1e35182b71a977011c6023dc711514aae08379ee12eebe19b0d59920ae7ee7ee0b81629832e84b88290e0decb449f1bc215fc8397c22a04", 0xdc) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x5f55b000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:10:07 executing program 1 (fault-call:5 fault-nth:62): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:07 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000580), 0x12) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x1, 0x2) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0x2, &(0x7f00000000c0), 0x2, r1, 0x6}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x6d4500, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) write$binfmt_aout(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/870], 0x366) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:10:07 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) openat$capi20(0xffffffffffffff9c, &(0x7f0000000400)='/dev/capi20\x00', 0x80000, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x11, 0x4) r2 = semget(0x1, 0x3, 0x5) semctl$IPC_RMID(r2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000300)={@fixed={[], 0x11}, 0x6a7e, 0x5, 0x9, 0x800, 0x3, "ab3a5e1219e1910effb4d0ae253e5ef499457b05fff56e485a35bd68ff5c2c7b0b69393892b42549fccc2d966999c97ba05606cc82f8d065af0381ed277b92d4fb6195edf684337c7d3ed1d24c15d1619c9f211fee9081623dcfdbcc9534875297f446976e432e3f72e1241801a1cba4ffe5fc29e6c09c3179de4daf5ff61248"}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, 'geneve1\x00', {}, 0x1}) r4 = getegid() getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) mount$9p_xen(&(0x7f0000000100)='syz\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x801028, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=xen,posixacl,loose,dfltgid=', @ANYRESHEX=r4, @ANYBLOB=',noextend,noextend,fscache,afid=0x0000000000000005,nodevmap,obj_role=/dev/audio#\x00,appraise,smackfshat=geneve1\x00,mask=^MAY_APPEND,mask=MAY_WRITE,uid=', @ANYRESDEC=r5, @ANYBLOB=',fsname=geeve1\x00,\x00']) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1044.082393][ T26] audit: type=1804 audit(1583190607.159:3995): pid=10852 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir123342262/syzkaller.jydaTp/1372/file0" dev="sda1" ino=17297 res=1 23:10:07 executing program 0 (fault-call:5 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x15}) 23:10:07 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x52c) sendfile(r2, r3, 0x0, 0x10000) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 1044.183986][T10856] FAULT_INJECTION: forcing a failure. [ 1044.183986][T10856] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.258693][T10856] CPU: 1 PID: 10856 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1044.267433][T10856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1044.277515][T10856] Call Trace: [ 1044.280825][T10856] dump_stack+0x11d/0x187 [ 1044.285177][T10856] should_fail.cold+0x5/0xf [ 1044.289704][T10856] __should_failslab+0x82/0xb0 [ 1044.294526][T10856] should_failslab+0x5/0xf [ 1044.298964][T10856] kmem_cache_alloc_trace+0x26/0x5f0 [ 1044.304295][T10856] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1044.309515][T10856] sctp_add_bind_addr+0x90/0x2c0 [ 1044.314476][T10856] sctp_copy_local_addr_list+0x23d/0x290 [ 1044.320134][T10856] ? _crng_backtrack_protect+0xd1/0x100 [ 1044.325709][T10856] ? sctp_v6_is_any+0x3d/0x50 [ 1044.330411][T10856] sctp_copy_one_addr+0x65/0x150 [ 1044.335375][T10856] sctp_bind_addr_copy+0xb3/0x241 [ 1044.340454][T10856] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1044.346628][T10856] sctp_connect_new_asoc+0x10b/0x340 [ 1044.351997][T10856] __sctp_connect+0x282/0x680 23:10:07 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x52c) sendfile(r3, r4, 0x0, 0x10000) r5 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x800000000000000, 0x0) recvmsg$can_j1939(r5, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r7, 0x0, 0x0) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) openat$cgroup_ro(r9, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x0, 0x0) fchdir(r8) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000001c0)=[r5, r6, r1, r1, r1, 0xffffffffffffffff, r7, r8, 0xffffffffffffffff], 0x9) recvmsg$can_j1939(r2, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x400, 0x0) r10 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r11 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r10, &(0x7f0000001400)="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", 0x52c) sendfile(r10, r11, 0x0, 0x10000) r12 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r12) ioctl$EXT4_IOC_GROUP_ADD(r12, 0x40286608, &(0x7f0000000180)={0x4, 0x5, 0x20, 0x80000001, 0x2, 0x80}) writev(r11, &(0x7f0000000040)=[{&(0x7f0000000200)="b421482dd88af5ca71688c0d21d87472c168aceaea5c9574df084fc50bb010e8c1168e8f1d7b4239d55bbd8dd4325bb667c693e6a050f4d797c9944a9ad066049be052c48e0091900c6d95bb9dd1fa000023079ddc71dca562de90c9f805033cc2eb39370a", 0x65}, {&(0x7f0000000140)='+', 0x1}], 0x2) [ 1044.356697][T10856] ? _copy_from_user+0x93/0xf0 [ 1044.361614][T10856] __sctp_setsockopt_connectx+0xe9/0x130 [ 1044.367267][T10856] sctp_setsockopt+0x154f/0x5150 [ 1044.372241][T10856] sock_common_setsockopt+0x5d/0x80 [ 1044.377472][T10856] __sys_setsockopt+0x1d6/0x380 [ 1044.382339][T10856] __x64_sys_setsockopt+0x6b/0x80 [ 1044.387370][T10856] do_syscall_64+0xc7/0x390 [ 1044.391888][T10856] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1044.397779][T10856] RIP: 0033:0x45c479 [ 1044.401682][T10856] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1044.421283][T10856] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1044.429696][T10856] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1044.437666][T10856] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1044.445635][T10856] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1044.453605][T10856] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1044.461579][T10856] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000003e 23:10:07 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 1044.495762][ T26] audit: type=1804 audit(1583190607.569:3996): pid=10863 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir123342262/syzkaller.jydaTp/1373/file0" dev="sda1" ino=17019 res=1 23:10:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5428, &(0x7f0000000100)) 23:10:07 executing program 1 (fault-call:5 fault-nth:63): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 1044.749954][T10877] FAULT_INJECTION: forcing a failure. [ 1044.749954][T10877] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.806751][T10877] CPU: 1 PID: 10877 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1044.815466][T10877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1044.825537][T10877] Call Trace: [ 1044.828841][T10877] dump_stack+0x11d/0x187 [ 1044.833308][T10877] should_fail.cold+0x5/0xf [ 1044.837836][T10877] __should_failslab+0x82/0xb0 [ 1044.842617][T10877] should_failslab+0x5/0xf [ 1044.847146][T10877] __kmalloc+0x54/0x640 [ 1044.851313][T10877] ? tomoyo_realpath_from_path+0x85/0x3d0 [ 1044.857059][T10877] tomoyo_realpath_from_path+0x85/0x3d0 [ 1044.862628][T10877] tomoyo_path_number_perm+0xff/0x360 [ 1044.868012][T10877] ? _parse_integer+0x12f/0x150 [ 1044.872994][T10877] ? __fget_files+0xa2/0x1c0 [ 1044.877641][T10877] tomoyo_file_ioctl+0x28/0x40 [ 1044.882410][T10877] security_file_ioctl+0x69/0xa0 [ 1044.887384][T10877] ksys_ioctl+0x5a/0x150 [ 1044.891651][T10877] __x64_sys_ioctl+0x47/0x60 [ 1044.896410][T10877] do_syscall_64+0xc7/0x390 [ 1044.901033][T10877] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1044.907024][T10877] RIP: 0033:0x45c479 [ 1044.910924][T10877] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1044.930531][T10877] RSP: 002b:00007f76462b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1044.938988][T10877] RAX: ffffffffffffffda RBX: 00007f76462b46d4 RCX: 000000000045c479 [ 1044.946962][T10877] RDX: 0000000020000100 RSI: 0000000000005412 RDI: 0000000000000004 23:10:08 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) socket$inet6(0xa, 0x2, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x80, 0x82902) sendmsg$inet6(r2, &(0x7f0000000480)={&(0x7f0000000180)={0xa, 0x4e24, 0x9, @mcast1, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000002c0)="6d9e3ab397127593b5238bbaee77d4c8e976c66441b435183dbad7479494b970ed2bc07ee91a77f20d0da1898109b6155b3ddcc3dbf93085757e36a598106241b5add02beeb1e724de056cd54229e02e081382643aca43b990bcf6d265f3b2a569bb245b04b31cbe91a61d8ee4de3263fb190fed00c3fad44d420cd3463ae1ff04c9985f458d554fd35e5c235d0bc41e0aa437a07c586a3bfc05399c4d07881222b1d9c69049533e8d2e67", 0xab}, {&(0x7f0000000200)="853eacb8e5e860ea18fa6a161f50928a8df92ef01d9705c85d59aa407bde1644e7f5e19519243626341e0044c4a7fd5a2c3ad29ef3fce63ffc96611f8d4d1597a9d9b408c1fa9316301fa24600816d9a93c68a9f2d35971991b4bc", 0x5b}, {&(0x7f0000000380)="ed7571f92addb771f1b7d1799bfacff815201125224f972680d441ef4fa03cc05b34958d8425625b4fb5082943accbf6af064276d109b018618193b5c8c02d9e9bd36c8d55429cf7324d45ed58e584f476ca806f2660263f9b8be0d30a64bf4d4172fd46829508fed22ebc22d90cfd1dc2", 0x71}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="de063b61e7cf1bd6a0449b111c48f5f0745d49f98519638bf2be2dae200bf175711a210291eb934964fc472bbaedd5e76ce028c0056c6f3b1c52aad8a9f738d49017b596f7455cffc79e2e51c68bdaab98b971a2d5ec329980715cdd75d2cdef31f7be8161855a1983f577656aaee2c7e63554ed3befd454222ef82d8b01ae75a725a470c76d34002b75b5e8a895a63116e53d6c03c1076066fc6a5d7c7f80d0fb728d764b0698af1a5407d4ccb941c0d5c87824b49aac07582e13cd027334406895fedc7367b3b3a09c5951e76767e27cafd3eb4981d60984dd", 0xda}, {&(0x7f0000001600)="1fec477bb418ebec1acc9f7dbac61f629d76b51d57f76c64ceda49a32a10b06da757cc44c7dde9846c8e14b093763c2e2d1b2fc07a5fb806366e3e1a68a1c7f85a179a9cc1d54696e24700ecba2843740ee7f5865b74d962aa1d7ea6113d88a3d794829d30541a96653d798e27bc0d114f42a3fbdc4ca95bb12c4409cdd3dce1650174db4d0fd66f789d0c6a916447e4e9187bb305a0538ea60ff3ec1fc3e3b9c5d9a9414359f5e577de7da77f0633545b7db78508c08d35148b93b26a58fde46ef641", 0xc3}], 0x6}, 0x4000000) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) [ 1044.955055][T10877] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1044.963021][T10877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1044.970989][T10877] R13: 0000000000000550 R14: 00000000004c7a3a R15: 0000000000000000 23:10:08 executing program 4: r0 = userfaultfd(0x0) r1 = semget(0x2, 0x3, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x5, 0x410200) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000180)={0x0, {0x10000, 0x10001}}) r3 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$SEM_INFO(r1, 0x4, 0x13, &(0x7f0000000200)=""/10) r4 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r4, &(0x7f0000002000)='/', 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) dup(r4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f00000000c0)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 1045.024315][T10882] FAULT_INJECTION: forcing a failure. [ 1045.024315][T10882] name failslab, interval 1, probability 0, space 0, times 0 [ 1045.037812][T10877] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1045.104677][T10882] CPU: 0 PID: 10882 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1045.113395][T10882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1045.123457][T10882] Call Trace: [ 1045.126794][T10882] dump_stack+0x11d/0x187 [ 1045.131208][T10882] should_fail.cold+0x5/0xf [ 1045.135742][T10882] __should_failslab+0x82/0xb0 [ 1045.140519][T10882] should_failslab+0x5/0xf [ 1045.144972][T10882] kmem_cache_alloc_trace+0x26/0x5f0 [ 1045.150418][T10882] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1045.155657][T10882] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1045.161628][T10882] sctp_add_bind_addr+0x90/0x2c0 [ 1045.166619][T10882] sctp_copy_local_addr_list+0x23d/0x290 [ 1045.172276][T10882] ? _crng_backtrack_protect+0xd1/0x100 [ 1045.178019][T10882] ? sctp_v6_is_any+0x3d/0x50 [ 1045.182714][T10882] sctp_copy_one_addr+0x65/0x150 [ 1045.187789][T10882] sctp_bind_addr_copy+0xb3/0x241 [ 1045.192847][T10882] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1045.199030][T10882] sctp_connect_new_asoc+0x10b/0x340 [ 1045.204345][T10882] __sctp_connect+0x282/0x680 [ 1045.209080][T10882] ? _copy_from_user+0x93/0xf0 [ 1045.213897][T10882] __sctp_setsockopt_connectx+0xe9/0x130 [ 1045.219596][T10882] sctp_setsockopt+0x154f/0x5150 [ 1045.224608][T10882] sock_common_setsockopt+0x5d/0x80 [ 1045.229908][T10882] __sys_setsockopt+0x1d6/0x380 [ 1045.234803][T10882] __x64_sys_setsockopt+0x6b/0x80 [ 1045.239863][T10882] do_syscall_64+0xc7/0x390 [ 1045.244397][T10882] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1045.250412][T10882] RIP: 0033:0x45c479 [ 1045.254325][T10882] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1045.273994][T10882] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1045.282552][T10882] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1045.290538][T10882] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 23:10:08 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000080)='\xe1\x89*\x00', &(0x7f00000000c0)='b(selinuxvmnet1..vboxnet1}\x00', &(0x7f0000000100)='#\'%nodev\x00', &(0x7f0000000140)=')\x00', &(0x7f0000000180)='#\'%nodev\x00', &(0x7f00000001c0)='#\'%nodev\x00'], &(0x7f0000000440)=[&(0x7f0000000240)='#\'%nodev\x00', &(0x7f0000000280)='#\'%nodev\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='bdev\x00', &(0x7f0000000340)='#\'%nodev\x00', &(0x7f0000000380)='\xabppp0@loppp0wlan0posix_acl_accessvmnet1\x00', &(0x7f00000003c0)='#\'%nodev\x00', &(0x7f0000000400)='#\'%nodev\x00'], 0x800) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000480)={0x3ea3, 0x9, 0x4, 0x0, 0x9, {0x0, 0x7530}, {0x1, 0x1, 0x9, 0x1, 0x86, 0x34, "5c176e3a"}, 0xfff, 0x2, @fd, 0xf5b4, 0x0, r1}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:10:08 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000000c0)=0x2, 0x4) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setscheduler(r2, 0x85511be1a1ef46d0, &(0x7f0000000340)=0x100) clone3(&(0x7f0000000400)={0x1111000, &(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000300)=0x0, {0x15}, &(0x7f0000000340)=""/66, 0x42, &(0x7f0000000500)=""/4096, &(0x7f00000003c0)=[r2, 0xffffffffffffffff], 0x2}, 0x50) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setscheduler(r4, 0x85511be1a1ef46d0, &(0x7f0000000340)=0x100) kcmp(r3, r4, 0x0, r0, 0xffffffffffffffff) bind(r1, &(0x7f0000000200)=@l2={0x1f, 0x5, @none, 0xa35, 0x1}, 0x80) r5 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) [ 1045.298529][T10882] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1045.306514][T10882] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1045.314599][T10882] R13: 0000000000000adc R14: 00000000004d6b00 R15: 000000000000003f 23:10:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002dbd7000fbdbdf250000000006001b004e24000005000d000000000005000500000000001400080076657468315f746f5f626f6e6400000006000e0000a0000008001700", @ANYRES32=r2, @ANYBLOB="0500210001f413d0a8756b2d7f3b5fa50000000500220001000000f9e9b01b047ac34004eec66a152f55b58fa5fba3e8c89db66add9701a2ef915742dcea4927b8d92e5b92f2b54c9db219de1cac90dec2426e2713a3790f412d46bd7822730744b5e54045d2b8"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4410) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x8000) ioctl$void(r4, 0x5450) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:10:08 executing program 0 (fault-call:5 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x15}) 23:10:08 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000040)={0x3, 0x80000000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:10:08 executing program 1 (fault-call:5 fault-nth:64): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:08 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040), 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040)=0x4, 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:10:08 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r0, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x8, 0x4, 0x8000}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) socket$bt_rfcomm(0x1f, 0x3, 0x3) [ 1045.698778][T10921] FAULT_INJECTION: forcing a failure. [ 1045.698778][T10921] name failslab, interval 1, probability 0, space 0, times 0 [ 1045.728192][T10921] CPU: 1 PID: 10921 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1045.736911][T10921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1045.746987][T10921] Call Trace: [ 1045.750334][T10921] dump_stack+0x11d/0x187 [ 1045.754702][T10921] should_fail.cold+0x5/0xf [ 1045.759280][T10921] __should_failslab+0x82/0xb0 [ 1045.764082][T10921] should_failslab+0x5/0xf [ 1045.768517][T10921] __kmalloc+0x54/0x640 [ 1045.772690][T10921] ? tomoyo_encode2.part.0+0xd0/0x240 [ 1045.778084][T10921] ? dentry_path_raw+0x33/0x40 [ 1045.782852][T10921] ? strlen+0x38/0x60 [ 1045.786928][T10921] tomoyo_encode2.part.0+0xd0/0x240 [ 1045.792135][T10921] tomoyo_encode+0x32/0x50 [ 1045.796575][T10921] tomoyo_realpath_from_path+0x11e/0x3d0 [ 1045.802232][T10921] tomoyo_path_number_perm+0xff/0x360 [ 1045.807733][T10921] ? _parse_integer+0x12f/0x150 [ 1045.812641][T10921] ? __fget_files+0xa2/0x1c0 [ 1045.817259][T10921] tomoyo_file_ioctl+0x28/0x40 [ 1045.822063][T10921] security_file_ioctl+0x69/0xa0 [ 1045.827034][T10921] ksys_ioctl+0x5a/0x150 [ 1045.831372][T10921] __x64_sys_ioctl+0x47/0x60 [ 1045.835984][T10921] do_syscall_64+0xc7/0x390 [ 1045.840511][T10921] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1045.846406][T10921] RIP: 0033:0x45c479 [ 