19:42:29 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:42:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5452, &(0x7f0000000400)={'rose0\x00'}) 19:42:29 executing program 5: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:42:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:42:32 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x5]}}, 0xfffffea9) 19:42:32 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) 19:42:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5452, &(0x7f0000000400)={'rose0\x00'}) 19:42:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:42:32 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:42:32 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x24000000]}}, 0xfffffea9) 19:42:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5452, &(0x7f0000000400)={'rose0\x00'}) 19:42:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:42:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c12") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5452, &(0x7f0000000400)={'rose0\x00'}) 19:42:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c12") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5452, &(0x7f0000000400)={'rose0\x00'}) 19:42:33 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) 19:42:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:42:35 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x6]}}, 0xfffffea9) 19:42:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c12") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5452, &(0x7f0000000400)={'rose0\x00'}) 19:42:35 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:42:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:42:35 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) 19:42:35 executing program 5: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) 19:42:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5452, &(0x7f0000000400)={'rose0\x00'}) 19:42:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:42:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5452, &(0x7f0000000400)={'rose0\x00'}) 19:42:36 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:42:36 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:42:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5452, &(0x7f0000000400)={'rose0\x00'}) 19:42:38 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x24]}}, 0xfffffea9) 19:42:38 executing program 5: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:42:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a0") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5452, &(0x7f0000000400)={'rose0\x00'}) 19:42:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:42:38 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:42:38 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:42:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a0") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5452, &(0x7f0000000400)={'rose0\x00'}) 19:42:39 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 19:42:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a0") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5452, &(0x7f0000000400)={'rose0\x00'}) 19:42:39 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:42:39 executing program 5: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:42:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5452, &(0x7f0000000400)={'rose0\x00'}) 19:42:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5452, &(0x7f0000000400)={'rose0\x00'}) 19:42:41 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 19:42:41 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:42:41 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x30c]}}, 0xfffffea9) 19:42:41 executing program 5: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:42:41 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:42:42 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 19:42:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5452, &(0x7f0000000400)={'rose0\x00'}) 19:42:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, &(0x7f0000000400)={'rose0\x00'}) 19:42:42 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:42:42 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:42:42 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r2, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19:42:42 executing program 5: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:42:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, &(0x7f0000000400)={'rose0\x00'}) 19:42:42 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r2, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19:42:45 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x500]}}, 0xfffffea9) 19:42:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, &(0x7f0000000400)={'rose0\x00'}) 19:42:45 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:42:45 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:42:45 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r2, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19:42:45 executing program 5: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:42:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5452, 0x0) 19:42:45 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:42:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:42:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5452, 0x0) 19:42:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5452, 0x0) 19:42:45 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:42:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x600]}}, 0xfffffea9) 19:42:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:42:48 executing program 5: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:42:48 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:42:48 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:42:48 executing program 0: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:42:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:42:48 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:42:48 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:42:48 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x6, @pix_mp}) write$9p(r0, &(0x7f0000000080)="a013759ca8ab0688841d069a4bd8ccf19dad6a0d30af175a23fb999fd2c805b509b6d04f26c051d7da37857e25c4b2f7ec7e261f0a2dc097bc12cd498a5acbc2a1c138a45ea7b7d0b0b39e987743e0775ce15b2216b0cda1325a1882265cbe6a64acc59f0050fc862bcaf2273e0b8f7aa6a9", 0x72) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x3, 0x0, 0x3, 0x101, 0x9}) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000100)="f806262bf0d87d25c8472f59556564207480733d1c381caa94bb5020e1215eaa1a297266c3b149b2", 0x28}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000140)="c2481ec4a44508546b", 0x9}, {&(0x7f0000000180)="9d33e0f32cd166c6f6e15b03f0841b3c46809e", 0x13}, {&(0x7f0000001300)="c9d5b47fe495738ed82eaf93e8a327b4c5d9e01ee575f72774950b1d2744563bca2df801213872decef1749f06be644260c54a64b5cf0d0340be4a2005b2031f566b279b6238d398fd37d8006a9f8e734d896d29d2e39d9a0f31884bb3210dcb42144ff7993eb073a518c50491d15ea7a4d576357686cdf44c9da489c19e6ce32753f5ca7a09a97bccf50ccf5edc563425bca0e51825f463fa6d33b57706723f14f87fe07dcea3a69edff92063e75d86a3a4c7", 0xb3}, {&(0x7f00000001c0)="855db5cc0fab967a1de1e023dae4574dafbb47f69e08f089634347ebc5aff9ac318520f87442706465cb459f40e4", 0x2e}, {&(0x7f00000013c0)="4ff2768d1af7561d04d15bba6026844589880c0c3348ad869eb16509b8bb6f921db1d55273ff951a253f9e6b3c50775f0a122cb79786adbb0beb0bc7377830455f6b4c2c735a02a5bcc675503758a4ce2042b2f58d8994130a062612fbd59b2053a0af1f2bad2fb8f43aec0460f9ec675147680c42d4fac8af4fe4e38bd34fa70d9911607fbbd8a338165fbf", 0x8c}, {&(0x7f0000001480)="6fb14736a79508aed2050cd6dc08ad8732677de8cfb01c925d0d67145ad22b94dfe60d7f1c16c6b053e59a96683cdbe581a053a6d22d813d1885bfce64dd8fccffac540bdafc2229afa2a73ca53eec471e635b70d1310a65b7f95a70a667fd03a85e733fb1bf5d402230a97840d23097dfc3c817b3239dec850154f99d9bf50ed7816f7f5236948adf598fd74c6188edc4c2", 0x92}], 0x8) 19:42:48 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:42:48 executing program 5: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:42:51 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0xc03]}}, 0xfffffea9) 19:42:51 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r2, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19:42:51 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:42:51 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:42:51 executing program 0: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:42:51 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x2000000f7) listen(r0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x6, @pix_mp}) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="a5802e3856c9ad923263651f8719c339a32acf8d8c25dcc0892204d2d5beb3d9f43b58232a3324863bf99bfc4ff24415f711cf1f6b2a9912921d6a1fdaa3c44a0fb3dc3550a86cafcf9b53654d216a55ea987bab67c7959fad437df3e30360e0272fb1af53f4cdd318b4911d935ff38551920b02c10bbbcdc85a50eeac71e4a6aadc85b93e3848e0556f9e82470b23cfcec548605d", 0x95}, {&(0x7f0000000100)="5c75930555bf3d980f09acb2fbf773af831eed10ec9a356bbdb1ff67f4cbb6a8454ccf533d3087970d3cbcfbcbc1b373797abb0b27cb8f15556c27ccc68a97a2f2095425aba4f3e396fce9cefd34f1eb3431fd30d62d927e8fc838bf65a32c4f936e8c9776f15bbd3d0712a6d66e804bbbb0e22980d9272600de50f034b2dabd6bfc97d0452e9e6cb98f094142c18378f28a02feafc3b2d1c83712ca98711dadb6e9e922435c44e3bb521368443806c9898c3f7316a1", 0xb6}], 0x2, 0x0) 19:42:51 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:42:51 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:42:51 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r2, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19:42:51 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x2000000f7) listen(r0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x6, @pix_mp}) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="a5802e3856c9ad923263651f8719c339a32acf8d8c25dcc0892204d2d5beb3d9f43b58232a3324863bf99bfc4ff24415f711cf1f6b2a9912921d6a1fdaa3c44a0fb3dc3550a86cafcf9b53654d216a55ea987bab67c7959fad437df3e30360e0272fb1af53f4cdd318b4911d935ff38551920b02c10bbbcdc85a50eeac71e4a6aadc85b93e3848e0556f9e82470b23cfcec548605d", 0x95}, {&(0x7f0000000100)="5c75930555bf3d980f09acb2fbf773af831eed10ec9a356bbdb1ff67f4cbb6a8454ccf533d3087970d3cbcfbcbc1b373797abb0b27cb8f15556c27ccc68a97a2f2095425aba4f3e396fce9cefd34f1eb3431fd30d62d927e8fc838bf65a32c4f936e8c9776f15bbd3d0712a6d66e804bbbb0e22980d9272600de50f034b2dabd6bfc97d0452e9e6cb98f094142c18378f28a02feafc3b2d1c83712ca98711dadb6e9e922435c44e3bb521368443806c9898c3f7316a1", 0xb6}], 0x2, 0x0) 19:42:51 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r2, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19:42:51 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:42:54 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x1b6c]}}, 0xfffffea9) 19:42:54 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x2000000f7) listen(r0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x6, @pix_mp}) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="a5802e3856c9ad923263651f8719c339a32acf8d8c25dcc0892204d2d5beb3d9f43b58232a3324863bf99bfc4ff24415f711cf1f6b2a9912921d6a1fdaa3c44a0fb3dc3550a86cafcf9b53654d216a55ea987bab67c7959fad437df3e30360e0272fb1af53f4cdd318b4911d935ff38551920b02c10bbbcdc85a50eeac71e4a6aadc85b93e3848e0556f9e82470b23cfcec548605d", 0x95}, {&(0x7f0000000100)="5c75930555bf3d980f09acb2fbf773af831eed10ec9a356bbdb1ff67f4cbb6a8454ccf533d3087970d3cbcfbcbc1b373797abb0b27cb8f15556c27ccc68a97a2f2095425aba4f3e396fce9cefd34f1eb3431fd30d62d927e8fc838bf65a32c4f936e8c9776f15bbd3d0712a6d66e804bbbb0e22980d9272600de50f034b2dabd6bfc97d0452e9e6cb98f094142c18378f28a02feafc3b2d1c83712ca98711dadb6e9e922435c44e3bb521368443806c9898c3f7316a1", 0xb6}], 0x2, 0x0) 19:42:54 executing program 0: 19:42:54 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:42:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:42:54 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:42:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x40000000) socket(0x10, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, 0x0) open$dir(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) 19:42:54 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x2000000f7) listen(r0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x6, @pix_mp}) 19:42:54 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:42:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:42:54 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) [ 2143.700377] IPVS: ftp: loaded support on port[0] = 21 19:42:54 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x2000000f7) listen(r0, 0x2) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) [ 2143.891098] IPVS: ftp: loaded support on port[0] = 21 19:42:57 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x1e78]}}, 0xfffffea9) 19:42:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:42:57 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:42:57 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x2000000f7) listen(r0, 0x2) 19:42:57 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:42:57 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc0585604, &(0x7f0000000000)={0x0, 0xe7ffffffffffffff}) 19:42:57 executing program 5: listen(0xffffffffffffffff, 0x2) 19:42:57 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x200000000000, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc0585604, &(0x7f0000000000)) 19:42:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:42:57 executing program 5: listen(0xffffffffffffffff, 0x2) 19:42:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={[], [], @initdev}}, 0x20) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x0) fcntl$setstatus(r0, 0x4, 0x42803) mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 19:42:57 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:00 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x2400]}}, 0xfffffea9) 19:43:00 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:00 executing program 5: listen(0xffffffffffffffff, 0x2) 19:43:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:00 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:00 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x2000000f7) listen(r0, 0x2) 19:43:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:00 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f00000000c0)={0x0, 0x0, 0x1, [], 0x0}) 19:43:00 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x2000000f7) listen(r0, 0x2) 19:43:01 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:03 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:03 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x2000000f7) listen(r0, 0x2) 19:43:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:03 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x6c1b]}}, 0xfffffea9) 19:43:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:03 executing program 3: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:03 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) listen(r0, 0x2) 19:43:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:03 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:04 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:04 executing program 4: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:04 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) listen(0xffffffffffffffff, 0x2) 19:43:04 executing program 3: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:06 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) listen(0xffffffffffffffff, 0x2) 19:43:06 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:06 executing program 3: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:06 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x781e]}}, 0xfffffea9) 19:43:06 executing program 4: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:06 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) listen(0xffffffffffffffff, 0x2) 19:43:06 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:07 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:07 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) listen(r0, 0x0) 19:43:07 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:07 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:07 executing program 4: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = socket(0x22, 0x80002, 0xffffffff00000022) dup2(r0, r2) [ 2156.600004] delete_channel: no stack 19:43:09 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x1000000]}}, 0xfffffea9) 19:43:09 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:09 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = socket(0x22, 0x80002, 0xffffffff00000022) dup2(r0, r2) 19:43:09 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) [ 2158.975000] delete_channel: no stack 19:43:10 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = socket(0x22, 0x80002, 0xffffffff00000022) dup2(r0, r2) 19:43:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:10 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) [ 2159.453535] delete_channel: no stack 19:43:10 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:10 