1045.850314][T10921] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1045.869973][T10921] RSP: 002b:00007f76462b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1045.878395][T10921] RAX: ffffffffffffffda RBX: 00007f76462b46d4 RCX: 000000000045c479 [ 1045.886412][T10921] RDX: 0000000020000100 RSI: 0000000000005412 RDI: 0000000000000004 23:10:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5437, &(0x7f0000000100)) [ 1045.894406][T10921] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1045.902397][T10921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1045.910379][T10921] R13: 0000000000000550 R14: 00000000004c7a3a R15: 0000000000000001 23:10:09 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x87a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:10:09 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)={0x1c, r6, 0x31905e13403123b7, 0x0, 0x0, {0xb, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x5) r7 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r8 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r7, &(0x7f0000001400)="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", 0x52c) sendfile(r7, r8, 0x0, 0x10000) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0x3, &(0x7f0000000040)=0x6, 0x4) [ 1045.976609][T10921] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1046.015196][T10934] FAULT_INJECTION: forcing a failure. [ 1046.015196][T10934] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.079881][T10934] CPU: 1 PID: 10934 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1046.088705][T10934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1046.098764][T10934] Call Trace: [ 1046.102072][T10934] dump_stack+0x11d/0x187 [ 1046.106501][T10934] should_fail.cold+0x5/0xf [ 1046.111026][T10934] __should_failslab+0x82/0xb0 [ 1046.115795][T10934] should_failslab+0x5/0xf [ 1046.120238][T10934] kmem_cache_alloc_trace+0x26/0x5f0 [ 1046.125542][T10934] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1046.130762][T10934] sctp_add_bind_addr+0x90/0x2c0 [ 1046.135769][T10934] sctp_copy_local_addr_list+0x23d/0x290 [ 1046.141502][T10934] ? _crng_backtrack_protect+0xd1/0x100 [ 1046.147076][T10934] ? sctp_v6_is_any+0x3d/0x50 [ 1046.151813][T10934] sctp_copy_one_addr+0x65/0x150 [ 1046.156775][T10934] sctp_bind_addr_copy+0xb3/0x241 [ 1046.161839][T10934] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1046.168065][T10934] sctp_connect_new_asoc+0x10b/0x340 [ 1046.173379][T10934] __sctp_connect+0x282/0x680 23:10:09 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) bind$netrom(r2, &(0x7f0000000140)={{0x3, @default, 0x8}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]}, 0x48) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r3, 0x0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x59}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 1046.178076][T10934] ? _copy_from_user+0x93/0xf0 [ 1046.182887][T10934] __sctp_setsockopt_connectx+0xe9/0x130 [ 1046.188549][T10934] sctp_setsockopt+0x154f/0x5150 [ 1046.193571][T10934] sock_common_setsockopt+0x5d/0x80 [ 1046.198793][T10934] __sys_setsockopt+0x1d6/0x380 [ 1046.203735][T10934] __x64_sys_setsockopt+0x6b/0x80 [ 1046.208886][T10934] do_syscall_64+0xc7/0x390 [ 1046.213481][T10934] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1046.219449][T10934] RIP: 0033:0x45c479 23:10:09 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000080)) getpgrp(0xffffffffffffffff) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x10f, 0x1, 0x5, "17928a54295d6a890f75ef9d30d0bb01", "e1c9946535ec46ef4d3390d6d1f17033177bab66678b6a05a1983d4ed17baef174b7198a80b010bb79103d4b99a754275c7347aca80999797cdec01549cf468beff7d843b66d083f09357cd9319527c70419217f80dd6456a461a716bd4bc4b9a41ba48f9b3979cc40e2efe76f9d383e7d8c8218785e1430fd1cc68f497ce0b9a37da5b5e95e1c7dc284be913e1dc7b346f430e04148df2046431ccae488df5be28a36a487f674ea93645ba37de07ee26cf2a1e8c0293ce42065e736cb63b8b93d2d2be013615a08a61dc1f9b452613809aa5982113dfc1cd8f091d09df0e5d5c0233440f77a9b2ce83ab8f571f3d7c3f06f514b1099cbd54cf2"}, 0x10f, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r4, &(0x7f0000000580), 0x12) r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r5, &(0x7f0000001400)="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", 0x52c) sendfile(r5, r6, 0x0, 0x10000) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000000300)={&(0x7f0000004000/0x2000)=nil, 0x2000}) [ 1046.223357][T10934] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1046.243081][T10934] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1046.251588][T10934] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1046.259571][T10934] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1046.267551][T10934] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1046.275529][T10934] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1046.283502][T10934] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000040 23:10:09 executing program 1 (fault-call:5 fault-nth:65): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:09 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:10:09 executing program 0 (fault-call:5 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x15}) [ 1046.512471][T10960] FAULT_INJECTION: forcing a failure. [ 1046.512471][T10960] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.547703][T10960] CPU: 0 PID: 10960 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1046.556416][T10960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1046.566475][T10960] Call Trace: [ 1046.569783][T10960] dump_stack+0x11d/0x187 [ 1046.574132][T10960] should_fail.cold+0x5/0xf [ 1046.578686][T10960] __should_failslab+0x82/0xb0 [ 1046.583463][T10960] should_failslab+0x5/0xf [ 1046.587893][T10960] kmem_cache_alloc_trace+0x26/0x5f0 [ 1046.593206][T10960] sctp_add_bind_addr+0x90/0x2c0 [ 1046.598174][T10960] sctp_copy_local_addr_list+0x23d/0x290 [ 1046.603828][T10960] ? _crng_backtrack_protect+0xd1/0x100 23:10:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000580), 0x12) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x1e4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_INFO(r1, 0x1, 0x3, &(0x7f0000000180)=""/13) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x2, 0x10000) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='\x00', 0x1}], 0x2) [ 1046.609449][T10960] ? sctp_v6_is_any+0x3d/0x50 [ 1046.614152][T10960] sctp_copy_one_addr+0x65/0x150 [ 1046.619109][T10960] sctp_bind_addr_copy+0xb3/0x241 [ 1046.624191][T10960] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1046.630346][T10960] sctp_connect_new_asoc+0x10b/0x340 [ 1046.635639][T10960] __sctp_connect+0x282/0x680 [ 1046.640327][T10960] ? _copy_from_user+0x93/0xf0 [ 1046.645105][T10960] __sctp_setsockopt_connectx+0xe9/0x130 [ 1046.650758][T10960] sctp_setsockopt+0x154f/0x5150 [ 1046.655744][T10960] sock_common_setsockopt+0x5d/0x80 [ 1046.660953][T10960] __sys_setsockopt+0x1d6/0x380 [ 1046.665839][T10960] __x64_sys_setsockopt+0x6b/0x80 [ 1046.670904][T10960] do_syscall_64+0xc7/0x390 [ 1046.675431][T10960] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1046.681313][T10960] RIP: 0033:0x45c479 [ 1046.685215][T10960] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1046.705160][T10960] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1046.713560][T10960] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1046.721642][T10960] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1046.729691][T10960] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1046.737676][T10960] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1046.745657][T10960] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000041 23:10:09 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000003000/0x3000)=nil, 0x3000}) 23:10:09 executing program 1 (fault-call:5 fault-nth:66): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:09 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x52c) sendfile(r1, r2, 0x0, 0x10000) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x6, 0x6, 0x4}) r3 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:10:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5441, &(0x7f0000000100)) [ 1046.948278][T10978] FAULT_INJECTION: forcing a failure. [ 1046.948278][T10978] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.008003][T10978] CPU: 0 PID: 10978 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1047.016722][T10978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1047.026777][T10978] Call Trace: [ 1047.030100][T10978] dump_stack+0x11d/0x187 [ 1047.034444][T10978] should_fail.cold+0x5/0xf [ 1047.039020][T10978] __should_failslab+0x82/0xb0 [ 1047.043814][T10978] should_failslab+0x5/0xf [ 1047.048299][T10978] kmem_cache_alloc_trace+0x26/0x5f0 23:10:10 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x202, 0x208) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x9, 0x280000) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='+', 0x1}], 0x2) 23:10:10 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e21, 0x8, @mcast2, 0xd357}}}, &(0x7f00000002c0)=0x84) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 1047.053613][T10978] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1047.058850][T10978] sctp_add_bind_addr+0x90/0x2c0 [ 1047.063809][T10978] sctp_copy_local_addr_list+0x23d/0x290 [ 1047.069505][T10978] ? _crng_backtrack_protect+0xd1/0x100 [ 1047.075068][T10978] ? sctp_v6_is_any+0x3d/0x50 [ 1047.079757][T10978] sctp_copy_one_addr+0x65/0x150 [ 1047.084738][T10978] sctp_bind_addr_copy+0xb3/0x241 [ 1047.089778][T10978] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1047.095958][T10978] sctp_connect_new_asoc+0x10b/0x340 [ 1047.101237][T10978] __sctp_connect+0x282/0x680 [ 1047.105901][T10978] ? _copy_from_user+0x93/0xf0 [ 1047.110744][T10978] __sctp_setsockopt_connectx+0xe9/0x130 [ 1047.116401][T10978] sctp_setsockopt+0x154f/0x5150 [ 1047.121367][T10978] sock_common_setsockopt+0x5d/0x80 [ 1047.126592][T10978] __sys_setsockopt+0x1d6/0x380 [ 1047.131517][T10978] __x64_sys_setsockopt+0x6b/0x80 [ 1047.136564][T10978] do_syscall_64+0xc7/0x390 [ 1047.141092][T10978] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1047.147061][T10978] RIP: 0033:0x45c479 23:10:10 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0x10, r1, 0x8000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000001000/0xf000)=nil, 0xf000}, 0x3}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 1047.151123][T10978] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1047.170732][T10978] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1047.179148][T10978] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1047.187129][T10978] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1047.195109][T10978] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1047.203091][T10978] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1047.211072][T10978] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000042 23:10:10 executing program 1 (fault-call:5 fault-nth:67): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000580), 0x12) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:10:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x15}) [ 1047.469473][T11006] FAULT_INJECTION: forcing a failure. [ 1047.469473][T11006] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.491213][T11006] CPU: 1 PID: 11006 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1047.499932][T11006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1047.510019][T11006] Call Trace: [ 1047.513331][T11006] dump_stack+0x11d/0x187 [ 1047.517701][T11006] should_fail.cold+0x5/0xf [ 1047.522297][T11006] __should_failslab+0x82/0xb0 [ 1047.527185][T11006] should_failslab+0x5/0xf [ 1047.531737][T11006] kmem_cache_alloc_trace+0x26/0x5f0 [ 1047.537058][T11006] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1047.542283][T11006] sctp_add_bind_addr+0x90/0x2c0 [ 1047.547275][T11006] sctp_copy_local_addr_list+0x23d/0x290 [ 1047.552997][T11006] ? _crng_backtrack_protect+0xd1/0x100 [ 1047.558572][T11006] ? sctp_v6_is_any+0x3d/0x50 [ 1047.563270][T11006] sctp_copy_one_addr+0x65/0x150 [ 1047.568234][T11006] sctp_bind_addr_copy+0xb3/0x241 [ 1047.573288][T11006] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1047.579469][T11006] sctp_connect_new_asoc+0x10b/0x340 [ 1047.584810][T11006] __sctp_connect+0x282/0x680 [ 1047.589503][T11006] ? _copy_from_user+0x93/0xf0 [ 1047.594319][T11006] __sctp_setsockopt_connectx+0xe9/0x130 [ 1047.599975][T11006] sctp_setsockopt+0x154f/0x5150 [ 1047.605000][T11006] sock_common_setsockopt+0x5d/0x80 [ 1047.610224][T11006] __sys_setsockopt+0x1d6/0x380 [ 1047.615107][T11006] __x64_sys_setsockopt+0x6b/0x80 [ 1047.620159][T11006] do_syscall_64+0xc7/0x390 [ 1047.624682][T11006] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1047.630585][T11006] RIP: 0033:0x45c479 [ 1047.634501][T11006] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1047.654123][T11006] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1047.662568][T11006] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 23:10:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002dbd7000fbdbdf250000000006001b004e24000005000d000000000005000500000000001400080076657468315f746f5f626f6e6400000006000e0000a0000008001700", @ANYRES32=r2, @ANYBLOB="0500210001f413d0a8756b2d7f3b5fa50000000500220001000000f9e9b01b047ac34004eec66a152f55b58fa5fba3e8c89db66add9701a2ef915742dcea4927b8d92e5b92f2b54c9db219de1cac90dec2426e2713a3790f412d46bd7822730744b5e54045d2b8"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4410) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x8000) ioctl$void(r4, 0x5450) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1047.670562][T11006] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1047.678546][T11006] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1047.686526][T11006] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1047.694604][T11006] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000043 23:10:10 executing program 1 (fault-call:5 fault-nth:68): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002dbd7000fbdbdf250000000006001b004e24000005000d000000000005000500000000001400080076657468315f746f5f626f6e6400000006000e0000a0000008001700", @ANYRES32=r2, @ANYBLOB="0500210001f413d0a8756b2d7f3b5fa50000000500220001000000f9e9b01b047ac34004eec66a152f55b58fa5fba3e8c89db66add9701a2ef915742dcea4927b8d92e5b92f2b54c9db219de1cac90dec2426e2713a3790f412d46bd7822730744b5e54045d2b8"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4410) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x8000) ioctl$void(r4, 0x5450) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1047.953847][T11019] FAULT_INJECTION: forcing a failure. [ 1047.953847][T11019] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.985509][T11019] CPU: 1 PID: 11019 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1047.994232][T11019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1048.004289][T11019] Call Trace: [ 1048.007600][T11019] dump_stack+0x11d/0x187 [ 1048.011981][T11019] should_fail.cold+0x5/0xf [ 1048.016531][T11019] __should_failslab+0x82/0xb0 [ 1048.021310][T11019] should_failslab+0x5/0xf [ 1048.025738][T11019] kmem_cache_alloc_trace+0x26/0x5f0 [ 1048.031072][T11019] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1048.036329][T11019] sctp_add_bind_addr+0x90/0x2c0 [ 1048.041294][T11019] sctp_copy_local_addr_list+0x23d/0x290 [ 1048.046959][T11019] ? _crng_backtrack_protect+0xd1/0x100 [ 1048.052547][T11019] ? sctp_v6_is_any+0x3d/0x50 [ 1048.057301][T11019] sctp_copy_one_addr+0x65/0x150 [ 1048.062268][T11019] sctp_bind_addr_copy+0xb3/0x241 [ 1048.067355][T11019] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1048.073598][T11019] sctp_connect_new_asoc+0x10b/0x340 [ 1048.078913][T11019] __sctp_connect+0x282/0x680 [ 1048.083776][T11019] ? _copy_from_user+0x93/0xf0 [ 1048.088578][T11019] __sctp_setsockopt_connectx+0xe9/0x130 [ 1048.094351][T11019] sctp_setsockopt+0x154f/0x5150 [ 1048.099330][T11019] sock_common_setsockopt+0x5d/0x80 [ 1048.104557][T11019] __sys_setsockopt+0x1d6/0x380 [ 1048.109544][T11019] __x64_sys_setsockopt+0x6b/0x80 [ 1048.114595][T11019] do_syscall_64+0xc7/0x390 [ 1048.119199][T11019] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1048.125101][T11019] RIP: 0033:0x45c479 [ 1048.129114][T11019] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 23:10:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5450, &(0x7f0000000100)) 23:10:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002dbd7000fbdbdf250000000006001b004e24000005000d000000000005000500000000001400080076657468315f746f5f626f6e6400000006000e0000a0000008001700", @ANYRES32=r2, @ANYBLOB="0500210001f413d0a8756b2d7f3b5fa50000000500220001000000f9e9b01b047ac34004eec66a152f55b58fa5fba3e8c89db66add9701a2ef915742dcea4927b8d92e5b92f2b54c9db219de1cac90dec2426e2713a3790f412d46bd7822730744b5e54045d2b8"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4410) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x8000) ioctl$void(r4, 0x5450) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1048.148951][T11019] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1048.157401][T11019] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1048.165385][T11019] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1048.173375][T11019] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1048.181360][T11019] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1048.189343][T11019] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000044 23:10:11 executing program 1 (fault-call:5 fault-nth:69): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:11 