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:12 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x2000000]}}, 0xfffffea9) 19:43:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = socket(0x22, 0x80002, 0xffffffff00000022) dup2(r0, r2) 19:43:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:12 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:12 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) [ 2162.036321] delete_channel: no stack 19:43:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) dup2(r0, 0xffffffffffffffff) 19:43:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) dup2(r0, 0xffffffffffffffff) 19:43:13 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x30c0000]}}, 0xfffffea9) 19:43:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:16 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) dup2(r0, 0xffffffffffffffff) 19:43:16 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = socket(0x22, 0x80002, 0xffffffff00000022) dup2(r0, r1) 19:43:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:16 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) [ 2165.465954] delete_channel: no stack 19:43:16 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x22, 0x80002, 0xffffffff00000022) dup2(r0, r1) 19:43:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:19 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x4000000]}}, 0xfffffea9) 19:43:19 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:19 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) [ 2168.431439] delete_channel: no stack 19:43:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:19 executing program 5: r0 = socket(0x22, 0x80002, 0xffffffff00000022) dup2(0xffffffffffffffff, r0) 19:43:19 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:19 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) [ 2168.595387] delete_channel: no stack 19:43:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:19 executing program 5: r0 = socket(0x22, 0x80002, 0xffffffff00000022) dup2(0xffffffffffffffff, r0) 19:43:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) [ 2168.713207] delete_channel: no stack 19:43:19 executing program 5: r0 = socket(0x22, 0x80002, 0xffffffff00000022) dup2(0xffffffffffffffff, r0) 19:43:19 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) [ 2168.871505] delete_channel: no stack 19:43:22 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x5000000]}}, 0xfffffea9) 19:43:22 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:22 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x22, 0x80002, 0xffffffff00000022) dup2(r0, r1) 19:43:22 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) [ 2171.520506] delete_channel: no stack 19:43:22 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x22, 0x80002, 0xffffffff00000022) dup2(r0, r1) 19:43:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:22 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:22 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) [ 2171.683667] delete_channel: no stack 19:43:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:25 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x6000000]}}, 0xfffffea9) 19:43:25 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x22, 0x80002, 0xffffffff00000022) dup2(r0, r1) 19:43:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:25 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:25 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) [ 2174.606108] delete_channel: no stack 19:43:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket(0x22, 0x80002, 0xffffffff00000022) dup2(0xffffffffffffffff, r0) 19:43:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) [ 2174.815426] delete_channel: no stack 19:43:25 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket(0x22, 0x80002, 0xffffffff00000022) dup2(0xffffffffffffffff, r0) [ 2174.983325] delete_channel: no stack 19:43:28 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x1b6c0000]}}, 0xfffffea9) 19:43:28 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket(0x22, 0x80002, 0xffffffff00000022) dup2(0xffffffffffffffff, r0) 19:43:28 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2177.735836] delete_channel: no stack 19:43:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x0, 0x80002, 0xffffffff00000022) dup2(r0, r1) 19:43:28 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x0, 0x80002, 0xffffffff00000022) dup2(r0, r1) 19:43:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x0) 19:43:31 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x1e780000]}}, 0xfffffea9) 19:43:31 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:31 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40085203, &(0x7f0000000080)=0x20000000) 19:43:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x0, 0x80002, 0xffffffff00000022) dup2(r0, r1) 19:43:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:31 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x22, 0x0, 0xffffffff00000022) dup2(r0, r1) 19:43:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) 19:43:31 executing program 0: futex(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) 19:43:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:43:32 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x22, 0x0, 0xffffffff00000022) dup2(r0, r1) 19:43:34 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x24000000]}}, 0xfffffea9) 19:43:34 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:34 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x4, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 19:43:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:43:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x22, 0x0, 0xffffffff00000022) dup2(r0, r1) 19:43:34 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x22, 0x80002, 0x0) dup2(r0, r1) [ 2184.006525] audit: type=1804 audit(1549655014.972:82): pid=12129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir776454988/syzkaller.XfxhuI/2745/bus" dev="sda1" ino=17361 res=1 [ 2184.044786] audit: type=1804 audit(1549655015.002:83): pid=12129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir776454988/syzkaller.XfxhuI/2745/bus" dev="sda1" ino=17361 res=1 19:43:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:43:35 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) sendfile(r0, r0, &(0x7f00000000c0), 0x8080fffffffe) 19:43:35 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x22, 0x80002, 0x0) dup2(r0, r1) 19:43:38 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x16e0b8c4fdc]}}, 0xfffffea9) 19:43:38 executing program 0: 19:43:38 executing program 2: 19:43:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x22, 0x80002, 0x0) dup2(r0, r1) 19:43:38 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:38 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:38 executing program 0: 19:43:38 executing program 2: 19:43:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)) r0 = socket(0x22, 0x80002, 0xffffffff00000022) dup2(0xffffffffffffffff, r0) 19:43:38 executing program 0: 19:43:38 executing program 0: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:38 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) [ 2187.626608] delete_channel: no stack 19:43:41 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x100000000000000]}}, 0xfffffea9) 19:43:41 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)) r0 = socket(0x22, 0x80002, 0xffffffff00000022) dup2(0xffffffffffffffff, r0) 19:43:41 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:41 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:41 executing program 0: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) [ 2190.433081] delete_channel: no stack 19:43:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)) r0 = socket(0x22, 0x80002, 0xffffffff00000022) dup2(0xffffffffffffffff, r0) [ 2190.626443] delete_channel: no stack 19:43:41 executing program 0: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x22, 0x80002, 0xffffffff00000022) dup2(r0, 0xffffffffffffffff) 19:43:41 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:41 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:41 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) [ 2190.863867] delete_channel: no stack 19:43:44 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x200000000000000]}}, 0xfffffea9) 19:43:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x22, 0x80002, 0xffffffff00000022) dup2(r0, 0xffffffffffffffff) 19:43:44 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:44 executing program 0: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:44 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:44 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) [ 2193.517839] delete_channel: no stack 19:43:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x22, 0x80002, 0xffffffff00000022) dup2(r0, 0xffffffffffffffff) 19:43:44 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) [ 2193.790419] delete_channel: no stack 19:43:44 executing program 0: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:44 executing program 5: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:44 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:44 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:47 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x30c000000000000]}}, 0xfffffea9) 19:43:47 executing program 5: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:47 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:47 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:47 executing program 0: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) 19:43:47 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:47 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:47 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:47 executing program 5: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:47 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:48 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:50 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x400000000000000]}}, 0xfffffea9) 19:43:50 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:50 executing program 0: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:50 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:50 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:50 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:50 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:50 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:51 executing program 0: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:51 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:51 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:51 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:54 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x500000000000000]}}, 0xfffffea9) 19:43:54 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58}, 0x0) 19:43:54 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:54 executing program 2: 19:43:54 executing program 0: 19:43:54 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:54 executing program 2: 19:43:54 executing program 0: [ 2203.149419] atomic_op 000000001bd593ed conn xmit_atomic (null) 19:43:54 executing program 5: 19:43:54 executing program 0: 19:43:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2203.390949] binder: 13276:13277 ioctl c0306201 20008fd0 returned -14 19:43:54 executing program 2: delete_module(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000002c0)=""/42) [ 2203.469337] binder: 13276:13277 tried to acquire reference to desc 0, got 1 instead [ 2203.555587] binder: 13276:13280 ioctl c0306201 20008fd0 returned -14 [ 2203.576449] binder: undelivered death notification, 0000000000000000 19:43:57 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x600000000000000]}}, 0xfffffea9) 19:43:57 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5820dae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x200000) 19:43:57 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:57 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x18300, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)) sched_setaffinity(0x0, 0x3bd, &(0x7f00000002c0)=0x3ffffffffffffff2) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000002, &(0x7f0000000200)) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1b) ptrace$cont(0x18, r4, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3e}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r4, 0x0, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000300)) 19:43:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:43:57 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:43:57 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5820dae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x200000) [ 2206.289668] binder: 13287:13298 ioctl c0306201 20008fd0 returned -14 [ 2206.323456] binder: undelivered death notification, 0000000000000000 19:43:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2206.479497] binder: 13342:13401 ioctl c0306201 20008fd0 returned -14 [ 2206.498074] binder: undelivered death notification, 0000000000000000 19:43:57 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:43:57 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:43:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2206.529567] binder: 13409:13410 ioctl c0306201 20008fd0 returned -14 [ 2206.593745] binder: 13409:13414 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 2206.654444] binder: 13409:13410 tried to acquire reference to desc 0, got 1 instead [ 2206.686071] binder: 13409:13414 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 2206.700186] binder: 13418:13420 ioctl c0306201 20008fd0 returned -14 [ 2206.722325] binder: undelivered death notification, 0000000000000000 [ 2206.736943] binder: 13409:13414 ioctl c0306201 20008fd0 returned -14 19:44:00 executing program 2: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x6) 19:44:00 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x1b6c000000000000]}}, 0xfffffea9) 19:44:00 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:44:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:00 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) [ 2209.333192] binder: 13425:13431 ioctl c0306201 20008fd0 returned -14 [ 2209.353971] binder: 13429:13430 ioctl c0306201 20008fd0 returned -14 19:44:00 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:44:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2209.393117] binder: 13429:13430 BC_REQUEST_DEATH_NOTIFICATION death notification already set 19:44:00 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:44:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:00 executing program 2: openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 19:44:00 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) [ 2209.565501] binder: BINDER_SET_CONTEXT_MGR already set [ 2209.572455] binder: 13445:13447 ioctl c0306201 20008fd0 returned -14 [ 2209.600130] binder: 13446:13448 ioctl 40046207 0 returned -16 19:44:00 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) [ 2209.609056] binder: 13445:13447 BC_REQUEST_DEATH_NOTIFICATION death notification already set 19:44:03 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x1e78000000000000]}}, 0xfffffea9) 19:44:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:03 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:44:03 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:44:03 executing program 2: socket$packet(0x11, 0x400000000000003, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) fcntl$notify(r0, 0x402, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000000c0)) [ 2212.434202] binder: 13561:13568 ioctl c0306201 20008fd0 returned -14 [ 2212.461097] binder: 13562:13570 ioctl c0306201 20008fd0 returned -14 [ 2212.468702] binder: 13561:13568 BC_REQUEST_DEATH_NOTIFICATION death notification already set 19:44:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:03 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) [ 2212.724729] binder: BINDER_SET_CONTEXT_MGR already set [ 2212.736983] binder: 13682:13684 ioctl 40046207 0 returned -16 [ 2212.737853] binder: 13667:13683 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 2212.752330] binder: 13682:13684 Acquire 1 refcount change on invalid ref 0 ret -22 19:44:03 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:44:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2212.771213] binder: 13682:13684 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2212.789902] binder: 13682:13684 ioctl c0306201 20008fd0 returned -14 [ 2212.852171] binder: 13685:13686 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 2212.961202] binder: 13687:13691 ioctl c0306201 20008fd0 returned -14 19:44:06 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x2400000000000000]}}, 0xfffffea9) 19:44:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:06 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$binfmt_aout(r0, 0x0, 0x407) 19:44:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:06 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:44:06 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) [ 2215.498404] binder: 13796:13797 ioctl c0306201 20008fd0 returned -14 19:44:06 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) [ 2215.558989] binder: 13801:13803 BC_CLEAR_DEATH_NOTIFICATION death notification not active 19:44:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:06 executing program 2: fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@dev, @in6=@remote}}}, 0x0) uname(&(0x7f0000000cc0)=""/66) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x24004800) 19:44:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:06 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:44:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) [ 2215.887812] binder: 13815:13818 ioctl c0306201 20008fd0 returned -14 [ 2215.908434] binder: 13815:13818 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 19:44:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:09 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:44:09 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0xdc4f8c0b6e010000]}}, 0xfffffea9) 19:44:09 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:44:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:09 executing program 2: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/create\x00', 0x2, 0x0) write$binfmt_aout(r0, 0x0, 0x4b) 19:44:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:09 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:44:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xfffffe47) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:44:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2218.675850] binder: 13927:13935 ioctl c0306201 20008fd0 returned -14 [ 2218.705701] binder: 13927:13935 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 19:44:09 executing program 4: clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff900040000fffffff800004000000000e9088a1ff9dc0100df772600010000000000000000005f"], 0x3c) [ 2218.833960] binder: BINDER_SET_CONTEXT_MGR already set [ 2218.839509] binder: 13939:13941 ioctl c0306201 20008fd0 returned -14 [ 2218.850606] binder: 13940:13945 ioctl 40046207 0 returned -16 [ 2218.864592] binder: 13939:13941 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2218.885814] binder: 13940:13945 ioctl c0306201 20008fd0 returned -14 [ 2218.920143] SELinux: ebitmap: truncated map 19:44:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 19:44:09 executing program 4: clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff900040000fffffff800004000000000e9088a1ff9dc0100df772600010000000000000000005f"], 0x3c) 19:44:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000006, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @empty={[0x3100]}}, 0x1c) [ 2218.931201] binder: 13940:13951 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2218.949387] SELinux: failed to load policy [ 2219.056342] SELinux: ebitmap: truncated map [ 2219.067726] SELinux: failed to load policy 19:44:12 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x2]}}, 0xfffffea9) 19:44:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:12 executing program 3: timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@dev, @in6=@remote}}}, &(0x7f0000000340)=0xe8) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$sock_ifreq(r0, 0x899f, &(0x7f00000002c0)={'nr0\x00', @ifru_names='bond_slave_0\x00'}) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000280)=0x1f) r1 = creat(&(0x7f0000000500)='./file0\x00', 0x100) uname(&(0x7f0000000cc0)=""/66) write$smack_current(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000b80)={'broute\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f0000000b00)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000d80)={0x7, 0x70, 0x3, 0x500, 0x0, 0x3, 0x0, 0x9, 0x8, 0xc, 0x81, 0x1, 0x0, 0x6e, 0x3, 0x2b, 0xc44c, 0x7, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0x4, 0x6, 0x0, 0x8, 0x0, 0x4, 0x9, 0x65bc, 0x8, 0x4, 0x2f8, 0x100, 0xfffffffffffffe00, 0x7, 0x7a, 0x0, 0xffffffffffffffe1, 0x0, @perf_bp={0x0, 0xa}, 0x44, 0x10001, 0x7, 0xf, 0x2, 0x0, 0x9}, 0xffffffffffffffff, 0x0, r1, 0x8) finit_module(r2, &(0x7f0000000240)='/dev/urandom\x00', 0x1) 19:44:12 executing program 4: clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff900040000fffffff800004000000000e9088a1ff9dc0100df772600010000000000000000005f"], 0x3c) 19:44:12 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) [ 2221.710804] binder: 13967:13973 ioctl c0306201 20008fd0 returned -14 [ 2221.727543] SELinux: ebitmap: truncated map [ 2221.732129] SELinux: failed to load policy [ 2221.755089] binder: BINDER_SET_CONTEXT_MGR already set [ 2221.762567] binder: 13967:13973 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2221.784178] binder: 13972:13977 ioctl 40046207 0 returned -16 19:44:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:12 executing program 4: clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff900040000fffffff800004000000000e9088a1ff9dc0100df772600010000000000000000005f"], 0x3c) 19:44:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:12 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:44:13 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) [ 2222.078720] SELinux: ebitmap: truncated map [ 2222.091263] binder: 13985:13992 ioctl c0306201 20008fd0 returned -14 [ 2222.103431] binder: BINDER_SET_CONTEXT_MGR already set [ 2222.111096] SELinux: failed to load policy [ 2222.116624] binder: 13985:13992 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2222.125614] binder: 13987:13996 ioctl 40046207 0 returned -16 [ 2222.134189] binder: 13987:13996 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 19:44:13 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x1b6c000000000000]}}, 0xfffffea9) [ 2222.172569] binder: 13987:13996 ioctl c0306201 20008fd0 returned -14 [ 2222.211647] binder: 13987:13996 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 19:44:15 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x4]}}, 0xfffffea9) 19:44:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:15 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:44:15 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) [ 2224.797329] binder: BINDER_SET_CONTEXT_MGR already set [ 2224.802677] binder: 14009:14010 ioctl 40046207 0 returned -16 [ 2224.809061] binder: 14006:14011 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2224.842232] binder: 14006:14011 ioctl c0306201 20008fd0 returned -14 19:44:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) [ 2224.883861] binder: 14006:14011 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 19:44:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2225.076644] binder: 14028:14030 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2225.101791] binder: 14028:14030 ioctl c0306201 20008fd0 returned -14 19:44:16 executing program 2: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:44:16 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:44:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2225.120718] binder: 14028:14030 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 19:44:16 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:44:18 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x5]}}, 0xfffffea9) 19:44:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:18 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:44:18 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:44:18 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) [ 2227.876959] binder: 14146:14148 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2227.906150] binder: 14151:14153 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2227.927386] binder: 14146:14148 ioctl c0306201 20008fd0 returned -14 [ 2227.929568] binder: 14151:14153 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2227.950837] binder: 14151:14153 ioctl c0306201 20008fd0 returned -14 [ 2227.959177] binder: 14146:14156 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2227.974479] binder: 14151:14153 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 19:44:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) [ 2228.091397] binder: 14262:14264 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2228.101782] binder: 14262:14264 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2228.116446] binder: 14262:14264 ioctl c0306201 20008fd0 returned -14 [ 2228.124025] binder: 14262:14264 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 19:44:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:19 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) [ 2228.300930] binder: 14267:14268 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2228.336149] binder: 14267:14268 ioctl c0306201 20008fd0 returned -14 19:44:19 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:19 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:44:22 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x6]}}, 0xfffffea9) 19:44:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:22 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:22 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:44:22 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:44:22 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:44:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:22 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:22 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:44:22 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:44:22 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:22 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:25 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x24]}}, 0xfffffea9) 19:44:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:25 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:25 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:44:25 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:44:25 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 19:44:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2234.429089] binder: 14518:14525 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2234.466081] binder_thread_write: 2 callbacks suppressed [ 2234.466091] binder: 14518:14525 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 19:44:25 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) [ 2234.499397] binder: 14518:14525 ioctl c0306201 20008fd0 returned -14 [ 2234.525811] binder: 14518:14525 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 19:44:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) [ 2234.553656] binder: 14579:14612 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2234.581758] binder: 14579:14612 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 19:44:25 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:44:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2234.607835] binder: 14579:14612 ioctl c0306201 20008fd0 returned -14 [ 2234.615877] binder: 14579:14612 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 19:44:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2234.664123] binder: 14635:14636 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2234.672934] binder: 14635:14636 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2234.680713] binder: 14635:14636 ioctl c0306201 20008fd0 returned -14 [ 2234.688266] binder: 14635:14636 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2234.791875] binder: 14637:14638 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2234.798256] binder: 14641:14644 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2234.809390] binder: 14637:14638 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2234.852229] binder: 14641:14644 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2234.869507] binder: 14637:14638 ioctl c0306201 20008fd0 returned -14 [ 2234.893431] binder: 14641:14644 ioctl c0306201 20008fd0 returned -14 [ 2234.895507] binder: 14637:14646 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2234.913045] binder: 14641:14645 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 19:44:28 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x30c]}}, 0xfffffea9) 19:44:28 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 19:44:28 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:44:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:28 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) [ 2237.479627] binder: 14748:14749 ioctl c0306201 20008fd0 returned -14 [ 2237.510726] binder: 14751:14756 Acquire 1 refcount change on invalid ref 0 ret -22 19:44:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:28 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) [ 2237.545692] binder: 14751:14756 ioctl c0306201 20008fd0 returned -14 19:44:28 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) 19:44:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2237.669900] binder: 14817:14839 ioctl c0306201 20008fd0 returned -14 19:44:29 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2238.072946] binder: 14871:14873 ioctl c0306201 20008fd0 returned -14 [ 2238.127258] binder: 14874:14875 ioctl c0306201 0 returned -14 [ 2238.141702] binder: 14874:14875 ioctl c0306201 20008fd0 returned -14 19:44:31 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x500]}}, 0xfffffea9) 19:44:31 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:44:31 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:44:31 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) 19:44:31 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2240.633683] binder: 14878:14885 ioctl c0306201 0 returned -14 [ 2240.660615] binder_thread_write: 10 callbacks suppressed [ 2240.660638] binder: 14878:14885 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 19:44:31 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) 19:44:31 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) [ 2240.690481] binder: 14878:14885 ioctl c0306201 20008fd0 returned -14 [ 2240.729892] binder: 14878:14885 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 19:44:31 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:44:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:31 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:44:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) [ 2240.919215] binder: 15000:15001 ioctl c0306201 0 returned -14 [ 2240.946896] binder: 15000:15001 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2240.965074] binder: 15000:15001 ioctl c0306201 20008fd0 returned -14 [ 2240.974362] binder: 15000:15001 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 19:44:34 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x600]}}, 0xfffffea9) 19:44:34 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:34 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:44:34 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) 19:44:34 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:44:34 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:34 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) [ 2243.922587] binder: 15113:15119 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2243.933591] binder: 15113:15119 ioctl c0306201 20008fd0 returned -14 [ 2243.948291] binder: 15113:15119 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 19:44:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2244.053582] binder: 15224:15226 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2244.072023] binder: 15224:15226 ioctl c0306201 20008fd0 returned -14 [ 2244.082854] binder: 15224:15226 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 19:44:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:35 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) 19:44:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2244.304233] binder: 15232:15233 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2244.329324] binder: 15232:15233 ioctl c0306201 20008fd0 returned -14 [ 2244.346006] binder: 15231:15235 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2244.362332] binder: 15232:15233 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2244.370051] binder: 15231:15235 ioctl c0306201 20008fd0 returned -14 19:44:37 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0xc03]}}, 0xfffffea9) 19:44:37 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:44:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:37 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 19:44:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:37 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2246.988224] binder_thread_write: 2 callbacks suppressed [ 2246.988235] binder: 15240:15242 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2246.994793] binder: 15244:15247 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2247.026143] binder: 15244:15247 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 19:44:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) [ 2247.033893] binder: 15244:15247 ioctl c0306201 20008fd0 returned -14 [ 2247.048447] binder: 15244:15247 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2247.068064] binder: 15240:15242 ioctl c0306201 20008fd0 returned -14 19:44:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2247.096226] binder: 