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x48200, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x52c) sendfile(r1, r2, 0x0, 0x10000) sendto$netrom(r1, &(0x7f00000000c0)="64b265a014184819e1f3c11601c25045f27bbe9e9be62a38ca6e5380da59ba", 0x1f, 0x4000005, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x808, 0x4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:10:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x2, &(0x7f0000000100)={0x15}) [ 1048.453258][T11034] FAULT_INJECTION: forcing a failure. [ 1048.453258][T11034] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.485389][T11034] CPU: 1 PID: 11034 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1048.494106][T11034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1048.504267][T11034] Call Trace: [ 1048.507612][T11034] dump_stack+0x11d/0x187 [ 1048.511985][T11034] should_fail.cold+0x5/0xf [ 1048.516517][T11034] __should_failslab+0x82/0xb0 [ 1048.521298][T11034] should_failslab+0x5/0xf [ 1048.525778][T11034] kmem_cache_alloc_trace+0x26/0x5f0 [ 1048.531107][T11034] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1048.536340][T11034] sctp_add_bind_addr+0x90/0x2c0 [ 1048.541322][T11034] sctp_copy_local_addr_list+0x23d/0x290 [ 1048.546969][T11034] ? _crng_backtrack_protect+0xd1/0x100 [ 1048.552541][T11034] ? sctp_v6_is_any+0x3d/0x50 [ 1048.557244][T11034] sctp_copy_one_addr+0x65/0x150 [ 1048.562276][T11034] sctp_bind_addr_copy+0xb3/0x241 [ 1048.567334][T11034] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1048.573654][T11034] sctp_connect_new_asoc+0x10b/0x340 [ 1048.578965][T11034] __sctp_connect+0x282/0x680 [ 1048.583671][T11034] ? _copy_from_user+0x93/0xf0 [ 1048.588572][T11034] __sctp_setsockopt_connectx+0xe9/0x130 [ 1048.594232][T11034] sctp_setsockopt+0x154f/0x5150 [ 1048.599203][T11034] sock_common_setsockopt+0x5d/0x80 [ 1048.604433][T11034] __sys_setsockopt+0x1d6/0x380 [ 1048.609309][T11034] __x64_sys_setsockopt+0x6b/0x80 [ 1048.614424][T11034] do_syscall_64+0xc7/0x390 [ 1048.618953][T11034] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1048.624862][T11034] RIP: 0033:0x45c479 [ 1048.628770][T11034] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1048.648378][T11034] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1048.656798][T11034] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1048.664859][T11034] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1048.672851][T11034] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1048.680914][T11034] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1048.688897][T11034] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000045 23:10:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002dbd7000fbdbdf250000000006001b004e24000005000d000000000005000500000000001400080076657468315f746f5f626f6e6400000006000e0000a0000008001700", @ANYRES32=r2, @ANYBLOB="0500210001f413d0a8756b2d7f3b5fa50000000500220001000000f9e9b01b047ac34004eec66a152f55b58fa5fba3e8c89db66add9701a2ef915742dcea4927b8d92e5b92f2b54c9db219de1cac90dec2426e2713a3790f412d46bd7822730744b5e54045d2b8"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4410) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x8000) ioctl$void(r4, 0x5450) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 1048.699395][ T26] audit: type=1804 audit(1583190611.719:3997): pid=11038 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir167061834/syzkaller.2p5nEZ/1077/file0" dev="sda1" ino=17521 res=1 23:10:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002dbd7000fbdbdf250000000006001b004e24000005000d000000000005000500000000001400080076657468315f746f5f626f6e6400000006000e0000a0000008001700", @ANYRES32=r2, @ANYBLOB="0500210001f413d0a8756b2d7f3b5fa50000000500220001000000f9e9b01b047ac34004eec66a152f55b58fa5fba3e8c89db66add9701a2ef915742dcea4927b8d92e5b92f2b54c9db219de1cac90dec2426e2713a3790f412d46bd7822730744b5e54045d2b8"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4410) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x8000) ioctl$void(r4, 0x5450) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002dbd7000fbdbdf250000000006001b004e24000005000d000000000005000500000000001400080076657468315f746f5f626f6e6400000006000e0000a0000008001700", @ANYRES32=r2, @ANYBLOB="0500210001f413d0a8756b2d7f3b5fa50000000500220001000000f9e9b01b047ac34004eec66a152f55b58fa5fba3e8c89db66add9701a2ef915742dcea4927b8d92e5b92f2b54c9db219de1cac90dec2426e2713a3790f412d46bd7822730744b5e54045d2b8"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4410) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x8000) ioctl$void(r4, 0x5450) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) 23:10:12 executing program 1 (fault-call:5 fault-nth:70): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5451, &(0x7f0000000100)) 23:10:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002dbd7000fbdbdf250000000006001b004e24000005000d000000000005000500000000001400080076657468315f746f5f626f6e6400000006000e0000a0000008001700", @ANYRES32=r2, @ANYBLOB="0500210001f413d0a8756b2d7f3b5fa50000000500220001000000f9e9b01b047ac34004eec66a152f55b58fa5fba3e8c89db66add9701a2ef915742dcea4927b8d92e5b92f2b54c9db219de1cac90dec2426e2713a3790f412d46bd7822730744b5e54045d2b8"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4410) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x8000) ioctl$void(r3, 0x5450) [ 1049.374933][T11058] FAULT_INJECTION: forcing a failure. [ 1049.374933][T11058] name failslab, interval 1, probability 0, space 0, times 0 [ 1049.441889][T11058] CPU: 1 PID: 11058 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1049.450608][T11058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1049.460755][T11058] Call Trace: [ 1049.464081][T11058] dump_stack+0x11d/0x187 [ 1049.468428][T11058] should_fail.cold+0x5/0xf [ 1049.472955][T11058] __should_failslab+0x82/0xb0 [ 1049.477732][T11058] should_failslab+0x5/0xf [ 1049.482159][T11058] kmem_cache_alloc_trace+0x26/0x5f0 [ 1049.487461][T11058] ? delay_tsc+0x8a/0xb0 [ 1049.491780][T11058] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1049.496996][T11058] sctp_add_bind_addr+0x90/0x2c0 [ 1049.502064][T11058] sctp_copy_local_addr_list+0x23d/0x290 [ 1049.507722][T11058] ? _crng_backtrack_protect+0xd1/0x100 [ 1049.513296][T11058] ? sctp_v6_is_any+0x3d/0x50 [ 1049.517996][T11058] sctp_copy_one_addr+0x65/0x150 [ 1049.522959][T11058] sctp_bind_addr_copy+0xb3/0x241 [ 1049.528010][T11058] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1049.534189][T11058] sctp_connect_new_asoc+0x10b/0x340 [ 1049.539591][T11058] __sctp_connect+0x282/0x680 [ 1049.544296][T11058] ? _copy_from_user+0x93/0xf0 [ 1049.549184][T11058] __sctp_setsockopt_connectx+0xe9/0x130 [ 1049.554843][T11058] sctp_setsockopt+0x154f/0x5150 [ 1049.559909][T11058] sock_common_setsockopt+0x5d/0x80 [ 1049.565195][T11058] __sys_setsockopt+0x1d6/0x380 [ 1049.570082][T11058] __x64_sys_setsockopt+0x6b/0x80 [ 1049.575233][T11058] do_syscall_64+0xc7/0x390 [ 1049.579799][T11058] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1049.585700][T11058] RIP: 0033:0x45c479 [ 1049.589641][T11058] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1049.609258][T11058] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1049.617685][T11058] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1049.625670][T11058] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1049.633657][T11058] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1049.641639][T11058] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1049.649665][T11058] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000046 23:10:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002dbd7000fbdbdf250000000006001b004e24000005000d000000000005000500000000001400080076657468315f746f5f626f6e6400000006000e0000a0000008001700", @ANYRES32=r2, @ANYBLOB="0500210001f413d0a8756b2d7f3b5fa50000000500220001000000f9e9b01b047ac34004eec66a152f55b58fa5fba3e8c89db66add9701a2ef915742dcea4927b8d92e5b92f2b54c9db219de1cac90dec2426e2713a3790f412d46bd7822730744b5e54045d2b8"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4410) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x8000) 23:10:12 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x7, 0x8000) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000280)={0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0xb}, &(0x7f0000000000)=0x90) r3 = geteuid() r4 = getgid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x60001000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="d35109ad9b605878040bf1dfcab78119f1416fcd2fddd2f79c68762c4e33357e12db84ed0f5c351f127d9fc24febfe9925eb4cbc90544f3bed0bea52ffae8bd3555b0cc90311a3c969c0fc497d80da3666671230468cec8f6033f4a288340f52357fe71d14efeb50c3bb72868d90c8fd5a772bb750f377aaaabbac700dcdfc651537cd2558d84aa9c9969fe0d71f5db21cb23385ca8096e135703282bf3415a2d484ccc07d8177a5d764c43963355c307a0c532ce44c1638b02cc9674239cdddfff1535a0fb892006583c6491563d785ea4dfbcb1c3c38b64c3f59fc9b00565aad2358b48e5d4f05865f1b3e42ac11e20f9d6ed2379493dc84d0a002f8"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x4044) setuid(r3) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:10:12 executing program 1 (fault-call:5 fault-nth:71): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x10, &(0x7f0000000100)={0x15}) [ 1049.886085][T11076] FAULT_INJECTION: forcing a failure. [ 1049.886085][T11076] name failslab, interval 1, probability 0, space 0, times 0 [ 1049.926340][T11076] CPU: 1 PID: 11076 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1049.935057][T11076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1049.945115][T11076] Call Trace: [ 1049.948430][T11076] dump_stack+0x11d/0x187 [ 1049.952849][T11076] should_fail.cold+0x5/0xf [ 1049.957376][T11076] __should_failslab+0x82/0xb0 [ 1049.962158][T11076] should_failslab+0x5/0xf [ 1049.966626][T11076] kmem_cache_alloc_trace+0x26/0x5f0 [ 1049.971954][T11076] ? delay_tsc+0x8a/0xb0 [ 1049.976230][T11076] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1049.981456][T11076] sctp_add_bind_addr+0x90/0x2c0 [ 1049.986422][T11076] sctp_copy_local_addr_list+0x23d/0x290 [ 1049.992094][T11076] ? _crng_backtrack_protect+0xd1/0x100 [ 1049.997661][T11076] ? sctp_v6_is_any+0x3d/0x50 [ 1050.002362][T11076] sctp_copy_one_addr+0x65/0x150 [ 1050.007325][T11076] sctp_bind_addr_copy+0xb3/0x241 [ 1050.012383][T11076] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1050.018556][T11076] sctp_connect_new_asoc+0x10b/0x340 [ 1050.023867][T11076] __sctp_connect+0x282/0x680 [ 1050.028624][T11076] ? _copy_from_user+0x93/0xf0 [ 1050.033418][T11076] __sctp_setsockopt_connectx+0xe9/0x130 [ 1050.039078][T11076] sctp_setsockopt+0x154f/0x5150 [ 1050.044052][T11076] sock_common_setsockopt+0x5d/0x80 [ 1050.049282][T11076] __sys_setsockopt+0x1d6/0x380 [ 1050.054192][T11076] __x64_sys_setsockopt+0x6b/0x80 [ 1050.059290][T11076] do_syscall_64+0xc7/0x390 [ 1050.063822][T11076] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1050.069729][T11076] RIP: 0033:0x45c479 [ 1050.073755][T11076] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1050.093396][T11076] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1050.101822][T11076] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1050.109804][T11076] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1050.117783][T11076] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 23:10:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002dbd7000fbdbdf250000000006001b004e24000005000d000000000005000500000000001400080076657468315f746f5f626f6e6400000006000e0000a0000008001700", @ANYRES32=r2, @ANYBLOB="0500210001f413d0a8756b2d7f3b5fa50000000500220001000000f9e9b01b047ac34004eec66a152f55b58fa5fba3e8c89db66add9701a2ef915742dcea4927b8d92e5b92f2b54c9db219de1cac90dec2426e2713a3790f412d46bd7822730744b5e54045d2b8"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4410) socket$inet6_sctp(0xa, 0x1, 0x84) 23:10:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002dbd7000fbdbdf250000000006001b004e24000005000d000000000005000500000000001400080076657468315f746f5f626f6e6400000006000e0000a0000008001700", @ANYRES32=r2, @ANYBLOB="0500210001f413d0a8756b2d7f3b5fa50000000500220001000000f9e9b01b047ac34004eec66a152f55b58fa5fba3e8c89db66add9701a2ef915742dcea4927b8d92e5b92f2b54c9db219de1cac90dec2426e2713a3790f412d46bd7822730744b5e54045d2b8"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4410) [ 1050.125771][T11076] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1050.133856][T11076] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000047 23:10:13 executing program 1 (fault-call:5 fault-nth:72): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5452, &(0x7f0000000100)) 23:10:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) [ 1050.403354][T11090] FAULT_INJECTION: forcing a failure. [ 1050.403354][T11090] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.476791][T11090] CPU: 1 PID: 11090 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 1050.485516][T11090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1050.495581][T11090] Call Trace: [ 1050.498899][T11090] dump_stack+0x11d/0x187 [ 1050.503384][T11090] should_fail.cold+0x5/0xf [ 1050.508000][T11090] __should_failslab+0x82/0xb0 [ 1050.512813][T11090] should_failslab+0x5/0xf [ 1050.517248][T11090] kmem_cache_alloc_trace+0x26/0x5f0 [ 1050.522686][T11090] ? __sctp_v6_cmp_addr+0x114/0x2a0 [ 1050.528089][T11090] sctp_add_bind_addr+0x90/0x2c0 [ 1050.533056][T11090] sctp_copy_local_addr_list+0x23d/0x290 [ 1050.538738][T11090] ? _crng_backtrack_protect+0xd1/0x100 [ 1050.544315][T11090] ? sctp_v6_is_any+0x3d/0x50 [ 1050.549016][T11090] sctp_copy_one_addr+0x65/0x150 [ 1050.553997][T11090] sctp_bind_addr_copy+0xb3/0x241 [ 1050.559057][T11090] sctp_assoc_set_bind_addr_from_ep+0xe2/0x100 [ 1050.565905][T11090] sctp_connect_new_asoc+0x10b/0x340 [ 1050.571236][T11090] __sctp_connect+0x282/0x680 [ 1050.575930][T11090] ? _copy_from_user+0x93/0xf0 [ 1050.580716][T11090] __sctp_setsockopt_connectx+0xe9/0x130 [ 1050.586371][T11090] sctp_setsockopt+0x154f/0x5150 [ 1050.591363][T11090] sock_common_setsockopt+0x5d/0x80 [ 1050.596720][T11090] __sys_setsockopt+0x1d6/0x380 [ 1050.601686][T11090] __x64_sys_setsockopt+0x6b/0x80 [ 1050.606819][T11090] do_syscall_64+0xc7/0x390 [ 1050.611443][T11090] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1050.617352][T11090] RIP: 0033:0x45c479 [ 1050.621352][T11090] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1050.641067][T11090] RSP: 002b:00007ff111a78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1050.649627][T11090] RAX: ffffffffffffffda RBX: 00007ff111a796d4 RCX: 000000000045c479 [ 1050.657614][T11090] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 1050.665599][T11090] RBP: 000000000076bf20 R08: 000000000000001c R09: 0000000000000000 [ 1050.673589][T11090] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000005 [ 1050.681572][T11090] R13: 0000000000000adc R14: 00000000004d6b00 R15: 0000000000000048 23:10:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) 23:10:13 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = open(&(0x7f0000000080)='./file0\x00', 0x4800, 0x148) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x52c) sendfile(r1, r2, 0x0, 0x10000) getsockopt$inet6_tcp_buf(r1, 0x6, 0x8, &(0x7f0000000200)=""/218, &(0x7f0000000000)=0xda) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:10:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 23:10:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x4c00, &(0x7f0000000100)={0x15}) 23:10:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x545d, &(0x7f0000000100)) 23:10:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, 0x0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, 0x0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x2, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:15 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0) recvmsg$can_j1939(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x7, 0x30}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000002c0)={r2, 0x3, 0xfff, 0x0, 0x401, 0xb2}, &(0x7f0000000300)=0x14) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x403, @rand_addr="9eb1c7436d8352353357379f27cc86a0"}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x144, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000200)={0x5, 0x9ff000, 0x4, 0x0, 0x4}) 23:10:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, 0x0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x4c01, &(0x7f0000000100)={0x15}) [ 1052.147299][T11146] Unknown ioctl 1079006226 23:10:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x3, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:15 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x4, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5460, &(0x7f0000000100)) 23:10:15 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x5, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:15 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 1052.941578][T11179] Unknown ioctl 1079006226 23:10:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:16 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a", 0x52c) sendfile(r1, r2, 0x0, 0x10000) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=r3) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r4, &(0x7f0000000580), 0x12) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r6, 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r6, 0xc008ae09, &(0x7f0000000240)=""/226) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000140)={0xa00000, 0x5, 0x1, r1, 0x0, &(0x7f0000000100)={0x3900a9, 0x8, [], @value=0x7ff}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000200), 