15240:15242 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2247.164186] binder: 15351:15352 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2247.189316] binder: 15351:15352 ioctl c0306201 20008fd0 returned -14 [ 2247.255157] binder: 15351:15352 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 19:44:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 19:44:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2247.331728] binder: 15356:15358 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2247.359174] binder: 15356:15358 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 19:44:38 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2247.391137] binder: 15356:15358 ioctl c0306201 20008fd0 returned -14 [ 2247.458516] binder: 15356:15358 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2247.496470] binder: 15361:15363 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2247.503631] binder: 15361:15363 ioctl c0306201 20008fd0 returned -14 [ 2247.537744] binder: 15361:15363 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 19:44:41 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x1b6c]}}, 0xfffffea9) 19:44:41 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:44:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:41 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:44:41 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2250.310742] binder: 15372:15377 ioctl c0306201 20008fd0 returned -14 [ 2250.324243] binder: 15373:15378 ioctl c0306201 20008fd0 returned -14 19:44:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2250.499496] binder: 15451:15487 ioctl c0306201 20008fd0 returned -14 19:44:41 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:44:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:41 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2250.654496] binder: 15491:15492 ioctl c0306201 20008fd0 returned -14 19:44:41 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2250.766325] binder: 15495:15498 ioctl c0306201 20008fd0 returned -14 19:44:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:44 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x1e78]}}, 0xfffffea9) 19:44:44 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:44:44 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:44:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) [ 2253.622290] binder_thread_write: 7 callbacks suppressed [ 2253.622302] binder: 15508:15510 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2253.659662] binder: 15511:15516 BC_CLEAR_DEATH_NOTIFICATION death notification not active 19:44:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2253.699080] binder: 15508:15510 ioctl c0306201 20008fd0 returned -14 [ 2253.727293] binder: 15508:15519 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 19:44:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) [ 2253.915364] binder: 15526:15527 BC_CLEAR_DEATH_NOTIFICATION death notification not active 19:44:44 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:44:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2253.977918] binder: 15528:15529 ioctl c0306201 0 returned -14 [ 2254.005179] binder: 15528:15529 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2254.025226] binder: 15528:15529 ioctl c0306201 20008fd0 returned -14 19:44:45 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2254.070073] binder: 15528:15529 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2254.083045] binder: 15531:15533 BC_CLEAR_DEATH_NOTIFICATION death notification not active 19:44:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) [ 2254.222375] IPVS: ftp: loaded support on port[0] = 21 [ 2254.547559] binder: 15542:15543 ioctl c0306201 0 returned -14 [ 2254.574565] binder: 15542:15543 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2254.585167] binder: 15542:15543 ioctl c0306201 20008fd0 returned -14 [ 2254.615693] binder: 15542:15543 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2255.692733] chnl_net:caif_netlink_parms(): no params data found [ 2255.709599] device bridge_slave_1 left promiscuous mode [ 2255.719039] bridge0: port 2(bridge_slave_1) entered disabled state [ 2255.805952] device bridge_slave_0 left promiscuous mode [ 2255.812712] bridge0: port 1(bridge_slave_0) entered disabled state [ 2262.867752] device hsr_slave_1 left promiscuous mode [ 2262.920174] device hsr_slave_0 left promiscuous mode [ 2262.990144] team0 (unregistering): Port device team_slave_1 removed [ 2263.011622] team0 (unregistering): Port device team_slave_0 removed [ 2263.031926] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2263.116785] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2263.242634] bond0 (unregistering): Released all slaves [ 2263.462028] bridge0: port 1(bridge_slave_0) entered blocking state [ 2263.476601] bridge0: port 1(bridge_slave_0) entered disabled state [ 2263.483972] device bridge_slave_0 entered promiscuous mode [ 2263.498829] bridge0: port 2(bridge_slave_1) entered blocking state [ 2263.511467] bridge0: port 2(bridge_slave_1) entered disabled state [ 2263.520910] device bridge_slave_1 entered promiscuous mode [ 2263.560918] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2263.579681] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2263.604400] team0: Port device team_slave_0 added [ 2263.612055] team0: Port device team_slave_1 added [ 2263.682096] device hsr_slave_0 entered promiscuous mode [ 2263.735180] device hsr_slave_1 entered promiscuous mode [ 2263.790922] bridge0: port 2(bridge_slave_1) entered blocking state [ 2263.797332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2263.803998] bridge0: port 1(bridge_slave_0) entered blocking state [ 2263.810434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2263.941823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2263.981736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2263.989700] bridge0: port 1(bridge_slave_0) entered disabled state [ 2264.032886] bridge0: port 2(bridge_slave_1) entered disabled state [ 2264.061863] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2264.088891] 8021q: adding VLAN 0 to HW filter on device team0 [ 2264.123407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2264.131665] bridge0: port 1(bridge_slave_0) entered blocking state [ 2264.138074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2264.206204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2264.213873] bridge0: port 2(bridge_slave_1) entered blocking state [ 2264.220284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2264.235717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2264.262881] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2264.271001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2264.286248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2264.293807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2264.309629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2264.344066] 8021q: adding VLAN 0 to HW filter on device batadv0 19:44:55 executing program 4: 19:44:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:55 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:44:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:55 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x2400]}}, 0xfffffea9) [ 2264.743567] binder: 15557:15560 ioctl c0306201 0 returned -14 [ 2264.758284] binder: BINDER_SET_CONTEXT_MGR already set [ 2264.773408] binder: 15557:15560 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2264.782052] binder: 15553:15562 ioctl 40046207 0 returned -16 [ 2264.782473] binder: BINDER_SET_CONTEXT_MGR already set [ 2264.798902] binder: 15557:15560 ioctl c0306201 20008fd0 returned -14 [ 2264.808871] binder: 15554:15563 ioctl 40046207 0 returned -16 [ 2264.809870] binder: 15553:15562 Acquire 1 refcount change on invalid ref 0 ret -22 19:44:55 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:44:55 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=""/8, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) r3 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000f59ffc)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='sit0\x00', 0x10) r4 = socket$inet6(0xa, 0x3, 0xfffffffffffffffe) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c) getpid() mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0x1) creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000140)) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.impure\x00') unlink(&(0x7f0000000000)='./file0\x00') prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 19:44:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2264.839456] binder: 15557:15560 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2264.907894] binder: 15553:15562 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 19:44:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:55 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2264.948599] binder: 15553:15562 ioctl c0306201 20008fd0 returned -14 [ 2264.991855] binder: 15572:15573 ioctl c0306201 0 returned -14 [ 2265.001977] binder: 15553:15562 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2265.013983] binder: 15572:15573 BC_CLEAR_DEATH_NOTIFICATION death notification not active 19:44:56 executing program 3: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000480)="f2"}) 19:44:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2265.266014] binder: BINDER_SET_CONTEXT_MGR already set [ 2265.272161] binder: 15579:15580 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2265.301799] binder: 15577:15578 ioctl 40046207 0 returned -16 19:44:56 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2265.313709] binder: 15579:15580 ioctl c0306201 20008fd0 returned -14 [ 2265.342472] binder: 15579:15580 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 19:44:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:56 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2265.675859] net_ratelimit: 2 callbacks suppressed [ 2265.675882] protocol 88fb is buggy, dev hsr_slave_0 [ 2265.684879] protocol 88fb is buggy, dev hsr_slave_0 [ 2265.686754] protocol 88fb is buggy, dev hsr_slave_1 [ 2265.691026] protocol 88fb is buggy, dev hsr_slave_1 [ 2265.691147] protocol 88fb is buggy, dev hsr_slave_0 [ 2265.699355] protocol 88fb is buggy, dev hsr_slave_0 [ 2265.701199] protocol 88fb is buggy, dev hsr_slave_1 [ 2265.708182] protocol 88fb is buggy, dev hsr_slave_1 [ 2265.722522] protocol 88fb is buggy, dev hsr_slave_0 [ 2265.727715] protocol 88fb is buggy, dev hsr_slave_1 [ 2265.941773] binder: BINDER_SET_CONTEXT_MGR already set [ 2265.996972] binder: 15591:15592 ioctl 40046207 0 returned -16 [ 2265.996975] binder: BINDER_SET_CONTEXT_MGR already set [ 2265.997003] binder: 15594:15595 ioctl 40046207 0 returned -16 [ 2266.039220] binder: 15591:15592 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2266.076284] binder: 15591:15592 ioctl c0306201 20008fd0 returned -14 [ 2266.105907] binder: 15591:15592 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 19:44:58 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x6c1b]}}, 0xfffffea9) 19:44:58 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:44:58 executing program 3: 19:44:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:58 executing program 4: 19:44:58 executing program 3: [ 2267.821895] binder: BINDER_SET_CONTEXT_MGR already set 19:44:58 executing program 4: 19:44:58 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2267.843173] binder: 15602:15605 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 2267.854942] binder: 15600:15607 ioctl 40046207 0 returned -16 19:44:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:44:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:44:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2268.006004] binder: 15615:15619 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 2268.023006] binder: 15617:15620 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2268.031300] binder: 15616:15618 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 2268.039604] binder: 15617:15620 ioctl c0306201 20008fd0 returned -14 [ 2268.053977] binder: 15617:15620 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 19:45:01 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x781e]}}, 0xfffffea9) 19:45:01 executing program 4: syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) write$P9_RSTAT(r0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x7003, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000340)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000001540)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x0, 0xfb, 0x84, 0x0, 0x0, "f5bd22b1f953154a9e3b24350a991bcb", "579906db9f5c6f937b97b6337a61c708ccc13f6a8405de59b714d884f331f2a08488c589cc387ce0e366bca1c9a4aadbc607d3fad58b64d738745e45f486e383eea3c23724b14e2698515fb3659ba409e0bcac7c3fa18e682553cb06ad9a9ec116276206a7f7a8e2b6bc24bfb08a92"}, 0x84, 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000100)={'bpq0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1f) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 19:45:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:45:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:45:01 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:01 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x10000010}) [ 2270.891857] binder: BINDER_SET_CONTEXT_MGR already set [ 2270.898999] binder: 15626:15630 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2270.913422] binder: 15625:15631 ioctl 40046207 0 returned -16 [ 2270.922977] binder: 15626:15630 ioctl c0306201 20008fd0 returned -14 19:45:01 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000380), 0x4) [ 2270.946420] binder: 15626:15630 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2270.954943] net_ratelimit: 23 callbacks suppressed [ 2270.954951] protocol 88fb is buggy, dev hsr_slave_0 [ 2270.964991] protocol 88fb is buggy, dev hsr_slave_1 19:45:02 executing program 4: syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) write$P9_RSTAT(r0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x7003, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000340)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000001540)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x0, 0xfb, 0x84, 0x0, 0x0, "f5bd22b1f953154a9e3b24350a991bcb", "579906db9f5c6f937b97b6337a61c708ccc13f6a8405de59b714d884f331f2a08488c589cc387ce0e366bca1c9a4aadbc607d3fad58b64d738745e45f486e383eea3c23724b14e2698515fb3659ba409e0bcac7c3fa18e682553cb06ad9a9ec116276206a7f7a8e2b6bc24bfb08a92"}, 0x84, 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000100)={'bpq0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1f) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 2271.013640] binder: 15640:15641 ERROR: BC_REGISTER_LOOPER called without request 19:45:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:45:02 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) [ 2271.066611] binder: 15640:15641 ERROR: BC_REGISTER_LOOPER called without request 19:45:02 executing program 3: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x103, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) r1 = socket(0x0, 0x4, 0x8000000000000) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) syz_open_dev$midi(0x0, 0xffffffff, 0x10000) accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x800) close(r0) [ 2271.145452] binder: 15647:15649 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 2271.167333] binder: 15650:15652 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2271.188241] binder: 15650:15652 ioctl c0306201 20008fd0 returned -14 [ 2271.205763] binder: 15650:15652 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2271.914914] protocol 88fb is buggy, dev hsr_slave_0 [ 2271.917057] protocol 88fb is buggy, dev hsr_slave_0 [ 2271.920016] protocol 88fb is buggy, dev hsr_slave_1 [ 2271.925080] protocol 88fb is buggy, dev hsr_slave_1 [ 2271.930148] protocol 88fb is buggy, dev hsr_slave_0 [ 2271.935181] protocol 88fb is buggy, dev hsr_slave_0 [ 2271.940157] protocol 88fb is buggy, dev hsr_slave_1 [ 2271.945186] protocol 88fb is buggy, dev hsr_slave_1 19:45:05 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x1000000]}}, 0xfffffea9) 19:45:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:45:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x630b, 0x40086310}], 0x0, 0x0, 0x0}) 19:45:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:45:05 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lookup_dcookie(0x0, 0x0, 0x0) 19:45:05 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2274.074274] binder: 15664:15669 ioctl c0306201 20008fd0 returned -14 [ 2274.110770] binder: 15666:15670 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2274.121972] binder: BINDER_SET_CONTEXT_MGR already set [ 2274.128876] binder: 15664:15669 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2274.137360] binder: 15665:15672 ioctl 40046207 0 returned -16 [ 2274.145229] binder: 15666:15670 BC_DEAD_BINDER_DONE 0000000000000000 not found 19:45:05 executing program 3: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x103, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x80000, 0x0) r2 = socket(0x80000000001e, 0x4, 0x8000000000000) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) setxattr$security_selinux(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.selinux\x00', &(0x7f00000003c0)='system_u:object_r:cpu_online_t:s0\x00', 0x22, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffffffff, 0x10000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f00000001c0)={0x0, 0x1ff, 0x1}) accept4$bt_l2cap(r2, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x800) close(r0) [ 2274.171379] binder: 15665:15672 BC_CLEAR_DEATH_NOTIFICATION death notification not active 19:45:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000100), 0xc, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d000100000000000000000002200000ff03ff000000000008000b0000000000080001007f00000101246e"], 0x1}, 0x1, 0x0, 0x0, 0x2}, 0x0) 19:45:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:45:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:45:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2274.311772] binder: 15681:15682 ioctl c0306201 20008fd0 returned -14 [ 2274.374604] binder: 15683:15687 ioctl c0306201 20008fd0 returned -14 19:45:05 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2274.418696] binder: 15683:15687 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2274.434519] binder: BINDER_SET_CONTEXT_MGR already set [ 2274.451141] binder: 15689:15691 ioctl 40046207 0 returned -16 [ 2274.486445] binder: 15689:15691 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2274.501550] binder: 15689:15691 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2274.524930] binder: 15689:15691 ioctl c0306201 20008fd0 returned -14 [ 2276.074926] net_ratelimit: 16 callbacks suppressed [ 2276.074935] protocol 88fb is buggy, dev hsr_slave_0 [ 2276.074966] protocol 88fb is buggy, dev hsr_slave_1 [ 2276.079972] protocol 88fb is buggy, dev hsr_slave_1 [ 2276.085086] protocol 88fb is buggy, dev hsr_slave_0 [ 2276.090145] protocol 88fb is buggy, dev hsr_slave_0 [ 2276.095119] protocol 88fb is buggy, dev hsr_slave_1 [ 2276.100157] protocol 88fb is buggy, dev hsr_slave_1 [ 2276.105241] protocol 88fb is buggy, dev hsr_slave_0 [ 2276.120262] protocol 88fb is buggy, dev hsr_slave_1 19:45:08 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x2000000]}}, 0xfffffea9) 19:45:08 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 19:45:08 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40085203, &(0x7f0000000080)=0x20000000) 19:45:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:45:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:45:08 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2277.180604] binder: 15697:15698 ioctl c0306201 20008fd0 returned -14 [ 2277.194955] protocol 88fb is buggy, dev hsr_slave_0 [ 2277.206112] binder: BINDER_SET_CONTEXT_MGR already set [ 2277.215593] binder: 15697:15698 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 19:45:08 executing program 4: r0 = perf_event_open(&(0x7f0000045147)={0x2, 0x70, 0x0, 0x303, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x3) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 19:45:08 executing program 3: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000300)={0x9, 0x0, 0x0, {0x0, 0x300}}) 19:45:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) [ 2277.230787] binder: 15700:15707 ioctl 40046207 0 returned -16 19:45:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:45:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2277.345244] binder: 15712:15713 ioctl c0306201 20008fd0 returned -14 19:45:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 2277.394413] binder: 15715:15716 ioctl c0306201 20008fd0 returned -14 [ 2277.503676] binder: 15717:15723 ioctl c0306201 20008fd0 returned -14 19:45:11 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x30c0000]}}, 0xfffffea9) 19:45:11 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:11 executing program 2: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 19:45:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:45:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(blowfish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ab9919ec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0x1000001e2) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c00)=""/111, 0x34000}], 0x1}}], 0x1, 0x0, 0x0) [ 2280.593963] binder: 15735:15739 ioctl c0306201 20008fd0 returned -14 [ 2280.621832] binder: 15735:15739 ioctl c0306201 0 returned -14 19:45:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:45:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 19:45:11 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x0, 0x300) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 2280.816477] binder: 15752:15753 ioctl c0306201 20008fd0 returned -14 [ 2280.846434] binder: 15752:15753 ioctl c0306201 0 returned -14 19:45:11 executing program 2: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 2281.025856] binder: 15761:15763 ioctl c0306201 20008fd0 returned -14 [ 2281.058132] binder: 15761:15763 ioctl c0306201 0 returned -14 [ 2281.354942] net_ratelimit: 23 callbacks suppressed [ 2281.354950] protocol 88fb is buggy, dev hsr_slave_0 [ 2281.365034] protocol 88fb is buggy, dev hsr_slave_1 [ 2282.314909] protocol 88fb is buggy, dev hsr_slave_0 [ 2282.314944] protocol 88fb is buggy, dev hsr_slave_1 [ 2282.320009] protocol 88fb is buggy, dev hsr_slave_1 [ 2282.325118] protocol 88fb is buggy, dev hsr_slave_0 [ 2282.330178] protocol 88fb is buggy, dev hsr_slave_0 [ 2282.335155] protocol 88fb is buggy, dev hsr_slave_1 [ 2282.340171] protocol 88fb is buggy, dev hsr_slave_1 [ 2282.345269] protocol 88fb is buggy, dev hsr_slave_0 19:45:14 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x4000000]}}, 0xfffffea9) 19:45:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:45:14 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:45:14 executing program 4: timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) uname(0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000540)='nbd\x00') write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 19:45:14 executing program 2: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2283.675231] binder: 15767:15775 ioctl c0306201 0 returned -14 [ 2283.690107] binder: 15768:15776 ioctl c0306201 20008fd0 returned -14 19:45:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:45:14 executing program 4: r0 = timerfd_create(0x0, 0x2000000) timerfd_settime(r0, 0x3, 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$sock_ifreq(r1, 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000280)=0x1f) r2 = creat(&(0x7f0000000500)='./file0\x00', 0x100) uname(&(0x7f0000000cc0)=""/66) write$smack_current(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000d80)={0x7, 0x70, 0x3, 0x500, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x81, 0x1, 0x0, 0x6e, 0x3, 0x2b, 0xc44c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x2f8, 0x100, 0xfffffffffffffe00, 0x7, 0x7a, 0x0, 0xffffffffffffffe1, 0x0, @perf_bp={0x0}, 0x44, 0x0, 0x7, 0x0, 0x2, 0x0, 0x9}, 0xffffffffffffffff, 0x0, r2, 0x8) syz_genetlink_get_family_id$nbd(&(0x7f0000000540)='nbd\x00') finit_module(r3, &(0x7f0000000240)='/dev/urandom\x00', 0x1) keyctl$join(0x1, &(0x7f0000000000)) write$uinput_user_dev(r4, 0x0, 0x0) 19:45:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:45:14 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2283.839033] binder: 15781:15782 ioctl c0306201 20008fd0 returned -14 19:45:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:45:14 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2283.973441] binder: 15786:15790 ioctl c0306201 0 returned -14 19:45:15 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x5000000]}}, 0xfffffea9) [ 2284.023848] binder: 15789:15793 ioctl c0306201 20008fd0 returned -14 19:45:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0}) 19:45:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:45:15 executing program 4: r0 = timerfd_create(0x0, 0x2000000) timerfd_settime(r0, 0x3, 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$sock_ifreq(r1, 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000280)=0x1f) r2 = creat(&(0x7f0000000500)='./file0\x00', 0x100) uname(&(0x7f0000000cc0)=""/66) write$smack_current(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000d80)={0x7, 0x70, 0x3, 0x500, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x81, 0x1, 0x0, 0x6e, 0x3, 0x2b, 0xc44c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x2f8, 0x100, 0xfffffffffffffe00, 0x7, 0x7a, 0x0, 0xffffffffffffffe1, 0x0, @perf_bp={0x0}, 0x44, 0x0, 0x7, 0x0, 0x2, 0x0, 0x9}, 0xffffffffffffffff, 0x0, r2, 0x8) syz_genetlink_get_family_id$nbd(&(0x7f0000000540)='nbd\x00') finit_module(r3, &(0x7f0000000240)='/dev/urandom\x00', 0x1) keyctl$join(0x1, &(0x7f0000000000)) write$uinput_user_dev(r4, 0x0, 0x0) 19:45:15 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0}) [ 2284.217981] binder: 15799:15803 ioctl c0306201 20008fd0 returned -14 19:45:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0}) [ 2284.312025] binder: 15808:15809 ioctl c0306201 20008fd0 returned -14 19:45:15 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2284.399271] binder: 15811:15815 ioctl c0306201 0 returned -14 19:45:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:45:15 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2284.472094] binder: 15817:15820 ioctl c0306201 20008fd0 returned -14 19:45:15 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) dup2(r0, r1) 19:45:15 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000004c0)="e63616262839c18bcc008ede090b5df72fdd7e7d46db4688ef557a43d405a9a84a87fc5e3f2b58fa1f6681da63db0d50d2ef", 0x32}], 0x1, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0xffffffffffffff3b, 0x7b, 0x2}, 0xe7) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x2e7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000480), 0xa198) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r0, 0x50, &(0x7f0000000380)}, 0x10) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x8}]}, 0x14, 0x1) getdents(0xffffffffffffffff, &(0x7f0000000780)=""/4096, 0x1000) inotify_rm_watch(0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [], 0x8, &(0x7f0000000040)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, 0xf8) [ 2286.474932] net_ratelimit: 15 callbacks suppressed [ 2286.474942] protocol 88fb is buggy, dev hsr_slave_0 [ 2286.484921] protocol 88fb is buggy, dev hsr_slave_0 [ 2286.485054] protocol 88fb is buggy, dev hsr_slave_1 [ 2286.490022] protocol 88fb is buggy, dev hsr_slave_1 [ 2286.495106] protocol 88fb is buggy, dev hsr_slave_0 [ 2286.500143] protocol 88fb is buggy, dev hsr_slave_0 [ 2286.505112] protocol 88fb is buggy, dev hsr_slave_1 [ 2286.510142] protocol 88fb is buggy, dev hsr_slave_1 [ 2286.515237] protocol 88fb is buggy, dev hsr_slave_0 [ 2286.525248] protocol 88fb is buggy, dev hsr_slave_1 19:45:18 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:18 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x6000000]}}, 0xfffffea9) 19:45:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:45:18 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:18 executing program 4: socketpair$unix(0x1, 0x20000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_read_part_table(0x0, 0x0, 0x0) 19:45:18 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x0) preadv(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000000c0)=""/140, 0x8c}], 0x2, 0x0) 19:45:18 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:45:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x74, 0x0, &(0x7f0000000100)=[@increfs, @clear_death={0x400c630f, 0x0, 0x4}, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)=[0x38, 0x78, 0x38]}}}], 0xce, 0x0, &(0x7f0000000180)="30ebcbf8e20a50a751f8090442ae54af1d75a6e10e65a0de72cdf4ee62fd56bdbefdbc7efd8192fdbe4646f552d0f77269999941847e67bc041e7be5bc037bd528eaf2293ec73df88d4a66dc5810ad68245578bf4c255fa4f22539b0993329e2579cd7c9594f5807a84923965fac95a37fdf4f0fc69b7814d4394b8d5c952960c357a4e92dcf6fafb79966d3cc9364325ee14f5ce4137d74cdc12477ffe4e80d1af2a80cb9d7128625b3b9f3614f734844489da72aa4e2bfc96af58a736dba65098e5b95194ae810cd150462e195"}) [ 2287.471282] binder: 15852:15853 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 2287.482369] binder: 15852:15853 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2287.493585] binder: 15852:15853 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 2287.504527] binder: 15852:15853 transaction failed 29189/-22, size 0-24 line 2896 19:45:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r1, 0x5) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000081c0)={0x77359400}) sendmmsg(r2, &(0x7f0000003d40), 0x40000000000008b, 0x0) [ 2287.576749] __loop_clr_fd: partition scan of loop4 failed (rc=-22) 19:45:18 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:18 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) [ 2287.826719] __loop_clr_fd: partition scan of loop4 failed (rc=-22) 19:45:21 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x1b6c0000]}}, 0xfffffea9) 19:45:21 executing program 4: 19:45:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:45:21 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:21 executing program 0: 19:45:21 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:21 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:45:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = getpgrp(0x0) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x0, r2}) bind$inet(r1, &(0x7f0000df1000)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008041, &(0x7f000057f000)={0x2, 0x4e20, @loopback}, 0x10) fcntl$setsig(r1, 0xa, 0x12) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xfffffffffffffffc) sendto$inet(r1, &(0x7f0000004200)="11a58fde7649496403db92ed306004b3d3cbfc197785c3b895d864ab91a3aebde4f70a917a91ec9612d004000a7b43a35bb73249ede41bf5c05ab608fb7b74ffd57f6e8e43cf9cb723fc0d8d8cabbbbae3a5fde8ad6f52d667c512596f50b9962aa2193688d872a7eeca57801742d74d39c4b003a5e292e077ed102e7999329aab95a3d96363505f76c86a6d2352dd8025207ae531701f1ce353d6b017eb64000000bc2e9f8b66fe4a8e64f0fc7a0aa55d4103e1d7d5b0dd5750071e9b3a786021678a86fcbb0b9f9364ec0f0310306fef9c21b3b20d8b44423b495299cea2c6f40c377a72534453ad7f5af27b1efb2514ace1f9a68cf205a9ddb8fd954e34bde3612e6e05686cf3b968a14bd3a356f7b8d20214c0f7a388ef5ea8d063c65f2aabff685e69f86b4a0b3697f8bfbfe66796f0489ad2e49bdbc1742941c28c88cb93e1f8ccc3db4782cdf9cbd797ddc8d7b1364da50ad48e081a38622280169eba09000000b5f15bdf8a8b6483340a3297c31154905db209195c28f15d10153204fbe0586516c714ddc939e0eb68c73969e81fc6f215b476ddf3fcf1a604603360089dadba2779cfed9027ac163067fc0d7592ac8a013b907372a42b242405241ac1f63f85a52fff2d78b30e87a156b5cfa133dabc259bb027bec5eb8c8eb623e9776a13d3ce972a6769de8a78153f498084a244b0146b77be3d1cba7b02fe8906ed8a88f105c763d1772825b986d52823bf38b6f95eca494fd9c64497874b9f450bec65311493cc108b27611eaa6819305a3730d29368f25f7e816d60884a1e0271c3c786ad36391366ac3b65f04c148974f6973005c5ff73d6f0b3f7e44c65da7c4115c4ee543991e4ad26938384cafffffffc8f7e79aaf1b8ef80f627e3c7168ecda2cf224a491bea6129fcd954b88dbb2d29464931bcd5378041db67ddc70ee856ae09c1b24018956b8a7d52bf1a160606c8356374e37f3eca244367fb535dde71fae4683710761b89e28820d4f06065450c3d1f76fa26ef28320edf6c36480af14f4444edb40ebb3f8ea264486e351c40c7e43c7a69c24df60da3e648f16b5fc6b5a5c6217e46c1f3ff354a8b49beb3b46a69dcb4c5d547a7b7ba8fe22da0173f9fe80f4bd47afbec4d2e0d3c91b1a326d8bb9fded873e87f847032af52bd6d129f3ce3f11ea9d0b4250af7eaa2649d9972b9b8dc773c869b3a431eac7f55d6bb92dc29f0eb7d8959e2af7571efb7ec88eac4b62850e8f6b60d4a5d06d66875b4bd260a9014a2eb88621f4c6eb3f9ed2190b48acf0358d8b82fb4794535fcb8dd50ba86d23d230a94f07a768142ff3b4c8558dac21726b6279980c238041f26e86c8e3fa83028345999ff4e5a37d610ab7c15daaffb744a505a3dd9802b3721f29553ee23e1cf376f12cc3fe6b7ac76bd13da44356855be096155e355c9cad31fcdeedc6679c531bc1a2765dc8777108ec5e31d793005e718a9ced77d6505e44f649128a29f5264fecba132f9f5016eaf690751edd64d903b36ceb2b08042c60e9e97f8bc985476e6088a5ebd3743c2358171b30b16d730a5dd49c92fa19cc267e2c1927f200fc3d23a804f0a12b06a6a88a2685051ab28f1721209ada2c14b557a49423795b07040d510bb21ce5d15acedd18cb7cb7a93389c8d934206e4ffb220048a7a82fb3c251d0a31ba5af9eb0c16e29f33f9d0a78f5e6300cf04d17eb5f67711cafa0d4e99eeaf0f8fdbd34170318879a0d12c01891127ba7b677d204268524c5af1d7dc27176826302e34f9d35d2f2eefad5f22f68929d3456c11d5f00d4a8ce8b784bca8088805731eff2d47024c2da68abc2d2c0f7806d7d76c00019f3bffa75cb826bc0809331d89a3255a498b8150d4ae31d03414ab244939455b6377c2917cb2d8a9f9ebf282657e417860e49ac94f4a838aefd34f28960a78da47933252d8cb2fdb27d413ee54502cd1bf75585468b77b8dca627cab29ef0a5297ee3dcb4c987520804e9a5f45e8241019281bab7e30f4b008bf0edf3b6fb5e8d1c2ab619b2eb84293d636a6a37d716cd8e122b7099676693cb7b01031b57ee93fd22cb18229893fd4d4ef87f1596879ac9f61b0f0c35be34cb6e6f75087ff963c188d43bcb464a95e956e75559eb1f6f2224fb2ca8f0bdc90ae5c2ce712498ee4026b13b8f3137000aa1545a75e5b48e80da30e6dac5529cac1099244e79ad542f45dcfbf16c62b5eb63daee8185c5e79ebfa1ca60880f9e2895f54ab95bbae38ae62200c1e439d73fa63d0bff75935a8ad2ae73b82132e8d4eb4bd55844b2f55c65d5ffa0c65aaf0cc5bc73925d05cf7c1c4383af074feb3a53919d2a3b5bef96115aab966821dbfc4577d19d85911a485c58a5b87cf44d230cfdc255486bb09d5c16f2164397f0fc5f652a171f0269bdcd98291410c010cc377d2690a6032fe5701117adbd0f6b847c9617a9b3d65529024d8d9749b9c49827694d346d3b1bbe434122331986b9f6e84430dfd75d123f3e307d6f5514f3da09b527408bfb6816da54beeefad160e4b095517f3292c2e17fb3bba47527671d0afe7c35d54d25ab307b15d069a05395a9cddd4b519224fe3c689d14827ede6d91ebace2a80afaad3dcd1f8ce20e92012b8934d7ff3ebdd285cc24202a86d70b96674a6af05a3c29065afa4e38b9c34006cb3eb9c87985cfc511a8c261cdeb0c7a3c7a682c40c5b9f1d7d5ef6f97e32d02fdd3f2ded413f4a36c4db899b96c8e40d91c2743cd1d435010300000000000000345b66cce79fa49f10baa4ef28535eee8c5c1a4b38bace2fb14ec11d34d620b1cc2396dc1fa857ac6ac9f5689b5935f2f25184edd40f8f5c70714f941beae3e1bc9af757edd9d68fb24218e2a02aad4dc0b3c2e54694ce547fc38f38e52673473fd0e57497978324aee16559e9cdbe5b3a0b96dd69fe5bc97e644487274b6158a0412bd60172bb66f774b8eae7bc1f52ed64d4", 