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:10:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x7, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 1053.246005][ T26] audit: type=1804 audit(1583190616.319:3998): pid=11191 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir167061834/syzkaller.2p5nEZ/1081/file0" dev="sda1" ino=17048 res=1 23:10:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x4c80, &(0x7f0000000100)={0x15}) [ 1053.382005][ T26] audit: type=1804 audit(1583190616.379:3999): pid=11191 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir167061834/syzkaller.2p5nEZ/1081/file0" dev="sda1" ino=17048 res=1 23:10:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x8, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5608, &(0x7f0000000100)) 23:10:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x9, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:16 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0xa, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:17 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:17 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000580), 0x12) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x105201, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:10:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0xb, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:17 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5409, &(0x7f0000000100)={0x15}) 23:10:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0xc, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 23:10:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x6364, &(0x7f0000000100)) 23:10:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0xd, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 23:10:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x10, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 23:10:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 23:10:18 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x4, 0xc4, 0xa0, 0x605, 0xd0f}, 0x14) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x15}}, 0x401}, 0x1c) 23:10:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x11, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 23:10:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x540b, &(0x7f0000000100)={0x15}) 23:10:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x12, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 23:10:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x8912, &(0x7f0000000100)) 23:10:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x13, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 23:10:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 23:10:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x14, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 23:10:19 executing program 5: prctl$PR_GET_NAME(0x10, &(0x7f0000000240)=""/177) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000140), &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r1, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1000000000, 0xfffffffffffffffe]}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000009c0)={0x800, 0x0, 0x3, 0x400, 0x80000000, 0x1, 0xa1cc, 0x6, r1}, &(0x7f0000000a00)=0x20) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r1, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x107400, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:10:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x15, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, 0x0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x540c, &(0x7f0000000100)={0x15}) 23:10:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, 0x0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x16, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x8933, &(0x7f0000000100)) 23:10:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x17, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, 0x0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x18, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:20 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=0x60) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000200)={r2, 0x503, 0x5, "b47f0a3b018b6c4edbac02e3b0833bb03524650c3f09b30ba34dceb3dca5f953d91ef15f43909ad70247c9a04bb2173deeda92cd4122c587e7b86a0078157d6144eeb73e4e7b1d2fe8c8ef9cbb124643dcaca545d91fff5ff95300df"}) 23:10:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x19, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x540d, &(0x7f0000000100)={0x15}) 23:10:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}}, 0x0) 23:10:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x400454ca, &(0x7f0000000100)) 23:10:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x21, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}}, 0x0) 23:10:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x22, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}}, 0x0) 23:10:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x23, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:21 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000580), 0x12) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000000)={0x0, 0x8}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:10:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5413, &(0x7f0000000100)={0x15}) 23:10:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x24, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x40049409, &(0x7f0000000100)) 23:10:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:22 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x25, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:22 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:22 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x400000, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:10:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:22 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5414, &(0x7f0000000100)={0x15}) 23:10:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x40082406, &(0x7f0000000100)) 23:10:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x71, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:23 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}], 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:10:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x72, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x75, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5415, &(0x7f0000000100)={0x15}) 23:10:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x76, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x40186366, &(0x7f0000000100)) 23:10:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x77, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x78, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:24 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000000c0)=0x49) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:10:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x79, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) 23:10:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5416, &(0x7f0000000100)={0x15}) 23:10:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x7b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) 23:10:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x4020940d, &(0x7f0000000100)) 23:10:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x7c, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) 23:10:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x7d, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:25 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x8a220, 0x0) write$FUSE_POLL(r1, &(0x7f0000000300)={0x18, 0x0, 0x3, {0x8}}, 0x18) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000580), 0x12) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00') getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={r3, 0x8c, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x79, @loopback, 0x43}, @in6={0xa, 0x4e20, 0x1000, @rand_addr="6982975d9074e2513a0ac9292a76a5d0", 0x7fff}, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0xfffffffd}, @in6={0xa, 0x4e20, 0x1, @mcast2, 0x180}, @in6={0xa, 0x4e20, 0x1ff, @ipv4={[], [], @multicast1}, 0x9}]}, &(0x7f0000000140)=0x10) r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r4, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000380)) 23:10:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 23:10:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x82, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, 0x0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5418, &(0x7f0000000100)={0x15}) 23:10:26 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x83, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, 0x0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x80045430, &(0x7f0000000100)) 23:10:26 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0x2, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, 0x0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:26 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0x3, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:26 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:26 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0x4, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:26 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:27 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0x5, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x541b, &(0x7f0000000100)={0x15}) 23:10:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x80045432, &(0x7f0000000100)) 23:10:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0x6, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0x7, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0x8, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:27 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:28 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0x9, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:28 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x541d, &(0x7f0000000100)={0x15}) 23:10:28 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xb, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x80045440, &(0x7f0000000100)) 23:10:28 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 23:10:28 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0x10, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:28 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0x14, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 23:10:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 23:10:29 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:10:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 23:10:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 23:10:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x541e, &(0x7f0000000100)={0x15}) 23:10:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x80081272, &(0x7f0000000100)) 23:10:29 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x2, @loopback}], 0x1c) 23:10:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 23:10:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x541e, &(0x7f0000000100)={0x15}) 23:10:29 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x3, @loopback}], 0x1c) 23:10:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 23:10:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 23:10:30 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x4, @loopback}], 0x1c) 23:10:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 23:10:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x80086301, &(0x7f0000000100)) 23:10:30 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0xa, @loopback}], 0x1c) 23:10:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, 0x0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, 0x0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:30 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0xfc, @loopback}], 0x1c) 23:10:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5421, &(0x7f0000000100)={0x15}) 23:10:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, 0x0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x300, @loopback}], 0x1c) 23:10:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0xa00, @loopback}], 0x1c) 23:10:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0xc0045878, &(0x7f0000000100)) 23:10:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}}, 0x0) 23:10:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5423, &(0x7f0000000100)={0x15}) 23:10:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x80fe, @loopback}], 0x1c) 23:10:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}}, 0x0) 23:10:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0xc0fe, @loopback}], 0x1c) 23:10:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}}, 0x0) 23:10:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0xfc00, @loopback}], 0x1c) 23:10:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0xc0045878, &(0x7f0000000100)) 23:10:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5424, &(0x7f0000000100)={0x15}) 23:10:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0xfe80, @loopback}], 0x1c) 23:10:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0xfec0, @loopback}], 0x1c) 23:10:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0xff00, @loopback}], 0x1c) 23:10:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x1000000, @loopback}], 0x1c) 23:10:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0xc0189436, &(0x7f0000000100)) 23:10:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5425, &(0x7f0000000100)={0x15}) 23:10:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x2000000, @loopback}], 0x1c) 23:10:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x3000000, @loopback}], 0x1c) 23:10:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x4000000, @loopback}], 0x1c) 23:10:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0xc020660b, &(0x7f0000000100)) 23:10:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5427, &(0x7f0000000100)={0x15}) 23:10:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0xa000000, @loopback}], 0x1c) 23:10:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0xfc000000, @loopback}], 0x1c) 23:10:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}}, 0x0) 23:10:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0xfe800000, @loopback}], 0x1c) 23:10:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0xc0189436, &(0x7f0000000100)) 23:10:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)) 23:10:36 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0xfec00000, @loopback}], 0x1c) 23:10:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5428, &(0x7f0000000100)={0x15}) 23:10:36 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0xff000000, @loopback}], 0x1c) 23:10:36 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x2}}], 0x1c) 23:10:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5421, &(0x7f0000000100)={0x15}) 23:10:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x2}) 23:10:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5437, &(0x7f0000000100)={0x15}) 23:10:37 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x3}}], 0x1c) 23:10:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002dbd7000fbdbdf250000000006001b004e24000005000d000000000005000500000000001400080076657468315f746f5f626f6e6400000006000e0000a0000008001700", @ANYRES32=r2, @ANYBLOB="0500210001f413d0a8756b2d7f3b5fa50000000500220001000000f9e9b01b047ac34004eec66a152f55b58fa5fba3e8c89db66add9701a2ef915742dcea4927b8d92e5b92f2b54c9db219de1cac90dec2426e2713a3790f412d46bd7822730744b5e54045d2b8"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4410) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x8000) ioctl$void(r4, 0x5450) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:10:38 executing program 2 (fault-call:2 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x3}) [ 1074.992846][T12093] FAULT_INJECTION: forcing a failure. [ 1074.992846][T12093] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.021046][T12093] CPU: 0 PID: 12093 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 1075.029761][T12093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1075.039822][T12093] Call Trace: [ 1075.043126][T12093] dump_stack+0x11d/0x187 [ 1075.047490][T12093] should_fail.cold+0x5/0xf [ 1075.052028][T12093] __should_failslab+0x82/0xb0 [ 1075.056985][T12093] should_failslab+0x5/0xf [ 1075.061423][T12093] kmem_cache_alloc_node+0x35/0x680 [ 1075.066697][T12093] __alloc_skb+0x8d/0x360 [ 1075.071109][T12093] netlink_sendmsg+0x662/0x8a0 [ 1075.075905][T12093] ? netlink_unicast+0x4c0/0x4c0 [ 1075.080854][T12093] sock_sendmsg+0x98/0xc0 [ 1075.085198][T12093] ____sys_sendmsg+0x493/0x4c0 [ 1075.089994][T12093] ___sys_sendmsg+0xb5/0x100 [ 1075.094678][T12093] ? __rcu_read_unlock+0x66/0x2f0 [ 1075.099719][T12093] ? __fget_files+0xa2/0x1c0 [ 1075.104328][T12093] ? __fget_light+0xc0/0x1a0 [ 1075.108952][T12093] ? __fdget+0x29/0x30 [ 1075.113117][T12093] ? sockfd_lookup_light+0xa5/0x100 [ 1075.118339][T12093] __sys_sendmsg+0x9b/0x150 [ 1075.122955][T12093] __x64_sys_sendmsg+0x4c/0x60 [ 1075.127831][T12093] do_syscall_64+0xc7/0x390 [ 1075.132359][T12093] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1075.138274][T12093] RIP: 0033:0x45c479 [ 1075.142184][T12093] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1075.161825][T12093] RSP: 002b:00007fac98322c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1075.170369][T12093] RAX: ffffffffffffffda RBX: 00007fac983236d4 RCX: 000000000045c479 [ 1075.178364][T12093] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 23:10:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5441, &(0x7f0000000100)={0x15}) [ 1075.186354][T12093] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1075.194340][T12093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1075.202368][T12093] R13: 0000000000000943 R14: 00000000004d5258 R15: 0000000000000000 23:10:38 executing program 2 (fault-call:2 fault-nth:1): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x4}}], 0x1c) [ 1075.715665][T12110] FAULT_INJECTION: forcing a failure. [ 1075.715665][T12110] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.742738][T12110] CPU: 0 PID: 12110 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 1075.751463][T12110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1075.761530][T12110] Call Trace: [ 1075.764894][T12110] dump_stack+0x11d/0x187 [ 1075.769307][T12110] should_fail.cold+0x5/0xf [ 1075.773844][T12110] __should_failslab+0x82/0xb0 [ 1075.778628][T12110] should_failslab+0x5/0xf [ 1075.783067][T12110] kmem_cache_alloc_node_trace+0x37/0x610 [ 1075.788811][T12110] ? memcg_kmem_put_cache+0x77/0xc0 [ 1075.794022][T12110] ? debug_smp_processor_id+0x3f/0x129 [ 1075.799551][T12110] ? kmem_cache_alloc_node+0x1bb/0x680 [ 1075.805151][T12110] __kmalloc_reserve.isra.0+0x43/0xd0 [ 1075.810551][T12110] __alloc_skb+0xbe/0x360 [ 1075.814906][T12110] netlink_sendmsg+0x662/0x8a0 [ 1075.819691][T12110] ? netlink_unicast+0x4c0/0x4c0 [ 1075.824646][T12110] sock_sendmsg+0x98/0xc0 [ 1075.829055][T12110] ____sys_sendmsg+0x493/0x4c0 [ 1075.833950][T12110] ___sys_sendmsg+0xb5/0x100 [ 1075.838597][T12110] ? __rcu_read_unlock+0x66/0x2f0 [ 1075.843650][T12110] ? __fget_files+0xa2/0x1c0 [ 1075.848257][T12110] ? __fget_light+0xc0/0x1a0 [ 1075.852892][T12110] ? __fdget+0x29/0x30 [ 1075.856967][T12110] ? sockfd_lookup_light+0xa5/0x100 [ 1075.862186][T12110] __sys_sendmsg+0x9b/0x150 [ 1075.866714][T12110] __x64_sys_sendmsg+0x4c/0x60 [ 1075.871489][T12110] do_syscall_64+0xc7/0x390 [ 1075.876015][T12110] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1075.881918][T12110] RIP: 0033:0x45c479 [ 1075.885848][T12110] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1075.905463][T12110] RSP: 002b:00007fac98322c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 23:10:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) [ 1075.913893][T12110] RAX: ffffffffffffffda RBX: 00007fac983236d4 RCX: 000000000045c479 [ 1075.921876][T12110] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1075.929859][T12110] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1075.937838][T12110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1075.945815][T12110] R13: 0000000000000943 R14: 00000000004d5258 R15: 0000000000000001 23:10:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5450, &(0x7f0000000100)={0x15}) 23:10:39 executing program 2 (fault-call:2 fault-nth:2): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) [ 1076.471417][T12125] FAULT_INJECTION: forcing a failure. [ 1076.471417][T12125] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.506709][T12125] CPU: 1 PID: 12125 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 1076.515476][T12125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1076.525534][T12125] Call Trace: [ 1076.528868][T12125] dump_stack+0x11d/0x187 [ 1076.533350][T12125] should_fail.cold+0x5/0xf [ 1076.537882][T12125] __should_failslab+0x82/0xb0 [ 1076.542663][T12125] should_failslab+0x5/0xf [ 1076.547095][T12125] kmem_cache_alloc+0x23/0x5e0 [ 1076.551878][T12125] ? should_fail+0x7c/0x2fd [ 1076.556405][T12125] skb_clone+0xf4/0x280 [ 1076.560581][T12125] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1076.566496][T12125] netlink_deliver_tap+0x45a/0x4d0 [ 1076.571641][T12125] netlink_unicast+0x41f/0x4c0 [ 1076.576444][T12125] netlink_sendmsg+0x4cf/0x8a0 [ 1076.581242][T12125] ? netlink_unicast+0x4c0/0x4c0 [ 1076.586196][T12125] sock_sendmsg+0x98/0xc0 [ 1076.590551][T12125] ____sys_sendmsg+0x493/0x4c0 [ 1076.595344][T12125] ___sys_sendmsg+0xb5/0x100 [ 1076.600034][T12125] ? __rcu_read_unlock+0x66/0x2f0 [ 1076.605077][T12125] ? __fget_files+0xa2/0x1c0 [ 1076.609691][T12125] ? __fget_light+0xc0/0x1a0 [ 1076.614319][T12125] ? __fdget+0x29/0x30 [ 1076.618449][T12125] ? sockfd_lookup_light+0xa5/0x100 [ 1076.623673][T12125] __sys_sendmsg+0x9b/0x150 [ 1076.628259][T12125] __x64_sys_sendmsg+0x4c/0x60 [ 1076.633049][T12125] do_syscall_64+0xc7/0x390 [ 1076.637575][T12125] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1076.643473][T12125] RIP: 0033:0x45c479 [ 1076.647468][T12125] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1076.667083][T12125] RSP: 002b:00007fac98322c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1076.675508][T12125] RAX: ffffffffffffffda RBX: 00007fac983236d4 RCX: 000000000045c479 [ 1076.683512][T12125] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1076.691498][T12125] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1076.699483][T12125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1076.707472][T12125] R13: 0000000000000943 R14: 00000000004d5258 R15: 0000000000000002 23:10:39 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xa}}], 0x1c) 23:10:40 executing program 2 (fault-call:2 fault-nth:3): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x5}) [ 1077.041569][T12137] FAULT_INJECTION: forcing a failure. [ 1077.041569][T12137] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.054253][T12137] CPU: 0 PID: 12137 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 1077.062923][T12137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1077.072982][T12137] Call Trace: [ 1077.076293][T12137] dump_stack+0x11d/0x187 [ 1077.080708][T12137] should_fail.cold+0x5/0xf [ 1077.085232][T12137] __should_failslab+0x82/0xb0 [ 1077.090004][T12137] should_failslab+0x5/0xf [ 1077.094425][T12137] kmem_cache_alloc+0x23/0x5e0 [ 1077.099205][T12137] ? delay_tsc+0x8a/0xb0 [ 1077.103463][T12137] ? debug_smp_processor_id+0x3f/0x129 [ 1077.109047][T12137] ? tomoyo_path_matches_pattern+0x93/0x140 [ 1077.114971][T12137] skb_clone+0xf4/0x280 [ 1077.119153][T12137] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1077.125070][T12137] dev_queue_xmit_nit+0x2b8/0x600 [ 1077.130111][T12137] dev_hard_start_xmit+0x3ed/0x420 [ 1077.135233][T12137] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1077.141130][T12137] __dev_queue_xmit+0x14c4/0x1b80 [ 1077.146172][T12137] ? memcg_kmem_put_cache+0x77/0xc0 [ 1077.151487][T12137] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1077.157466][T12137] ? skb_clone+0x132/0x280 [ 1077.161904][T12137] dev_queue_xmit+0x1e/0x30 [ 1077.166417][T12137] netlink_deliver_tap+0x406/0x4d0 [ 1077.171549][T12137] netlink_unicast+0x41f/0x4c0 [ 1077.176336][T12137] netlink_sendmsg+0x4cf/0x8a0 [ 1077.181132][T12137] ? netlink_unicast+0x4c0/0x4c0 [ 1077.186100][T12137] sock_sendmsg+0x98/0xc0 [ 1077.190453][T12137] ____sys_sendmsg+0x493/0x4c0 [ 1077.195281][T12137] ___sys_sendmsg+0xb5/0x100 [ 1077.199892][T12137] ? __rcu_read_unlock+0x66/0x2f0 [ 1077.204953][T12137] ? __fget_files+0xa2/0x1c0 [ 1077.209560][T12137] ? __fget_light+0xc0/0x1a0 [ 1077.214160][T12137] ? __fdget+0x29/0x30 [ 1077.218237][T12137] ? sockfd_lookup_light+0xa5/0x100 [ 1077.223453][T12137] __sys_sendmsg+0x9b/0x150 [ 1077.227984][T12137] __x64_sys_sendmsg+0x4c/0x60 [ 1077.232774][T12137] do_syscall_64+0xc7/0x390 [ 1077.237306][T12137] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1077.243299][T12137] RIP: 0033:0x45c479 [ 1077.247244][T12137] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1077.266956][T12137] RSP: 002b:00007fac98322c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1077.275413][T12137] RAX: ffffffffffffffda RBX: 00007fac983236d4 RCX: 000000000045c479 [ 1077.283435][T12137] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1077.291411][T12137] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1077.299390][T12137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1077.307372][T12137] R13: 0000000000000943 R14: 00000000004d5258 R15: 0000000000000003 23:10:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5451, &(0x7f0000000100)={0x15}) 23:10:40 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xfc}}], 0x1c) 23:10:40 executing program 2 (fault-call:2 fault-nth:4): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) [ 1077.895779][T12155] FAULT_INJECTION: forcing a failure. [ 1077.895779][T12155] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.935021][T12155] CPU: 0 PID: 12155 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 1077.943743][T12155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1077.953805][T12155] Call Trace: [ 1077.957110][T12155] dump_stack+0x11d/0x187 [ 1077.961475][T12155] should_fail.cold+0x5/0xf [ 1077.966040][T12155] __should_failslab+0x82/0xb0 [ 1077.970817][T12155] should_failslab+0x5/0xf [ 1077.975422][T12155] kmem_cache_alloc_trace+0x26/0x5f0 [ 1077.980760][T12155] ? __nla_validate_parse+0xa8/0x11d0 [ 1077.986198][T12155] l2tp_tunnel_create+0x84/0x2c0 23:10:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x6}) [ 1077.991216][T12155] l2tp_nl_cmd_tunnel_create+0x22d/0x660 [ 1077.996884][T12155] ? genl_family_rcv_msg_attrs_parse+0x132/0x1f0 [ 1078.003286][T12155] genl_rcv_msg+0x409/0x8c0 [ 1078.007850][T12155] netlink_rcv_skb+0xaf/0x260 [ 1078.012578][T12155] ? genl_family_rcv_msg_attrs_parse+0x1f0/0x1f0 [ 1078.018943][T12155] genl_rcv+0x2e/0x40 [ 1078.022954][T12155] netlink_unicast+0x390/0x4c0 [ 1078.027757][T12155] netlink_sendmsg+0x4cf/0x8a0 [ 1078.032545][T12155] ? netlink_unicast+0x4c0/0x4c0 [ 1078.037499][T12155] sock_sendmsg+0x98/0xc0 [ 1078.041850][T12155] ____sys_sendmsg+0x493/0x4c0 [ 1078.046659][T12155] ___sys_sendmsg+0xb5/0x100 [ 1078.051327][T12155] ? __rcu_read_unlock+0x66/0x2f0 [ 1078.056376][T12155] ? __fget_files+0xa2/0x1c0 [ 1078.061110][T12155] ? __fget_light+0xc0/0x1a0 [ 1078.065738][T12155] ? __fdget+0x29/0x30 [ 1078.069824][T12155] ? sockfd_lookup_light+0xa5/0x100 [ 1078.075083][T12155] __sys_sendmsg+0x9b/0x150 [ 1078.079612][T12155] __x64_sys_sendmsg+0x4c/0x60 [ 1078.084469][T12155] do_syscall_64+0xc7/0x390 [ 1078.088992][T12155] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1078.094894][T12155] RIP: 0033:0x45c479 [ 1078.098896][T12155] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1078.118559][T12155] RSP: 002b:00007fac98322c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1078.127675][T12155] RAX: ffffffffffffffda RBX: 00007fac983236d4 RCX: 000000000045c479 [ 1078.135689][T12155] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1078.143675][T12155] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1078.151654][T12155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1078.159709][T12155] R13: 0000000000000943 R14: 00000000004d5258 R15: 0000000000000004 23:10:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5452, &(0x7f0000000100)={0x15}) 23:10:41 executing program 2 (fault-call:2 fault-nth:5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:41 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x300}}], 0x1c) [ 1078.700717][T12170] FAULT_INJECTION: forcing a failure. [ 1078.700717][T12170] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.745334][T12170] CPU: 1 PID: 12170 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 1078.754050][T12170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1078.764134][T12170] Call Trace: [ 1078.767458][T12170] dump_stack+0x11d/0x187 [ 1078.771824][T12170] should_fail.cold+0x5/0xf [ 1078.776350][T12170] __should_failslab+0x82/0xb0 [ 1078.781129][T12170] should_failslab+0x5/0xf [ 1078.786355][T12170] kmem_cache_alloc+0x23/0x5e0 [ 1078.791141][T12170] ? finish_task_switch+0x7b/0x260 [ 1078.796265][T12170] ? __switch_to+0x13a/0x470 [ 1078.800880][T12170] ? sock_free_inode+0x40/0x40 [ 1078.805720][T12170] sock_alloc_inode+0x2e/0x100 [ 1078.810593][T12170] ? sock_free_inode+0x40/0x40 [ 1078.815363][T12170] alloc_inode+0x42/0x130 [ 1078.819708][T12170] new_inode_pseudo+0x32/0xe0 [ 1078.824394][T12170] sock_alloc+0x3c/0x110 [ 1078.828666][T12170] __sock_create+0xeb/0x3a0 [ 1078.833193][T12170] ? number+0x5e9/0x770 [ 1078.837366][T12170] sock_create_kern+0x3e/0x60 [ 1078.842123][T12170] l2tp_tunnel_sock_create+0x57f/0x790 [ 1078.847599][T12170] ? vsnprintf+0x1b0/0xb60 [ 1078.852072][T12170] l2tp_tunnel_register+0x387/0x760 [ 1078.857298][T12170] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1078.863208][T12170] ? __write_once_size+0x2f/0xd0 [ 1078.868162][T12170] ? l2tp_tunnel_create+0x284/0x2c0 [ 1078.873415][T12170] l2tp_nl_cmd_tunnel_create+0x2c8/0x660 [ 1078.879078][T12170] genl_rcv_msg+0x409/0x8c0 [ 1078.883617][T12170] netlink_rcv_skb+0xaf/0x260 [ 1078.888324][T12170] ? genl_family_rcv_msg_attrs_parse+0x1f0/0x1f0 [ 1078.894679][T12170] genl_rcv+0x2e/0x40 [ 1078.898688][T12170] netlink_unicast+0x390/0x4c0 [ 1078.903480][T12170] netlink_sendmsg+0x4cf/0x8a0 [ 1078.908333][T12170] ? netlink_unicast+0x4c0/0x4c0 [ 1078.913295][T12170] sock_sendmsg+0x98/0xc0 [ 1078.917706][T12170] ____sys_sendmsg+0x493/0x4c0 [ 1078.922508][T12170] ___sys_sendmsg+0xb5/0x100 [ 1078.927126][T12170] ? __rcu_read_unlock+0x66/0x2f0 [ 1078.932192][T12170] ? __fget_files+0xa2/0x1c0 [ 1078.936833][T12170] ? __fget_light+0xc0/0x1a0 [ 1078.941448][T12170] ? __fdget+0x29/0x30 [ 1078.945538][T12170] ? sockfd_lookup_light+0xa5/0x100 [ 1078.950802][T12170] __sys_sendmsg+0x9b/0x150 [ 1078.955433][T12170] __x64_sys_sendmsg+0x4c/0x60 [ 1078.960325][T12170] do_syscall_64+0xc7/0x390 [ 1078.964855][T12170] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1078.970828][T12170] RIP: 0033:0x45c479 [ 1078.974734][T12170] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1078.994437][T12170] RSP: 002b:00007fac98322c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1079.002906][T12170] RAX: ffffffffffffffda RBX: 00007fac983236d4 RCX: 000000000045c479 [ 1079.010886][T12170] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1079.018937][T12170] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1079.026917][T12170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1079.034917][T12170] R13: 0000000000000943 R14: 00000000004d5258 R15: 0000000000000005 [ 1079.073463][T12170] socket: no more sockets 23:10:42 executing program 2 (fault-call:2 fault-nth:6): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x7}) [ 1079.249347][T12180] FAULT_INJECTION: forcing a failure. [ 1079.249347][T12180] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.286164][T12180] CPU: 0 PID: 12180 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 1079.294888][T12180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1079.305001][T12180] Call Trace: [ 1079.308311][T12180] dump_stack+0x11d/0x187 [ 1079.312700][T12180] should_fail.cold+0x5/0xf [ 1079.317343][T12180] __should_failslab+0x82/0xb0 [ 1079.322128][T12180] should_failslab+0x5/0xf [ 1079.326606][T12180] kmem_cache_alloc+0x23/0x5e0 [ 1079.331401][T12180] ? map_id_range_down+0x131/0x210 [ 1079.336542][T12180] sk_prot_alloc+0x54/0x230 [ 1079.341073][T12180] sk_alloc+0x50/0x580 [ 1079.345169][T12180] inet_create+0x269/0x740 [ 1079.349687][T12180] __sock_create+0x243/0x3a0 [ 1079.354304][T12180] ? number+0x5e9/0x770 [ 1079.358534][T12180] sock_create_kern+0x3e/0x60 [ 1079.363275][T12180] l2tp_tunnel_sock_create+0x57f/0x790 [ 1079.368755][T12180] ? vsnprintf+0x1b0/0xb60 [ 1079.373254][T12180] l2tp_tunnel_register+0x387/0x760 [ 1079.378537][T12180] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1079.384462][T12180] ? __write_once_size+0x2f/0xd0 [ 1079.389419][T12180] ? l2tp_tunnel_create+0x284/0x2c0 [ 1079.394646][T12180] l2tp_nl_cmd_tunnel_create+0x2c8/0x660 [ 1079.400318][T12180] genl_rcv_msg+0x409/0x8c0 [ 1079.404893][T12180] netlink_rcv_skb+0xaf/0x260 [ 1079.409661][T12180] ? genl_family_rcv_msg_attrs_parse+0x1f0/0x1f0 [ 1079.416074][T12180] genl_rcv+0x2e/0x40 [ 1079.420074][T12180] netlink_unicast+0x390/0x4c0 [ 1079.425004][T12180] netlink_sendmsg+0x4cf/0x8a0 [ 1079.429933][T12180] ? netlink_unicast+0x4c0/0x4c0 [ 1079.434889][T12180] sock_sendmsg+0x98/0xc0 [ 1079.439249][T12180] ____sys_sendmsg+0x493/0x4c0 [ 1079.444075][T12180] ___sys_sendmsg+0xb5/0x100 [ 1079.448687][T12180] ? __rcu_read_unlock+0x66/0x2f0 [ 1079.453778][T12180] ? __fget_files+0xa2/0x1c0 [ 1079.458398][T12180] ? __fget_light+0xc0/0x1a0 [ 1079.463031][T12180] ? __fdget+0x29/0x30 [ 1079.467178][T12180] ? sockfd_lookup_light+0xa5/0x100 [ 1079.472406][T12180] __sys_sendmsg+0x9b/0x150 [ 1079.477023][T12180] __x64_sys_sendmsg+0x4c/0x60 [ 1079.481816][T12180] do_syscall_64+0xc7/0x390 [ 1079.486345][T12180] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1079.492321][T12180] RIP: 0033:0x45c479 [ 1079.496232][T12180] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1079.515845][T12180] RSP: 002b:00007fac98322c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1079.524393][T12180] RAX: ffffffffffffffda RBX: 00007fac983236d4 RCX: 000000000045c479 [ 1079.532376][T12180] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1079.540363][T12180] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 23:10:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x545d, &(0x7f0000000100)={0x15}) [ 1079.548351][T12180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1079.556331][T12180] R13: 0000000000000943 R14: 00000000004d5258 R15: 0000000000000006 23:10:42 executing program 2 (fault-call:2 fault-nth:7): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) [ 1079.872950][T12193] FAULT_INJECTION: forcing a failure. [ 