0x840, 0x9, 0x0, 0x0) 19:45:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:45:21 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2290.713567] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:45:21 executing program 0: socket$packet(0x11, 0x400000000000003, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="232116473df8db0ed0abc2000ab0782ecd5fc7c66f0000000031d67672f4a707fab975a37a3e549d0aaa160300000055e0ec63392c095253c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91699a4bd57400000000000000000000000000004c088b1ef9a36300a575abcc368285696726f6876c2ae7e46bddfe65ee0205db92252526e4a3e133670000000000000000000000000000"], 0x9d) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x8000, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x50) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000003c0)=""/83) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) getsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000000), &(0x7f0000000080)=0x4) creat(&(0x7f0000000700)='./bus\x00', 0x4000000000) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000000c0)) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 19:45:21 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2291.755494] net_ratelimit: 23 callbacks suppressed [ 2291.755504] protocol 88fb is buggy, dev hsr_slave_0 [ 2291.765559] protocol 88fb is buggy, dev hsr_slave_1 [ 2292.714987] protocol 88fb is buggy, dev hsr_slave_0 [ 2292.720117] protocol 88fb is buggy, dev hsr_slave_1 [ 2292.724914] protocol 88fb is buggy, dev hsr_slave_0 [ 2292.725276] protocol 88fb is buggy, dev hsr_slave_0 [ 2292.730193] protocol 88fb is buggy, dev hsr_slave_1 [ 2292.735256] protocol 88fb is buggy, dev hsr_slave_1 [ 2292.740305] protocol 88fb is buggy, dev hsr_slave_0 [ 2292.745356] protocol 88fb is buggy, dev hsr_slave_0 19:45:24 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x1e780000]}}, 0xfffffea9) 19:45:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:45:24 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:45:24 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:24 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:24 executing program 0: r0 = socket$packet(0x11, 0x400000000000003, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) getpid() socket$packet(0x11, 0x0, 0x300) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="232116473df8db0ed0abc2000ab0782ecd5fc7c66f0000000031d67672f4a707fab975a37a3e549d0aaa160300000055e0ec63392c095253c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91699a4bd57400000000000000000000000000004c088b1ef9a36300a575abcc368285696726f6876c2ae7e46bddfe65ee0205db92252526e4a3e133670000000000000000000000000000"], 0x9d) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x8000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f00000001c0)}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl(0x80000101, 0x0, 0x0, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) creat(0x0, 0x4000000000) fcntl$notify(r1, 0x402, 0x0) socket$key(0xf, 0x3, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) dup2(r0, 0xffffffffffffffff) [ 2293.850046] binder: 15908:15911 ioctl c0306201 20008fd0 returned -14 19:45:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:45:24 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:24 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) [ 2294.021368] binder: 15924:15925 ioctl c0306201 20008fd0 returned -14 19:45:25 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:45:25 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2294.259199] binder: 15927:15931 ioctl c0306201 20008fd0 returned -14 [ 2296.874928] net_ratelimit: 15 callbacks suppressed [ 2296.874937] protocol 88fb is buggy, dev hsr_slave_0 [ 2296.875412] protocol 88fb is buggy, dev hsr_slave_0 [ 2296.879966] protocol 88fb is buggy, dev hsr_slave_1 [ 2296.885020] protocol 88fb is buggy, dev hsr_slave_1 [ 2296.890112] protocol 88fb is buggy, dev hsr_slave_0 [ 2296.895176] protocol 88fb is buggy, dev hsr_slave_0 [ 2296.900133] protocol 88fb is buggy, dev hsr_slave_1 [ 2296.905188] protocol 88fb is buggy, dev hsr_slave_1 [ 2296.920359] protocol 88fb is buggy, dev hsr_slave_0 19:45:27 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:45:27 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:45:27 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x24000000]}}, 0xfffffea9) 19:45:27 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:27 executing program 0: r0 = socket$packet(0x11, 0x400000000000003, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) getpid() socket$packet(0x11, 0x0, 0x300) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="232116473df8db0ed0abc2000ab0782ecd5fc7c66f0000000031d67672f4a707fab975a37a3e549d0aaa160300000055e0ec63392c095253c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91699a4bd57400000000000000000000000000004c088b1ef9a36300a575abcc368285696726f6876c2ae7e46bddfe65ee0205db92252526e4a3e133670000000000000000000000000000"], 0x9d) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x8000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f00000001c0)}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl(0x80000101, 0x0, 0x0, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) creat(0x0, 0x4000000000) fcntl$notify(r1, 0x402, 0x0) socket$key(0xf, 0x3, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) dup2(r0, 0xffffffffffffffff) [ 2296.925504] protocol 88fb is buggy, dev hsr_slave_1 19:45:28 executing program 4: ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) [ 2297.018517] binder: 15946:15950 ioctl c0306201 20008fd0 returned -14 19:45:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:45:28 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:28 executing program 4: ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:45:28 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:28 executing program 4: ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:45:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) [ 2297.206656] binder: 15958:15961 ioctl c0306201 20008fd0 returned -14 19:45:28 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:28 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) [ 2297.346539] binder: 15963:15968 ioctl c0306201 20008fd0 returned -14 19:45:31 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x16e0b8c4fdc]}}, 0xfffffea9) 19:45:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 19:45:31 executing program 0: r0 = socket$packet(0x11, 0x400000000000003, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) getpid() socket$packet(0x11, 0x0, 0x300) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="232116473df8db0ed0abc2000ab0782ecd5fc7c66f0000000031d67672f4a707fab975a37a3e549d0aaa160300000055e0ec63392c095253c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91699a4bd57400000000000000000000000000004c088b1ef9a36300a575abcc368285696726f6876c2ae7e46bddfe65ee0205db92252526e4a3e133670000000000000000000000000000"], 0x9d) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x8000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f00000001c0)}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl(0x80000101, 0x0, 0x0, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) creat(0x0, 0x4000000000) fcntl$notify(r1, 0x402, 0x0) socket$key(0xf, 0x3, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) dup2(r0, 0xffffffffffffffff) 19:45:31 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:31 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:45:31 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2300.099512] binder: 15975:15983 ioctl c0306201 20008fd0 returned -14 [ 2300.138155] binder: 15975:15983 ioctl c0306201 0 returned -14 19:45:31 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:45:31 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 19:45:31 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:31 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) [ 2300.283581] binder: 15995:15996 ioctl c0306201 20008fd0 returned -14 [ 2300.316499] binder: 15995:15996 ioctl c0306201 0 returned -14 19:45:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 2300.497067] binder: 16002:16003 ioctl c0306201 20008fd0 returned -14 [ 2300.522147] binder: 16002:16003 ioctl c0306201 0 returned -14 [ 2302.154930] net_ratelimit: 24 callbacks suppressed [ 2302.154939] protocol 88fb is buggy, dev hsr_slave_0 [ 2302.165098] protocol 88fb is buggy, dev hsr_slave_1 19:45:34 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x100000000000000]}}, 0xfffffea9) 19:45:34 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:34 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:34 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:45:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:45:34 executing program 0: r0 = socket$packet(0x11, 0x400000000000003, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) getpid() socket$packet(0x11, 0x0, 0x300) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="232116473df8db0ed0abc2000ab0782ecd5fc7c66f0000000031d67672f4a707fab975a37a3e549d0aaa160300000055e0ec63392c095253c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91699a4bd57400000000000000000000000000004c088b1ef9a36300a575abcc368285696726f6876c2ae7e46bddfe65ee0205db92252526e4a3e133670000000000000000000000000000"], 0x9d) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x8000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f00000001c0)}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl(0x80000101, 0x0, 0x0, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) creat(0x0, 0x4000000000) fcntl$notify(r1, 0x402, 0x0) socket$key(0xf, 0x3, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) dup2(r0, 0xffffffffffffffff) [ 2303.114917] protocol 88fb is buggy, dev hsr_slave_0 [ 2303.114923] protocol 88fb is buggy, dev hsr_slave_0 [ 2303.114993] protocol 88fb is buggy, dev hsr_slave_1 [ 2303.120019] protocol 88fb is buggy, dev hsr_slave_1 [ 2303.125167] protocol 88fb is buggy, dev hsr_slave_0 [ 2303.130157] protocol 88fb is buggy, dev hsr_slave_0 [ 2303.135149] protocol 88fb is buggy, dev hsr_slave_1 [ 2303.140162] protocol 88fb is buggy, dev hsr_slave_1 [ 2303.234734] binder: 16010:16012 ioctl c0306201 20008fd0 returned -14 19:45:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:45:34 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:45:34 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2303.496311] binder: 16023:16024 ioctl c0306201 20008fd0 returned -14 19:45:34 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:34 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, 0x0) [ 2303.633714] binder: 16031:16034 ioctl c0306201 20008fd0 returned -14 19:45:37 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x200000000000000]}}, 0xfffffea9) 19:45:37 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:37 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, 0x0) 19:45:37 executing program 0: 19:45:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0}) 19:45:37 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2306.299660] binder: 16044:16045 ioctl c0306201 20008fd0 returned -14 19:45:37 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, 0x0) 19:45:37 executing program 0: 19:45:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0}) 19:45:37 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:37 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2306.679727] binder: 16059:16061 ioctl c0306201 20008fd0 returned -14 19:45:37 executing program 0: [ 2307.274916] net_ratelimit: 16 callbacks suppressed [ 2307.274925] protocol 88fb is buggy, dev hsr_slave_0 [ 2307.274965] protocol 88fb is buggy, dev hsr_slave_1 [ 2307.279933] protocol 88fb is buggy, dev hsr_slave_1 [ 2307.285087] protocol 88fb is buggy, dev hsr_slave_0 [ 2307.290081] protocol 88fb is buggy, dev hsr_slave_0 [ 2307.295074] protocol 88fb is buggy, dev hsr_slave_1 [ 2307.300074] protocol 88fb is buggy, dev hsr_slave_1 [ 2307.315181] protocol 88fb is buggy, dev hsr_slave_0 [ 2307.320218] protocol 88fb is buggy, dev hsr_slave_1 [ 2308.396460] protocol 88fb is buggy, dev hsr_slave_0 19:45:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0}) 19:45:40 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[]) 19:45:40 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:40 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x30c000000000000]}}, 0xfffffea9) 19:45:40 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:40 executing program 0: 19:45:40 executing program 0: [ 2309.413182] binder: 16069:16075 ioctl c0306201 20008fd0 returned -14 19:45:40 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[]) 19:45:40 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:40 executing program 5: 19:45:40 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:40 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:40 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x0) preadv(r1, &(0x7f00000002c0)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/171, 0xab}], 0x3, 0x0) 19:45:40 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[]) 19:45:40 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x8000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1000) sendfile(r0, r0, &(0x7f0000000140), 0x12000) [ 2309.793476] audit: type=1800 audit(1549655140.752:84): pid=16099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17185 res=0 [ 2309.906801] audit: type=1800 audit(1549655140.872:85): pid=16099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17185 res=0 19:45:43 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x400000000000000]}}, 0xfffffea9) 19:45:43 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:43 executing program 5: r0 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) ioctl$sock_ifreq(r0, 0x899f, &(0x7f00000002c0)={'nr0\x00', @ifru_names='bond_slave_0\x00'}) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000280)=0x1f) creat(&(0x7f0000000500)='./file0\x00', 0x100) uname(&(0x7f0000000cc0)=""/66) write$smack_current(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000d80)={0x7, 0x70, 0x3, 0x0, 0x0, 0x3, 0x0, 0x9, 0x8, 0xc, 0x81, 0x1, 0x0, 0x6e, 0x3, 0x2b, 0x0, 0x7, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x65bc, 0x8, 0x4, 0x2f8, 0x100, 0xfffffffffffffe00, 0x7, 0x7a, 0x0, 0xffffffffffffffe1, 0x0, @perf_bp={0x0, 0xa}, 0x44, 0x10001, 0x7, 0xf, 0x2, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) finit_module(r1, 0x0, 0x0) 19:45:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x4e21, @rand_addr=0xffffffffffff2aa3}}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x165, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) 19:45:43 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB]) 19:45:43 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2312.554912] net_ratelimit: 23 callbacks suppressed [ 2312.554918] protocol 88fb is buggy, dev hsr_slave_0 [ 2312.564958] protocol 88fb is buggy, dev hsr_slave_1 19:45:43 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB]) 19:45:43 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d4, 0x0) 19:45:43 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:43 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB]) 19:45:43 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2313.514949] protocol 88fb is buggy, dev hsr_slave_0 [ 2313.520103] protocol 88fb is buggy, dev hsr_slave_1 [ 2313.524909] protocol 88fb is buggy, dev hsr_slave_0 [ 2313.525256] protocol 88fb is buggy, dev hsr_slave_0 [ 2313.530193] protocol 88fb is buggy, dev hsr_slave_1 [ 2313.535206] protocol 88fb is buggy, dev hsr_slave_1 [ 2313.540305] protocol 88fb is buggy, dev hsr_slave_0 [ 2313.545295] protocol 88fb is buggy, dev hsr_slave_0 19:45:46 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x500000000000000]}}, 0xfffffea9) 19:45:46 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00']) 19:45:46 executing program 5: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:46 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:46 executing program 0: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:46 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:46 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00']) 19:45:46 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:46 