1079.872950][T12193] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.900330][T12193] CPU: 1 PID: 12193 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 1079.909045][T12193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1079.919102][T12193] Call Trace: [ 1079.922489][T12193] dump_stack+0x11d/0x187 [ 1079.926930][T12193] should_fail.cold+0x5/0xf [ 1079.931492][T12193] __should_failslab+0x82/0xb0 [ 1079.936271][T12193] should_failslab+0x5/0xf [ 1079.940771][T12193] kmem_cache_alloc_trace+0x26/0x5f0 [ 1079.946143][T12193] ? memcg_kmem_put_cache+0x77/0xc0 [ 1079.951366][T12193] apparmor_sk_alloc_security+0x6a/0xd0 [ 1079.956937][T12193] security_sk_alloc+0x67/0xa0 [ 1079.961787][T12193] sk_prot_alloc+0xa4/0x230 [ 1079.966311][T12193] sk_alloc+0x50/0x580 [ 1079.970410][T12193] inet_create+0x269/0x740 [ 1079.974845][T12193] __sock_create+0x243/0x3a0 [ 1079.979460][T12193] ? number+0x5e9/0x770 [ 1079.983661][T12193] sock_create_kern+0x3e/0x60 [ 1079.988359][T12193] l2tp_tunnel_sock_create+0x57f/0x790 [ 1079.993859][T12193] ? vsnprintf+0x1b0/0xb60 [ 1079.998384][T12193] l2tp_tunnel_register+0x387/0x760 [ 1080.003670][T12193] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1080.009589][T12193] ? __write_once_size+0x2f/0xd0 [ 1080.014622][T12193] ? l2tp_tunnel_create+0x284/0x2c0 [ 1080.019871][T12193] l2tp_nl_cmd_tunnel_create+0x2c8/0x660 [ 1080.025535][T12193] genl_rcv_msg+0x409/0x8c0 [ 1080.030115][T12193] netlink_rcv_skb+0xaf/0x260 [ 1080.034817][T12193] ? genl_family_rcv_msg_attrs_parse+0x1f0/0x1f0 [ 1080.041175][T12193] genl_rcv+0x2e/0x40 [ 1080.045183][T12193] netlink_unicast+0x390/0x4c0 [ 1080.049978][T12193] netlink_sendmsg+0x4cf/0x8a0 [ 1080.054888][T12193] ? netlink_unicast+0x4c0/0x4c0 [ 1080.059850][T12193] sock_sendmsg+0x98/0xc0 [ 1080.064262][T12193] ____sys_sendmsg+0x493/0x4c0 [ 1080.069113][T12193] ___sys_sendmsg+0xb5/0x100 [ 1080.073728][T12193] ? __rcu_read_unlock+0x66/0x2f0 [ 1080.078777][T12193] ? __fget_files+0xa2/0x1c0 [ 1080.083467][T12193] ? __fget_light+0xc0/0x1a0 [ 1080.088085][T12193] ? __fdget+0x29/0x30 [ 1080.092280][T12193] ? sockfd_lookup_light+0xa5/0x100 [ 1080.097513][T12193] __sys_sendmsg+0x9b/0x150 [ 1080.102146][T12193] __x64_sys_sendmsg+0x4c/0x60 [ 1080.107006][T12193] do_syscall_64+0xc7/0x390 [ 1080.111539][T12193] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1080.117480][T12193] RIP: 0033:0x45c479 [ 1080.121399][T12193] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1080.141023][T12193] RSP: 002b:00007fac98322c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1080.149498][T12193] RAX: ffffffffffffffda RBX: 00007fac983236d4 RCX: 000000000045c479 [ 1080.157482][T12193] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1080.165980][T12193] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1080.174053][T12193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1080.182319][T12193] R13: 0000000000000943 R14: 00000000004d5258 R15: 0000000000000007 23:10:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xa00}}], 0x1c) 23:10:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x8}) 23:10:43 executing program 2 (fault-call:2 fault-nth:8): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) [ 1080.489789][T12206] FAULT_INJECTION: forcing a failure. [ 1080.489789][T12206] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.525604][T12206] CPU: 0 PID: 12206 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 23:10:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5460, &(0x7f0000000100)={0x15}) [ 1080.534331][T12206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1080.544442][T12206] Call Trace: [ 1080.547849][T12206] dump_stack+0x11d/0x187 [ 1080.552291][T12206] should_fail.cold+0x5/0xf [ 1080.556877][T12206] __should_failslab+0x82/0xb0 [ 1080.561696][T12206] should_failslab+0x5/0xf [ 1080.566253][T12206] kmem_cache_alloc_node+0x35/0x680 [ 1080.571492][T12206] ? mutex_unlock+0xe/0x40 [ 1080.576052][T12206] ? genl_rcv_msg+0x48b/0x8c0 [ 1080.580754][T12206] __alloc_skb+0x8d/0x360 [ 1080.585207][T12206] netlink_ack+0x19a/0x680 [ 1080.589659][T12206] netlink_rcv_skb+0x220/0x260 [ 1080.594450][T12206] ? genl_family_rcv_msg_attrs_parse+0x1f0/0x1f0 [ 1080.600921][T12206] genl_rcv+0x2e/0x40 [ 1080.604935][T12206] netlink_unicast+0x390/0x4c0 [ 1080.609786][T12206] netlink_sendmsg+0x4cf/0x8a0 [ 1080.614687][T12206] ? netlink_unicast+0x4c0/0x4c0 [ 1080.619678][T12206] sock_sendmsg+0x98/0xc0 [ 1080.624125][T12206] ____sys_sendmsg+0x493/0x4c0 [ 1080.628924][T12206] ___sys_sendmsg+0xb5/0x100 [ 1080.633708][T12206] ? __rcu_read_unlock+0x66/0x2f0 [ 1080.638754][T12206] ? __fget_files+0xa2/0x1c0 [ 1080.643412][T12206] ? __fget_light+0xc0/0x1a0 [ 1080.648093][T12206] ? __fdget+0x29/0x30 [ 1080.652189][T12206] ? sockfd_lookup_light+0xa5/0x100 [ 1080.657455][T12206] __sys_sendmsg+0x9b/0x150 [ 1080.661989][T12206] __x64_sys_sendmsg+0x4c/0x60 [ 1080.666782][T12206] do_syscall_64+0xc7/0x390 [ 1080.671306][T12206] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1080.677208][T12206] RIP: 0033:0x45c479 [ 1080.681243][T12206] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1080.700862][T12206] RSP: 002b:00007fac98322c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1080.709395][T12206] RAX: ffffffffffffffda RBX: 00007fac983236d4 RCX: 000000000045c479 [ 1080.717386][T12206] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1080.725372][T12206] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1080.733359][T12206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1080.741342][T12206] R13: 0000000000000943 R14: 00000000004d5258 R15: 0000000000000008 23:10:44 executing program 2 (fault-call:2 fault-nth:9): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x80fe}}], 0x1c) [ 1081.331519][T12220] FAULT_INJECTION: forcing a failure. [ 1081.331519][T12220] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.379327][T12220] CPU: 1 PID: 12220 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 1081.388048][T12220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1081.398207][T12220] Call Trace: [ 1081.401517][T12220] dump_stack+0x11d/0x187 [ 1081.405977][T12220] should_fail.cold+0x5/0xf [ 1081.410577][T12220] __should_failslab+0x82/0xb0 [ 1081.415378][T12220] should_failslab+0x5/0xf [ 1081.419820][T12220] kmem_cache_alloc_node+0x35/0x680 [ 1081.425055][T12220] ? mutex_unlock+0xe/0x40 [ 1081.429708][T12220] ? genl_rcv_msg+0x48b/0x8c0 [ 1081.434434][T12220] __alloc_skb+0x8d/0x360 [ 1081.438871][T12220] netlink_ack+0x19a/0x680 [ 1081.443375][T12220] netlink_rcv_skb+0x220/0x260 [ 1081.448191][T12220] ? genl_family_rcv_msg_attrs_parse+0x1f0/0x1f0 [ 1081.454556][T12220] genl_rcv+0x2e/0x40 [ 1081.458577][T12220] netlink_unicast+0x390/0x4c0 [ 1081.463377][T12220] netlink_sendmsg+0x4cf/0x8a0 [ 1081.468171][T12220] ? netlink_unicast+0x4c0/0x4c0 [ 1081.473135][T12220] sock_sendmsg+0x98/0xc0 [ 1081.477727][T12220] ____sys_sendmsg+0x493/0x4c0 [ 1081.482526][T12220] ___sys_sendmsg+0xb5/0x100 [ 1081.487140][T12220] ? __rcu_read_unlock+0x66/0x2f0 [ 1081.492211][T12220] ? __fget_files+0xa2/0x1c0 [ 1081.497083][T12220] ? __fget_light+0xc0/0x1a0 [ 1081.501708][T12220] ? __fdget+0x29/0x30 [ 1081.505801][T12220] ? sockfd_lookup_light+0xa5/0x100 [ 1081.511043][T12220] __sys_sendmsg+0x9b/0x150 [ 1081.515581][T12220] __x64_sys_sendmsg+0x4c/0x60 [ 1081.520583][T12220] do_syscall_64+0xc7/0x390 [ 1081.525216][T12220] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1081.531119][T12220] RIP: 0033:0x45c479 [ 1081.535033][T12220] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1081.554810][T12220] RSP: 002b:00007fac98322c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1081.563241][T12220] RAX: ffffffffffffffda RBX: 00007fac983236d4 RCX: 000000000045c479 [ 1081.571220][T12220] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1081.579205][T12220] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1081.587189][T12220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1081.595175][T12220] R13: 0000000000000943 R14: 00000000004d5258 R15: 0000000000000009 23:10:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x9}) 23:10:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x6364, &(0x7f0000000100)={0x15}) 23:10:45 executing program 2 (fault-call:2 fault-nth:10): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) [ 1082.169268][T12236] FAULT_INJECTION: forcing a failure. [ 1082.169268][T12236] name failslab, interval 1, probability 0, space 0, times 0 23:10:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xc0fe}}], 0x1c) [ 1082.222519][T12236] CPU: 0 PID: 12236 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 1082.231253][T12236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1082.241449][T12236] Call Trace: [ 1082.244759][T12236] dump_stack+0x11d/0x187 [ 1082.249118][T12236] should_fail.cold+0x5/0xf [ 1082.253800][T12236] __should_failslab+0x82/0xb0 [ 1082.258611][T12236] should_failslab+0x5/0xf [ 1082.263048][T12236] kmem_cache_alloc+0x23/0x5e0 [ 1082.267840][T12236] ? ___cache_free+0x2c/0x320 [ 1082.272543][T12236] ? should_fail+0x7c/0x2fd [ 1082.277075][T12236] skb_clone+0xf4/0x280 [ 1082.281331][T12236] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1082.287254][T12236] netlink_deliver_tap+0x45a/0x4d0 [ 1082.292383][T12236] ? netlink_attachskb+0x1d8/0x4a0 [ 1082.297528][T12236] __netlink_sendskb+0x3b/0x70 [ 1082.302395][T12236] netlink_unicast+0x46d/0x4c0 [ 1082.307184][T12236] netlink_ack+0x385/0x680 [ 1082.311711][T12236] netlink_rcv_skb+0x220/0x260 [ 1082.316532][T12236] ? genl_family_rcv_msg_attrs_parse+0x1f0/0x1f0 [ 1082.322904][T12236] genl_rcv+0x2e/0x40 [ 1082.326911][T12236] netlink_unicast+0x390/0x4c0 [ 1082.331790][T12236] netlink_sendmsg+0x4cf/0x8a0 [ 1082.336587][T12236] ? netlink_unicast+0x4c0/0x4c0 [ 1082.341586][T12236] sock_sendmsg+0x98/0xc0 [ 1082.345972][T12236] ____sys_sendmsg+0x493/0x4c0 [ 1082.350824][T12236] ___sys_sendmsg+0xb5/0x100 [ 1082.355443][T12236] ? __rcu_read_unlock+0x66/0x2f0 [ 1082.360488][T12236] ? __fget_files+0xa2/0x1c0 [ 1082.365109][T12236] ? __fget_light+0xc0/0x1a0 [ 1082.369723][T12236] ? __fdget+0x29/0x30 [ 1082.373846][T12236] ? sockfd_lookup_light+0xa5/0x100 [ 1082.379077][T12236] __sys_sendmsg+0x9b/0x150 [ 1082.383664][T12236] __x64_sys_sendmsg+0x4c/0x60 [ 1082.388575][T12236] do_syscall_64+0xc7/0x390 [ 1082.393103][T12236] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1082.399006][T12236] RIP: 0033:0x45c479 [ 1082.402929][T12236] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1082.422541][T12236] RSP: 002b:00007fac98322c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1082.430979][T12236] RAX: ffffffffffffffda RBX: 00007fac983236d4 RCX: 000000000045c479 [ 1082.439078][T12236] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1082.447067][T12236] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1082.455053][T12236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1082.463095][T12236] R13: 0000000000000943 R14: 00000000004d5258 R15: 000000000000000a 23:10:45 executing program 2 (fault-call:2 fault-nth:11): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x300}) [ 1082.717860][T12247] FAULT_INJECTION: forcing a failure. [ 1082.717860][T12247] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.730579][T12247] CPU: 1 PID: 12247 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 1082.739275][T12247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1082.749332][T12247] Call Trace: [ 1082.752744][T12247] dump_stack+0x11d/0x187 [ 1082.757093][T12247] should_fail.cold+0x5/0xf [ 1082.761627][T12247] __should_failslab+0x82/0xb0 [ 1082.766406][T12247] should_failslab+0x5/0xf [ 1082.770902][T12247] kmem_cache_alloc+0x23/0x5e0 [ 1082.775819][T12247] ? sockfs_dname+0x60/0x60 [ 1082.780335][T12247] ? destroy_inode+0xde/0x130 [ 1082.785038][T12247] ? evict+0x31d/0x3f0 [ 1082.789220][T12247] skb_clone+0xf4/0x280 [ 1082.793392][T12247] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1082.799310][T12247] dev_queue_xmit_nit+0x2b8/0x600 [ 1082.804411][T12247] dev_hard_start_xmit+0x3ed/0x420 [ 1082.809557][T12247] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1082.815509][T12247] __dev_queue_xmit+0x14c4/0x1b80 [ 1082.820561][T12247] ? memcg_kmem_put_cache+0x77/0xc0 [ 1082.825918][T12247] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1082.832016][T12247] ? skb_clone+0x132/0x280 [ 1082.836457][T12247] dev_queue_xmit+0x1e/0x30 [ 1082.840983][T12247] netlink_deliver_tap+0x406/0x4d0 [ 1082.846190][T12247] __netlink_sendskb+0x3b/0x70 [ 1082.851048][T12247] netlink_unicast+0x46d/0x4c0 [ 1082.855841][T12247] netlink_ack+0x385/0x680 [ 1082.860309][T12247] netlink_rcv_skb+0x220/0x260 [ 1082.865150][T12247] ? genl_family_rcv_msg_attrs_parse+0x1f0/0x1f0 [ 1082.871548][T12247] genl_rcv+0x2e/0x40 [ 1082.875562][T12247] netlink_unicast+0x390/0x4c0 [ 1082.880371][T12247] netlink_sendmsg+0x4cf/0x8a0 [ 1082.885258][T12247] ? netlink_unicast+0x4c0/0x4c0 [ 1082.890327][T12247] sock_sendmsg+0x98/0xc0 [ 1082.894683][T12247] ____sys_sendmsg+0x493/0x4c0 [ 1082.899549][T12247] ___sys_sendmsg+0xb5/0x100 [ 1082.904334][T12247] ? __rcu_read_unlock+0x66/0x2f0 [ 1082.909390][T12247] ? __fget_files+0xa2/0x1c0 [ 1082.914100][T12247] ? __fget_light+0xc0/0x1a0 [ 1082.918724][T12247] ? __fdget+0x29/0x30 [ 1082.922810][T12247] ? sockfd_lookup_light+0xa5/0x100 [ 1082.928028][T12247] __sys_sendmsg+0x9b/0x150 [ 1082.932618][T12247] __x64_sys_sendmsg+0x4c/0x60 [ 1082.937466][T12247] do_syscall_64+0xc7/0x390 [ 1082.941997][T12247] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1082.947900][T12247] RIP: 0033:0x45c479 [ 1082.951819][T12247] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1082.971437][T12247] RSP: 002b:00007fac98322c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1082.979866][T12247] RAX: ffffffffffffffda RBX: 00007fac983236d4 RCX: 000000000045c479 [ 1082.987942][T12247] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1082.995959][T12247] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1083.003943][T12247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1083.012023][T12247] R13: 0000000000000943 R14: 00000000004d5258 R15: 000000000000000b 23:10:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x7041, &(0x7f0000000100)={0x15}) 23:10:46 executing program 2 (fault-call:2 fault-nth:12): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xfc00}}], 0x1c) 23:10:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x500}) 23:10:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x8912, &(0x7f0000000100)={0x15}) 23:10:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xfe80}}], 0x1c) 23:10:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0xa, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x600}) 23:10:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0xe, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x8914, &(0x7f0000000100)={0x15}) 23:10:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x48, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:48 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xfec0}}], 0x1c) 23:10:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x4c, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x60, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x700}) 23:10:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x8933, &(0x7f0000000100)={0x15}) 23:10:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x6c, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:49 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xff00}}], 0x1c) 23:10:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x74, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x7a, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x900}) 23:10:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x600, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0xae01, &(0x7f0000000100)={0x15}) 23:10:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x1000000}}], 0x1c) 23:10:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0xa00, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0xe00, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x3f00}) 23:10:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x1059, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x400454ca, &(0x7f0000000100)={0x15}) 23:10:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x4800, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x2000000}}], 0x1c) 23:10:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x4c00, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x5910, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4000}) 23:10:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x6000, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x6800, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x40049409, &(0x7f0000000100)={0x15}) 23:10:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x6c00, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x3000000}}], 0x1c) 23:10:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x7400, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x7a00, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0xff00}) 23:10:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x34000, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x400300, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x40082406, &(0x7f0000000100)={0x15}) 23:10:53 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x4000000}}], 0x1c) 23:10:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x3000000, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x4000000, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0xff0f}) 