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00']) 19:45:47 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:47 executing program 5: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:47 executing program 0: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2317.674922] net_ratelimit: 15 callbacks suppressed [ 2317.674930] protocol 88fb is buggy, dev hsr_slave_0 [ 2317.674975] protocol 88fb is buggy, dev hsr_slave_1 [ 2317.679990] protocol 88fb is buggy, dev hsr_slave_1 [ 2317.685093] protocol 88fb is buggy, dev hsr_slave_0 [ 2317.690078] protocol 88fb is buggy, dev hsr_slave_0 [ 2317.695100] protocol 88fb is buggy, dev hsr_slave_1 [ 2317.700132] protocol 88fb is buggy, dev hsr_slave_1 [ 2317.715284] protocol 88fb is buggy, dev hsr_slave_0 [ 2317.720355] protocol 88fb is buggy, dev hsr_slave_1 [ 2318.794949] protocol 88fb is buggy, dev hsr_slave_0 19:45:49 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x600000000000000]}}, 0xfffffea9) 19:45:49 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:49 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00\x00']) 19:45:49 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:49 executing program 0: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:49 executing program 5: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:49 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:49 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00\x00']) 19:45:50 executing program 3: openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:50 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5e, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 19:45:50 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x1b6c0000]}}, 0xfffffea9) [ 2319.371275] binder: 16206:16208 ioctl c0306201 20008fd0 returned -14 19:45:52 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x1b6c000000000000]}}, 0xfffffea9) 19:45:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00\x00']) 19:45:52 executing program 3: openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:52 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:52 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:53 executing program 4: 19:45:53 executing program 3: openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:53 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x1e78000000000000]}}, 0xfffffea9) 19:45:53 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x103, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000380), &(0x7f00000003c0)=0xb) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffee1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) mq_notify(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x10, 0x4, @thr={&(0x7f0000000100)="384a9d03de10a2073b9ebb5f666a2da918273f2f46982467136641bbf4ab6ff15abf293986cad7faa4314d14dd80d66ff73bd222b84dbbdc19420543bda570b2d3e7165d6eab43fdf69109eaa7e39a8d2505ca5930948681b27f58f5ec51541591a8f7ce8c8558b135676aa634d04be6308bb55e537cb11603aa9ac988bf083415a0b8597101f006da19150ac78a0ab7ee008b0549cb6baad7636928a1a4548c3e57f5b38e36223f241e8dc50d43c0b514ef6589af9d6e6d375df4fa07fd212c7408f2f9901a87201db234d680247a6d6cfbb1ccbca04e235bdf888fb6cf570017e01149fbb14848143363f248c13dcaf9df03d8", 0x0}}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 19:45:53 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) shmctl$IPC_RMID(0x0, 0xe) 19:45:53 executing program 0: socket$inet6(0xa, 0x0, 0x3a) getpid() stat(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(r1, 0x0, r0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x30545ff76befc0ec, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000040)={0x0, 0xef}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0) syz_read_part_table(0x400, 0x1, &(0x7f0000000380)=[{&(0x7f0000000240)="5e09c3", 0x3}]) 19:45:53 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000380)="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", 0x141, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r2, r1, r1}, &(0x7f00000009c0)=""/240, 0x412, 0x0) 19:45:53 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:53 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2322.767098] Dev loop0: unable to read RDB block 2 [ 2322.800590] loop0: unable to read partition table 19:45:53 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2322.828381] loop0: partition table beyond EOD, truncated [ 2322.844321] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) 19:45:53 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:53 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2322.925632] __loop_clr_fd: partition scan of loop0 failed (rc=-22) [ 2322.954918] net_ratelimit: 22 callbacks suppressed [ 2322.954926] protocol 88fb is buggy, dev hsr_slave_0 [ 2322.965122] protocol 88fb is buggy, dev hsr_slave_1 [ 2323.914903] protocol 88fb is buggy, dev hsr_slave_0 [ 2323.914944] protocol 88fb is buggy, dev hsr_slave_1 [ 2323.920030] protocol 88fb is buggy, dev hsr_slave_1 [ 2323.925187] protocol 88fb is buggy, dev hsr_slave_0 [ 2323.930174] protocol 88fb is buggy, dev hsr_slave_0 [ 2323.935178] protocol 88fb is buggy, dev hsr_slave_1 [ 2323.940182] protocol 88fb is buggy, dev hsr_slave_1 [ 2323.950294] protocol 88fb is buggy, dev hsr_slave_0 19:45:56 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x2400000000000000]}}, 0xfffffea9) 19:45:56 executing program 0: socket$inet6(0xa, 0x0, 0x3a) getpid() stat(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(r1, 0x0, r0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x30545ff76befc0ec, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000040)={0x0, 0xef}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0) syz_read_part_table(0x400, 0x1, &(0x7f0000000380)=[{&(0x7f0000000240)="5e09c3", 0x3}]) 19:45:56 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:56 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @local}], 0x10) 19:45:56 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x80000000000009) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000001}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 19:45:56 executing program 4: r0 = gettid() perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x103, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffee1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) mq_notify(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000014) 19:45:56 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @local}], 0x10) 19:45:56 executing program 0: socket$inet6(0xa, 0x0, 0x3a) getpid() stat(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(r1, 0x0, r0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x30545ff76befc0ec, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000040)={0x0, 0xef}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0) syz_read_part_table(0x400, 0x1, &(0x7f0000000380)=[{&(0x7f0000000240)="5e09c3", 0x3}]) 19:45:56 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) msgget$private(0x0, 0x1) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) getgroups(0x4, &(0x7f0000000140)=[0x0, 0x0, 0xffffffffffffffff, 0xee00]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000180)={{{@in, @in=@initdev}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) getgid() r1 = socket(0xa, 0x1, 0x0) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r2) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x0, &(0x7f00000003c0)) setresuid(0x0, r4, 0x0) shmget$private(0x0, 0x4000, 0x1808, &(0x7f0000ffb000/0x4000)=nil) 19:45:56 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2325.897899] Dev loop0: unable to read RDB block 2 [ 2325.916512] loop0: unable to read partition table [ 2325.923249] loop0: partition table beyond EOD, truncated [ 2325.942216] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 2325.976474] hugetlbfs: syz-executor.3 (16307): Using mlock ulimits for SHM_HUGETLB is deprecated 19:45:57 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x103, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7b253fcf9b880e73, 0x0) [ 2326.044587] __loop_clr_fd: partition scan of loop0 failed (rc=-22) [ 2328.074926] net_ratelimit: 15 callbacks suppressed [ 2328.074934] protocol 88fb is buggy, dev hsr_slave_0 [ 2328.074963] protocol 88fb is buggy, dev hsr_slave_1 [ 2328.079958] protocol 88fb is buggy, dev hsr_slave_1 [ 2328.085134] protocol 88fb is buggy, dev hsr_slave_0 [ 2328.090155] protocol 88fb is buggy, dev hsr_slave_0 [ 2328.095186] protocol 88fb is buggy, dev hsr_slave_1 [ 2328.100191] protocol 88fb is buggy, dev hsr_slave_1 [ 2328.105282] protocol 88fb is buggy, dev hsr_slave_0 [ 2328.120335] protocol 88fb is buggy, dev hsr_slave_1 19:45:59 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0xdc4f8c0b6e010000]}}, 0xfffffea9) 19:45:59 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:45:59 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x80000000000009) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 19:45:59 executing program 5: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000380)="585ccb83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2572829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c0100000000000000c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f", 0x9b, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r1, r1, r0}, 0x0, 0x0, 0x0) 19:45:59 executing program 0: pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 2329.194918] protocol 88fb is buggy, dev hsr_slave_0 19:46:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 19:46:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') pread64(r0, 0x0, 0x0, 0x0) 19:46:01 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}}, 0xfffffea9) 19:46:01 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:01 executing program 3: r0 = socket$packet(0x11, 0x400000000000003, 0x300) getpid() socket$packet(0x11, 0x0, 0x300) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="232116473df8db0ed0abc2000ab0782ecd5fc7c66f0000000031d67672f4a707fab975a37a3e549d0aaa160300000055e0ec63392c095253c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91699a4bd57400000000000000000000000000004c088b1ef9a36300a575abcc368285696726f6876c2ae7e46bddfe65ee0205db92252526e4a3e133670000000000000000000000000000"], 0x9d) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x8000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x50) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000003c0)=""/83) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl(0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) creat(&(0x7f0000000700)='./bus\x00', 0x4000000000) fcntl$notify(r1, 0x402, 0x0) socket$key(0xf, 0x3, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) dup2(r0, 0xffffffffffffffff) 19:46:01 executing program 0: r0 = socket$packet(0x11, 0x400000000000003, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() socket$packet(0x11, 0x0, 0x300) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="232116473df8db0ed0abc2000ab0782ecd5fc7c66f0000000031d67672f4a707fab975a37a3e549d0aaa160300000055e0ec63392c095253c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91699a4bd57400000000000000000000000000004c088b1ef9a36300a575abcc368285696726f6876c2ae7e46bddfe65ee0205db92252526e4a3e133670000000000000000000000000000"], 0x9d) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x8000, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f00000001c0)}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x50) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000003c0)=""/83) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl(0x80000101, 0x0, 0x0, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) getsockopt$inet6_udp_int(r3, 0x11, 0x6f, &(0x7f0000000000), &(0x7f0000000080)=0x4) creat(&(0x7f0000000700)='./bus\x00', 0x4000000000) fcntl$notify(r2, 0x402, 0x0) socket$key(0xf, 0x3, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r6 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup2(r0, r6) 19:46:01 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:01 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2330.418307] FAT-fs (loop4): bogus number of reserved sectors [ 2330.454399] FAT-fs (loop4): Can't find a valid FAT filesystem 19:46:01 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) [ 2330.585832] FAT-fs (loop5): bogus number of reserved sectors [ 2330.595420] FAT-fs (loop4): bogus number of reserved sectors [ 2330.597590] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2330.601232] FAT-fs (loop4): Can't find a valid FAT filesystem 19:46:01 executing program 4: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x3}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005780), 0x4000000000000d2, 0x0) 19:46:01 executing program 3: r0 = socket$packet(0x11, 0x400000000000003, 0x300) getpid() socket$packet(0x11, 0x0, 0x300) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="232116473df8db0ed0abc2000ab0782ecd5fc7c66f0000000031d67672f4a707fab975a37a3e549d0aaa160300000055e0ec63392c095253c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91699a4bd57400000000000000000000000000004c088b1ef9a36300a575abcc368285696726f6876c2ae7e46bddfe65ee0205db92252526e4a3e133670000000000000000000000000000"], 0x9d) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x8000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x50) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000003c0)=""/83) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl(0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) creat(&(0x7f0000000700)='./bus\x00', 0x4000000000) fcntl$notify(r1, 0x402, 0x0) socket$key(0xf, 0x3, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) dup2(r0, 0xffffffffffffffff) 19:46:01 executing program 0: 19:46:01 executing program 5: 19:46:01 executing program 0: 19:46:04 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}}, 0xfffffea9) 19:46:04 executing program 0: 19:46:04 executing program 5: 19:46:04 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:46:04 executing program 4: 19:46:04 executing program 3: 19:46:04 executing program 0: 19:46:04 executing program 4: 19:46:04 executing program 5: 19:46:04 executing program 3: 19:46:04 executing program 0: 19:46:04 executing program 0: [ 2333.359072] net_ratelimit: 23 callbacks suppressed [ 2333.359081] protocol 88fb is buggy, dev hsr_slave_0 [ 2333.369165] protocol 88fb is buggy, dev hsr_slave_1 [ 2334.314949] protocol 88fb is buggy, dev hsr_slave_0 [ 2334.314954] protocol 88fb is buggy, dev hsr_slave_0 [ 2334.315023] protocol 88fb is buggy, dev hsr_slave_1 [ 2334.320163] protocol 88fb is buggy, dev hsr_slave_1 [ 2334.325328] protocol 88fb is buggy, dev hsr_slave_0 [ 2334.330310] protocol 88fb is buggy, dev hsr_slave_0 [ 2334.335298] protocol 88fb is buggy, dev hsr_slave_1 [ 2334.340329] protocol 88fb is buggy, dev hsr_slave_1 19:46:07 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x5]}}, 0xfffffea9) 19:46:07 executing program 4: 19:46:07 executing program 0: 19:46:07 executing program 3: 19:46:07 executing program 5: 19:46:07 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:46:07 executing program 5: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:46:07 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:46:07 executing program 0: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:07 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:07 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:07 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2338.474934] net_ratelimit: 16 callbacks suppressed [ 2338.474944] protocol 88fb is buggy, dev hsr_slave_0 [ 2338.484904] protocol 88fb is buggy, dev hsr_slave_0 [ 2338.485056] protocol 88fb is buggy, dev hsr_slave_1 [ 2338.490018] protocol 88fb is buggy, dev hsr_slave_1 [ 2338.495089] protocol 88fb is buggy, dev hsr_slave_0 [ 2338.500120] protocol 88fb is buggy, dev hsr_slave_0 [ 2338.505132] protocol 88fb is buggy, dev hsr_slave_1 [ 2338.510131] protocol 88fb is buggy, dev hsr_slave_1 [ 2338.515205] protocol 88fb is buggy, dev hsr_slave_0 [ 2338.525221] protocol 88fb is buggy, dev hsr_slave_1 19:46:10 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x6]}}, 0xfffffea9) 19:46:10 executing program 5: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:46:10 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:46:10 executing program 4: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:10 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:10 executing program 2: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:10 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:10 executing program 2: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:10 executing program 5: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:46:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630f}], 0x0, 0x0, 0x0}) 19:46:10 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:46:11 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2340.029976] binder: 16473:16474 BC_CLEAR_DEATH_NOTIFICATION death notification not active 19:46:13 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x24]}}, 0xfffffea9) 19:46:13 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:13 executing program 