23:10:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x5000000, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x40084504, &(0x7f0000000100)={0x15}) 23:10:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x6000000, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:54 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xa000000}}], 0x1c) 23:10:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x7000000, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0xa000000, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0xe000000, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x1000000}) 23:10:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0xf000000, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x48000000, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x400c6615, &(0x7f0000000100)={0x15}) 23:10:55 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xfc000000}}], 0x1c) 23:10:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x59100000, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x60000000, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x2000000}) 23:10:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x68000000, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x6c000000, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x40186366, &(0x7f0000000100)={0x15}) 23:10:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xfe800000}}], 0x1c) 23:10:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x74000000, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x7a000000, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x3000000}) 23:10:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0xfeffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0xffffff7f, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x4020940d, &(0x7f0000000100)={0x15}) 23:10:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0xffffff9e, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xfec00000}}], 0x1c) 23:10:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0xfffffffe, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0xf, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4000000}) 23:10:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0xc0, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x402c542b, &(0x7f0000000100)={0x15}) 23:10:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xff000000}}], 0x1c) 23:10:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0xec0, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x33fe0, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2000007c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x7ffff000, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x5000000}) 23:10:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0xfffffdef, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x902, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:59 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x100000000000000}}], 0x1c) 23:10:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x80045432, &(0x7f0000000100)={0x15}) 23:10:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x907, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:10:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x909, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x90a, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x6000000}) 23:11:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x2, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x3, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x200000000000000}}], 0x1c) 23:11:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x80045440, &(0x7f0000000100)={0x15}) 23:11:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x4, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x5, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x6, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x7000000}) 23:11:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x7, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0xa, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x300000000000000}}], 0x1c) 23:11:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x80086301, &(0x7f0000000100)={0x15}) 23:11:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0xe, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0xf, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x48, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x4c, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x8000000}) 23:11:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x60, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x68, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x400000000000000}}], 0x1c) 23:11:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000580), 0x12) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0}) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r3, &(0x7f0000000580), 0x12) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x10000}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={r2, r4}) r5 = userfaultfd(0x140800) r6 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r6, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000e53fe8)) r7 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r7, 0x0, 0x0) write$P9_RWSTAT(r7, &(0x7f0000000100)={0x7, 0x7f, 0x1}, 0x7) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r5, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:11:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0xc0045878, &(0x7f0000000100)={0x15}) 23:11:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x6c, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:02 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) r2 = semget$private(0x0, 0x4, 0x14) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000040)=[0x9, 0x6cc, 0x1]) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x100051, r1, 0x2000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:11:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x74, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x7a, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:03 executing program 4: r0 = userfaultfd(0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x52c) sendfile(r3, r4, 0x0, 0x10000) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'macvlan1\x00', 0x2000}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @empty}, {0xa, 0x4e20, 0x0, @dev}, r2}}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r5 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r5, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:11:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x9000000}) 23:11:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x300, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) [ 1100.309822][ T26] audit: type=1804 audit(1583190663.379:4000): pid=12907 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir123342262/syzkaller.jydaTp/1387/file0" dev="sda1" ino=16521 res=1 23:11:03 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xa00000000000000}}], 0x1c) 23:11:03 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x52c) r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r4, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x4e23, 0x81, @empty}, {0xa, 0x0, 0x3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x3}, r6}}, 0x48) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0xa, 0x4, 0xfa00, {r6}}, 0xc) sendfile(r2, r3, 0x0, 0x10000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2}) write(r1, &(0x7f0000002000)='/', 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$LOOP_GET_STATUS(r7, 0x4c03, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:11:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x500, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0xc0045878, &(0x7f0000000100)={0x15}) [ 1100.769612][ T26] audit: type=1804 audit(1583190663.839:4001): pid=12927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir123342262/syzkaller.jydaTp/1388/file0" dev="sda1" ino=16929 res=1 23:11:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x600, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x700, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x3f000000}) 23:11:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0xa00, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0xe00, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:04 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xfc00000000000000}}], 0x1c) 23:11:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0xf00, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0xc014563b, &(0x7f0000000100)={0x15}) 23:11:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x1059, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x4800, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x4c00, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x5910, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x40000000}) 23:11:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x6000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:05 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xfe80000000000000}}], 0x1c) 23:11:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x6800, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:05 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xfec0000000000000}}], 0x1c) 23:11:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x6c00, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0xc0189436, &(0x7f0000000100)={0x15}) 23:11:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x7400, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x7a00, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x34000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x80ffffff}) 23:11:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x400300, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x1000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:06 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xff00000000000000}}], 0x1c) 23:11:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x2000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0xc020660b, &(0x7f0000000100)={0x15}) 23:11:07 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xffffffff00000000}}], 0x1c) 23:11:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x3000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:07 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x2}}], 0x1c) 23:11:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x81ffffff}) 23:11:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x4000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x5000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x6000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x7000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0xa000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0xc028660f, &(0x7f0000000100)={0x15}) 23:11:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x3}}], 0x1c) 23:11:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0xe000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x82ffffff}) 23:11:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0xf000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x48000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x4c000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x59100000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0xc054561d, &(0x7f0000000100)={0x15}) 23:11:09 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x4}}], 0x1c) 23:11:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x60000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x68000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0xfdfdffff}) 23:11:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x6c000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x74000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x7a000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x9effffff, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0xc0585605, &(0x7f0000000100)={0x15}) 23:11:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x8}}], 0x1c) 23:11:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0xf0ffffff, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0xff000000}) 23:11:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0xfeffffff, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:10 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a", 0x52c) sendfile(r1, r2, 0x0, 0x10000) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={0x0}) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={r3, 0x0, r4}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1107.663440][ T26] audit: type=1804 audit(1583190670.739:4002): pid=13206 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir167061834/syzkaller.2p5nEZ/1091/file0" dev="sda1" ino=17096 res=1 23:11:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0xff0f0000}) 23:11:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0xffffff7f, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) [ 1107.741928][ T26] audit: type=1804 audit(1583190670.769:4003): pid=13206 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir167061834/syzkaller.2p5nEZ/1091/file0" dev="sda1" ino=17096 res=1 23:11:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0xffffff9e, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0xfffffff0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0xa}}], 0x1c) 23:11:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x3}) 23:11:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0xfffffffe, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:11 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x6c, r2, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev, 0xdb}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x118, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbafeae0e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6e998055}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2000000}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x90}, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000000)={0x1, [0x0]}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:11:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0xfffffdfd}) [ 1108.831409][T13251] tipc: Enabling of bearer rejected, failed to enable media 23:11:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x2, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x3, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0xb}}], 0x1c) 23:11:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x4, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x7}) 23:11:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x5, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) [ 1109.596591][T13283] tipc: Enabling of bearer rejected, failed to enable media 23:11:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x6, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:12 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:11:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x7, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0xffffff80}) 23:11:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0xa, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x10}}], 0x1c) 23:11:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0xe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0xf, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0xa}) 23:11:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x48, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x4c, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:13 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) getsockname$ax25(r2, &(0x7f0000000100)={{0x3, @netrom}, [@rose, @bcast, @bcast, @rose, @null, @rose, @remote, @rose]}, &(0x7f0000000240)=0x48) r3 = add_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000180)="96", 0x1, 0xfffffffffffffffb) request_key(&(0x7f0000000580)='user\x00', &(0x7f00000000c0)={'syz'}, 0x0, r3) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r3, 0x0, 0xb}, &(0x7f0000000180)={'enc=', 'pkcs1', ' hash=', {'blake2s-224\x00'}}, &(0x7f0000000280), &(0x7f0000000340)="57acf3a973fafa5cf95ae1") r4 = add_key(&(0x7f0000000280)='.dead\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="ea62bcb1a3fc07943c07a6e814e85e49abc1edda93dc", 0x16, r3) keyctl$get_keyring_id(0x0, r4, 0x3) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @multicast1}], 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x16, 0x0, 0x40001, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r5, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r5, 0x0, &(0x7f0000000280), 0x2}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r5, 0x0, 0x0}, 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:11:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x60, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0xffffff81}) 23:11:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x68, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x6c, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:11:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x74, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x2}], 0x1c) 23:11:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0xd}) 23:11:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x7a, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x300, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x3}], 0x1c) 23:11:14 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}], 0x1c) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) getsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000000), &(0x7f00000000c0)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x5) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x52c) sendfile(r2, r3, 0x0, 0x10000) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0xfffc}, 0x8) 23:11:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x500, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0xffffff82}) [ 1111.953285][ T26] audit: type=1804 audit(1583190675.029:4004): pid=13395 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir167061834/syzkaller.2p5nEZ/1095/file0" dev="sda1" ino=16875 res=1 23:11:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x600, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x4}], 0x1c) 23:11:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x700, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xa}], 0x1c) 23:11:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x11}) 23:11:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0xa00, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0xe00, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xfc}], 0x1c) 23:11:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0xf00, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)) 23:11:16 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000580), 0x12) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580)='ethtool\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="000000bf37000000280012000c0001007665746800000000180002001400010008000000", @ANYRES32=0x0, @ANYBLOB="92"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00010700"/20, @ANYRES32=r8, @ANYBLOB="00000000000000000300000008000100753332004d1637399ae816cc01000d80"], 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r3, @ANYBLOB="000829bd7000fddbdf25020000002800018008000300000000001400020076657468305f746f5f6873720000000008000300000000000c00018008000300010000000c00018008000100", @ANYRES32=r4, @ANYBLOB="280001801400020076657468315f6d6163767461fd05af48583e1070000000080003000400000008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000300000000004000018014000200766c616e31000000000000000000000014000200766972745f776966693000000000000014000200697036746e6c30000000000000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x210, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9fb}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @loopback, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c77f94e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffa3}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x323a7376}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0x210}}, 0x4000804) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) r10 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r10, 0x0, 0x0) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0xf800, 0xff, 0x6, 0x8}, {0x31, 0x9, 0x1, 0x4}, {0x8, 0x1f, 0x0, 0x4}, {0x2, 0x3f, 0x1f, 0x8}, {0x5, 0x1, 0x0, 0x10000}, {0x7, 0xb6, 0x1f, 0x8}, {0x1, 0x1, 0x1, 0x4}, {0x6, 0x8, 0x1f, 0x1}]}, 0x10) 23:11:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x300}], 0x1c) 23:11:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x1059, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x4800, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xa00}], 0x1c) 23:11:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x13}) 23:11:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x4c00, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x80fe}], 0x1c) 23:11:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x5910, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:17 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair(0x1a, 0x1, 0x81, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$ax25(r1, &(0x7f00000000c0)={{0x3, @netrom}, [@default, @netrom, @remote, @rose, @netrom, @default, @remote, @default]}, &(0x7f0000000140)=0x48) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:11:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x2}) 23:11:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x6000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xc0fe}], 0x1c) 23:11:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x6800, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xfc00}], 0x1c) 23:11:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17}) 23:11:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x6c00, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x7400, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xfe80}], 0x1c) 23:11:18 executing program 5: setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:11:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x7a00, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x3}) 23:11:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xfec0}], 0x1c) 23:11:18 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000580), 0x12) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000580), 0x12) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r3, @in={{0x2, 0x0, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe]}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000009c0)={0x800, 0x0, 0x3, 0x400, 0x80000000, 0x1, 0xa1cc, 0x6, r3}, &(0x7f0000000a00)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x3f, 0x6, 0x3, 0x200, 0xff, 0x5, 0xffff, 0x1, r3}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r4, 0x1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:11:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x34000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xff00}], 0x1c) 23:11:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x400300, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x1a}) 23:11:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x1000000}], 0x1c) 23:11:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x1000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x2000000}], 0x1c) 23:11:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x2000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x4}) 23:11:19 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000017c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r3, 0x505, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x201, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x1bf2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x10000841}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x2, 0x13, 0x80000001, 0x4}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 23:11:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x3000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x3000000}], 0x1c) [ 1116.739068][T13600] tipc: Enabling of bearer rejected, failed to enable media 23:11:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x4000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x1c}) 23:11:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x4000000}], 0x1c) 23:11:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x5000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x6000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xa000000}], 0x1c) [ 1117.493825][T13636] tipc: Enabling of bearer rejected, failed to enable media 23:11:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x7000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:20 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0), 0x8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20200, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000100)={0x4000001, 0xf7d, 0x23}) 23:11:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x5}) 23:11:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0xa000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xfc000000}], 0x1c) 23:11:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0xe000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xfe800000}], 0x1c) 23:11:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x25}) 23:11:21 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x100000000, 0x101000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000000c0)="9326d695b25d02677b6ba01cbccf3d8d9fe4d627624d69558ceeb297059172", 0x1f, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000140)={r3}) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) signalfd(r1, &(0x7f0000000040)={[0x3]}, 0x8) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:11:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0xf000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:21 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4000, 0x0) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x24c, 0x3ff, 0x140000, 0x5, 0x6b5c}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={r4, 0x4}, &(0x7f0000000180)=0x8) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:11:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x48000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xfec00000}], 0x1c) 23:11:21 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x540) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x52c) sendfile(r3, r4, 0x0, 0x10000) sendfile(r2, r3, &(0x7f0000000080)=0x5, 0x10000) 23:11:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x6}) 23:11:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x4c000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:21 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:11:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xff000000}], 0x1c) 23:11:21 executing program 4: r0 = userfaultfd(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RELDISP(r1, 0x5605) r2 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) write(r2, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:11:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x15}) 23:11:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x59100000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:22 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000002c0)={0x0, 'veth0_to_hsr\x00', {0x3}, 0x9}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r2, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x58, 0x1411, 0x200, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x7}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x26}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}]}, 0x58}}, 0xd0) r4 = dup(r0) bind$x25(r4, &(0x7f0000000000)={0x9, @remote={[], 0x3}}, 0x12) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 23:11:22 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0xf) 23:11:22 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x52c) sendfile(r2, r3, 0x0, 0x10000) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @multicast2}, {0x306, @dev={[], 0x32}}, 0x4, {0x2, 0x4e21, @rand_addr=0x80}, 'bond_slave_0\x00'}) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setscheduler(r4, 0x85511be1a1ef46d0, &(0x7f0000000180)=0x100) r5 = syz_open_procfs(r4, &(0x7f0000000240)='net/raw6\x00') r6 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="b72300000000000000000b0000f008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYRES16=r9, @ANYBLOB="00042abd7000fddbdf250300000008002c00ff07000005002f0001000000081f3c0081000003000000000700000008003200fa0000000500330002000000050033000200000008003a0000000000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000090) write(r1, &(0x7f00000002c0)="150b749218f870b4177273122910252f4295fc7fabffe9ebde634c6a30b7d6ac245a0fefcdba24d0bb9c2a6156c05b71e8105b4a7581c737627241a87f6129", 0x3f) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x1000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) r10 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r11 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r10, &(0x7f0000001400)="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", 0x547) sendfile(r10, r11, 0x0, 0x10000) r12 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x800, 0x0) sendfile(r11, r12, &(0x7f0000000080)=0xf998, 0x5) r13 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x0) fchdir(r13) ioctl$UFFDIO_REGISTER(r13, 0xc020aa00, &(0x7f0000000540)={{&(0x7f0000001000/0x1000)=nil, 0x1000}, 0x2}) r14 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r14, &(0x7f0000000580), 0x12) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r14, 0x80845663, &(0x7f00000000c0)) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:11:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x60000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) [ 1119.292178][ T26] audit: type=1804 audit(1583190682.369:4005): pid=13734 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir123342262/syzkaller.jydaTp/1393/file0" dev="sda1" ino=17124 res=1 23:11:22 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x17) 23:11:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x7}) 23:11:22 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000000)='#\'%nodev\x00', 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x1c0002) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000080)={0x22, 0x3, 0x0, {0x4, 0x1, 0x0, '-'}}, 0x22) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:11:22 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x200001dc) 23:11:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x68000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x6c000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x15, 0x2}) 23:11:23 executing program 4: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000140)='#\'\x03odev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x10002, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x8) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:11:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000580), 0x12) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008810}, 0x8100) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:11:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x74000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 23:11:23 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) recvmsg$can_j1939(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f00000000c0)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 1120.401631][ T8943] ================================================================== [ 1120.409797][ T8943] BUG: KCSAN: data-race in __process_echoes / n_tty_receive_char_special [ 1120.418206][ T8943] [ 1120.420545][ T8943] write to 0xffffc90015c82446 of 1 bytes by task 13795 on cpu 1: [ 1120.428283][ T8943] n_tty_receive_char_special+0x114c/0x1bc0 [ 1120.434198][ T8943] n_tty_receive_buf_common+0x17d6/0x1a40 [ 1120.439933][ T8943] n_tty_receive_buf+0x36/0x50 [ 1120.444708][ T8943] tty_ioctl+0xaf5/0xd80 [ 1120.448960][ T8943] ksys_ioctl+0x101/0x150 [ 1120.453299][ T8943] __x64_sys_ioctl+0x47/0x60 [ 1120.457918][ T8943] do_syscall_64+0xc7/0x390 [ 1120.462507][ T8943] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1120.468394][ T8943] [ 1120.470740][ T8943] read to 0xffffc90015c82446 of 1 bytes by task 8943 on cpu 0: [ 1120.478310][ T8943] __process_echoes+0x576/0x660 [ 1120.483175][ T8943] commit_echoes+0x104/0x160 [ 1120.487769][ T8943] n_tty_receive_buf_common+0x16dc/0x1a40 [ 1120.493490][ T8943] n_tty_receive_buf2+0x39/0x50 23:11:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000340)=0x1, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101880, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000080)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f00000003c0)=0xe8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, 0x0, 0xddb4843cf98da5b0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}]}, 0x4c}}, 0x4000000) [ 1120.498349][ T8943] tty_ldisc_receive_buf+0x69/0xe0 [ 1120.503459][ T8943] tty_port_default_receive_buf+0x82/0xd0 [ 1120.509182][ T8943] flush_to_ldisc+0x1dd/0x260 [ 1120.513870][ T8943] process_one_work+0x424/0x930 [ 1120.518750][ T8943] worker_thread+0x9a/0x7e0 [ 1120.523296][ T8943] kthread+0x1cb/0x1f0 [ 1120.527384][ T8943] ret_from_fork+0x1f/0x30 [ 1120.531790][ T8943] [ 1120.534117][ T8943] Reported by Kernel Concurrency Sanitizer on: [ 1120.540290][ T8943] CPU: 0 PID: 8943 Comm: kworker/u4:9 Not tainted 5.6.0-rc1-syzkaller #0 [ 1120.548703][ T8943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1120.558770][ T8943] Workqueue: events_unbound flush_to_ldisc [ 1120.564569][ T8943] ================================================================== [ 1120.572632][ T8943] Kernel panic - not syncing: panic_on_warn set ... [ 1120.579229][ T8943] CPU: 0 PID: 8943 Comm: kworker/u4:9 Not tainted 5.6.0-rc1-syzkaller #0 [ 1120.587643][ T8943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1120.597725][ T8943] Workqueue: events_unbound flush_to_ldisc [ 1120.603528][ T8943] Call Trace: [ 1120.606839][ T8943] dump_stack+0x11d/0x187 [ 1120.611199][ T8943] panic+0x210/0x640 [ 1120.615108][ T8943] ? vprintk_func+0x89/0x13a [ 1120.619721][ T8943] kcsan_report.cold+0xc/0x14 [ 1120.624413][ T8943] kcsan_setup_watchpoint+0x304/0x400 [ 1120.629806][ T8943] __process_echoes+0x576/0x660 [ 1120.634676][ T8943] commit_echoes+0x104/0x160 [ 1120.639300][ T8943] n_tty_receive_buf_common+0x16dc/0x1a40 [ 1120.645056][ T8943] ? n_tty_receive_buf_common+0x1a40/0x1a40 [ 1120.650969][ T8943] n_tty_receive_buf2+0x39/0x50 [ 1120.655832][ T8943] tty_ldisc_receive_buf+0x69/0xe0 [ 1120.660962][ T8943] tty_port_default_receive_buf+0x82/0xd0 [ 1120.666704][ T8943] flush_to_ldisc+0x1dd/0x260 [ 1120.671406][ T8943] process_one_work+0x424/0x930 [ 1120.676407][ T8943] worker_thread+0x9a/0x7e0 [ 1120.680942][ T8943] ? rescuer_thread+0x6a0/0x6a0 [ 1120.685811][ T8943] kthread+0x1cb/0x1f0 [ 1120.689907][ T8943] ? kthread_unpark+0xd0/0xd0 [ 1120.694609][ T8943] ret_from_fork+0x1f/0x30 [ 1120.700809][ T8943] Kernel Offset: disabled [ 1120.705203][ T8943] Rebooting in 86400 seconds..