2: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:13 executing program 5: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:13 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:13 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:14 executing program 5: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:14 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:14 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:14 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:14 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x6, @pix_mp}) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 19:46:14 executing program 2: ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000080)) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f00000000c0)=0x80) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8) timerfd_create(0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000100), &(0x7f00000001c0)=0x4) timer_create(0x0, &(0x7f0000000180), 0x0) ioctl$FICLONE(r2, 0x40049409, r1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @pix_mp}) [ 2343.754914] net_ratelimit: 23 callbacks suppressed [ 2343.754924] protocol 88fb is buggy, dev hsr_slave_0 [ 2343.765089] protocol 88fb is buggy, dev hsr_slave_1 [ 2344.714903] protocol 88fb is buggy, dev hsr_slave_0 [ 2344.714943] protocol 88fb is buggy, dev hsr_slave_1 [ 2344.720029] protocol 88fb is buggy, dev hsr_slave_1 [ 2344.725129] protocol 88fb is buggy, dev hsr_slave_0 [ 2344.730172] protocol 88fb is buggy, dev hsr_slave_0 [ 2344.735144] protocol 88fb is buggy, dev hsr_slave_1 [ 2344.740169] protocol 88fb is buggy, dev hsr_slave_1 [ 2344.750358] protocol 88fb is buggy, dev hsr_slave_0 19:46:17 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x30c]}}, 0xfffffea9) 19:46:17 executing program 5: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:17 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:17 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:17 executing program 4: ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000080)) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f00000000c0)=0x80) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8) timerfd_create(0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000100), &(0x7f00000001c0)=0x4) timer_create(0x0, &(0x7f0000000180), 0x0) ioctl$FICLONE(r2, 0x40049409, r1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @pix_mp}) 19:46:17 executing program 2: ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000080)) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f00000000c0)=0x80) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8) timerfd_create(0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000100), &(0x7f00000001c0)=0x4) timer_create(0x0, &(0x7f0000000180), 0x0) ioctl$FICLONE(r2, 0x40049409, r1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @pix_mp}) 19:46:17 executing program 0: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) getpid() socket$packet(0x11, 0x0, 0x300) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:17 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) getpid() socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:17 executing program 5: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) getpid() socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 19:46:17 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) getpid() socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:18 executing program 3: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) getpid() socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2347.269033] binder: 16581:16582 transaction failed 29189/-22, size 24-8 line 2896 [ 2347.287826] binder: undelivered TRANSACTION_ERROR: 29189 [ 2348.874927] net_ratelimit: 15 callbacks suppressed [ 2348.874937] protocol 88fb is buggy, dev hsr_slave_0 [ 2348.874963] protocol 88fb is buggy, dev hsr_slave_1 [ 2348.879955] protocol 88fb is buggy, dev hsr_slave_1 [ 2348.885110] protocol 88fb is buggy, dev hsr_slave_0 [ 2348.890110] protocol 88fb is buggy, dev hsr_slave_0 [ 2348.895100] protocol 88fb is buggy, dev hsr_slave_1 [ 2348.900102] protocol 88fb is buggy, dev hsr_slave_1 [ 2348.905180] protocol 88fb is buggy, dev hsr_slave_0 [ 2348.920197] protocol 88fb is buggy, dev hsr_slave_1 19:46:20 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x500]}}, 0xfffffea9) 19:46:20 executing program 0: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) getpid() socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 19:46:20 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) getpid() socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:20 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x1b6c0000}}, 0xfffffea9) 19:46:20 executing program 2: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) getpid() socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x81) r1 = epoll_create1(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000480)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x317, 0x0, 0x0, 0xffffff89) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001940)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x0, 0x6, [{0x1, 0x0, 0x9, 0x38, '/dev/kvm\x00'}, {0x3, 0xa67a, 0xa, 0x0, '-vboxnet1$'}]}, 0x60) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x10000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) shmctl$SHM_INFO(0x0, 0xe, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fstat(r1, &(0x7f0000000180)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x7, 0x204a01) [ 2349.403532] kvm: vcpu 0: requested 34784 ns lapic timer period limited to 200000 ns 19:46:20 executing program 4: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) getpid() socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:20 executing program 2: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) get_robust_list(r1, &(0x7f0000000200)=&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, &(0x7f0000000240)=0x18) r2 = shmget(0x2, 0x4000, 0x54000100, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, 0x0) r3 = getpgrp(0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xffffffff, 0x200, 0x3, 0x2f, 0x0, 0x4, 0x200, 0x4, 0x9, 0x9, 0x7, 0x5, 0x80000001, 0x0, 0x7, 0x6, 0x7, 0x9, 0x5, 0x0, 0x8000000, 0xffffffffffffff74, 0x9, 0x1, 0x2, 0x2, 0x1f, 0x0, 0x7e, 0x0, 0x100000000, 0x1, 0x7, 0xfff, 0x1, 0xffffffffffffff5d, 0x0, 0x4, 0x3bbed359cd51d629, @perf_bp={&(0x7f0000000000), 0x6}, 0x2, 0x7f56, 0x400, 0x7, 0x100000001, 0x9, 0x7}, r3, 0xa, r0, 0x1) 19:46:20 executing program 0: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) getpid() socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 19:46:20 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x81) r1 = epoll_create1(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000480)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x317, 0x0, 0x0, 0xffffff89) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001940)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x0, 0x6, [{0x0, 0xf5b, 0x9, 0x38, '/dev/kvm\x00'}, {0x3, 0xa67a, 0xa, 0x0, '-vboxnet1$'}]}, 0x60) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x10000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) shmctl$SHM_INFO(0x0, 0xe, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fstat(r1, &(0x7f0000000180)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x7, 0x204a01) 19:46:20 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x6, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x2000000]}]}}) 19:46:20 executing program 0: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) getpid() socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) [ 2349.994920] protocol 88fb is buggy, dev hsr_slave_0 19:46:23 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x600]}}, 0xfffffea9) 19:46:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x81) r1 = epoll_create1(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000480)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x317, 0x0, 0x0, 0xffffff89) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001940)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x0, 0x6, [{0x0, 0xf5b, 0x9, 0x38, '/dev/kvm\x00'}, {0x3, 0xa67a, 0xa, 0x0, '-vboxnet1$'}]}, 0x60) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x10000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) shmctl$SHM_INFO(0x0, 0xe, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fstat(r1, &(0x7f0000000180)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x7, 0x204a01) 19:46:23 executing program 3: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:23 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x6, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x2000000]}]}}) 19:46:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x81) r1 = epoll_create1(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000480)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x317, 0x0, 0x0, 0xffffff89) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001940)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000180)={0x38, 0x0, 0x6, [{0x3, 0xa67a, 0xa, 0x0, '-vboxnet1$'}]}, 0x38) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x10000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) shmctl$SHM_INFO(0x0, 0xe, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fstat(r1, &(0x7f0000000180)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x7, 0x204a01) 19:46:23 executing program 5: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x2000, 0x404, &(0x7f0000ffd000/0x2000)=nil) shmget(0x2, 0x4000, 0x222, &(0x7f0000ffc000/0x4000)=nil) shmget(0x0, 0x3000, 0x78000008, &(0x7f0000ffc000/0x3000)=nil) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000340)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000440)=0xe8) recvfrom$packet(r1, &(0x7f0000000300)=""/55, 0x37, 0x40000040, &(0x7f0000000480)={0x11, 0xfe, r2, 0x1, 0x3, 0x6, @broadcast}, 0x14) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x8, 0x200000) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) mq_timedreceive(r3, &(0x7f0000000100)=""/236, 0xec, 0x0, &(0x7f0000000240)={r4, r5+10000000}) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xa99e, 0x100) r6 = shmget(0x3, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) shmctl$SHM_INFO(r6, 0xe, 0x0) r7 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1f, 0x400400) sendfile(r3, r0, &(0x7f0000000280), 0x7) ioctl$KVM_SMI(r7, 0xaeb7) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040)) dup3(r7, r0, 0x80000) 19:46:23 executing program 0: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2) pkey_alloc(0x0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x880, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000080)=""/254) 19:46:23 executing program 3: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:23 executing program 5: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2) pkey_alloc(0x0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x880, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000080)=""/254) 19:46:23 executing program 3: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x81) r1 = epoll_create1(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000480)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x317, 0x0, 0x0, 0xffffff89) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001940)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000180)={0x38, 0x0, 0x6, [{0x3, 0xa67a, 0xa, 0x0, '-vboxnet1$'}]}, 0x38) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x10000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) shmctl$SHM_INFO(0x0, 0xe, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fstat(r1, &(0x7f0000000180)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x7, 0x204a01) 19:46:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x81) r1 = epoll_create1(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000480)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x317, 0x0, 0x0, 0xffffff89) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001940)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x0, 0x6, [{0x1, 0xf5b, 0x9, 0x38, '/dev/kvm\x00'}, {0x3, 0x0, 0xa, 0x0, '-vboxnet1$'}]}, 0x60) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x10000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) shmctl$SHM_INFO(0x0, 0xe, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fstat(r1, &(0x7f0000000180)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x7, 0x204a01) [ 2352.892396] kvm: vcpu 0: requested 34784 ns lapic timer period limited to 200000 ns [ 2352.934432] kvm: vcpu 0: requested 34784 ns lapic timer period limited to 200000 ns [ 2354.154890] net_ratelimit: 22 callbacks suppressed [ 2354.154897] protocol 88fb is buggy, dev hsr_slave_0 [ 2354.164973] protocol 88fb is buggy, dev hsr_slave_1 [ 2355.114937] protocol 88fb is buggy, dev hsr_slave_0 [ 2355.114943] protocol 88fb is buggy, dev hsr_slave_0 [ 2355.115009] protocol 88fb is buggy, dev hsr_slave_1 [ 2355.120035] protocol 88fb is buggy, dev hsr_slave_1 [ 2355.125249] protocol 88fb is buggy, dev hsr_slave_0 [ 2355.130211] protocol 88fb is buggy, dev hsr_slave_0 [ 2355.135231] protocol 88fb is buggy, dev hsr_slave_1 [ 2355.140259] protocol 88fb is buggy, dev hsr_slave_1 19:46:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0xc03]}}, 0xfffffea9) 19:46:26 executing program 2: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget(0x1, 0x2000, 0xb50, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x180, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x40, 0x202001) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) shmget(0x3, 0x2000, 0xb0c, &(0x7f0000ffe000/0x2000)=nil) shmget(0x1, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x2, 0x8, &(0x7f0000000080)=0xffff}) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000100)) r2 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r2, 0xe, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x5000) 19:46:26 executing program 3: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:26 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) fcntl$lock(r0, 0x3ffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x1, 0x3000, 0x8, &(0x7f0000ffb000/0x3000)=nil) shmget(0x1, 0x2000, 0x78000080, &(0x7f0000ffc000/0x2000)=nil) shmget(0x1, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil) r1 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000040)=""/239) 19:46:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x81) r1 = epoll_create1(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000480)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x317, 0x0, 0x0, 0xffffff89) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001940)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000180)={0x38, 0x0, 0x6, [{0x3, 0xa67a, 0xa, 0x0, '-vboxnet1$'}]}, 0x38) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x10000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) shmctl$SHM_INFO(0x0, 0xe, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fstat(r1, &(0x7f0000000180)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x7, 0x204a01) 19:46:26 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x317, 0x0, 0x0, 0xffffff89) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20042, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x135}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 19:46:26 executing program 3: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:26 executing program 4: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:26 executing program 5: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x100000000, 0x200) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="00042cbd7000fedbdf250300000008000500040000000800060040000000080006000600000008000600070000005000010008000500020000000c000700c8196dad02fefd000c0007001100000039000000080002008900000008000500010000000c0007001200000001000000080001000a000000080001000a000000200001000c0007001200000001000000080005000300000008000500010000005666893bad4dc4aa2d5b119c591688f12dc39afd1d8fc634ca4c088d3b22ace49ea0f30d25b2c6f70ca2803fb673896ccae0b73c5331c3b23373"], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) shmget(0x2, 0x4000, 0x22, &(0x7f0000ff9000/0x4000)=nil) r2 = shmget$private(0x0, 0x4000, 0x1c00, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000300)={0x4, 0x1000, "3a1857474547aae855194aad36f5a4811aecbf89e00888300ba98f46e61526ec7f2033e76ccfec6ee8a12e92c3ea2010f42fd64887c76d49f15b6f7de0c9addadaf349939e2a76c77a427e09c53ab479bf8cbd42f12fa343f8c4003522f9fe3e52db04a6bf8c32217c51c03dd43ed7c3a2a278d93938e2b43a64bb3379611e664268c17942f6ef9a4a6da539f5f592c01662d4df9312f1010edde3a8203bbf33682b822919d6a726059376ae23df2ecbd744cf8a440ec91ed35072f5727f91a561d21357b27a3de67e60235190a5a6e237c1ef1d6af5cadd2f7aef2ea096e2ec4990b113c913d839347a8db2e6d4273ef92704674d85c799dd8632193619a9ab578f708a1570d9a5d0209948b0e92af3546fb9775b60d7ad876651f5441cc7283ea2005a1a6dbf5d8cd762765c2981230d47f4d5f2fc94821dcddfe222c8ad400ad21d20ee8e1af46f034e9f5b636ef7b667f3ea975054942a64353edfea8847aaceb867eb7cd26693facb1d6d7b54b0e4b36c838d1450b75586de745cefec4bde4df79da257b8c34e39f6414a6a2e6d366277c23d9e681ab7a0ef96f5cc85aadb9cbd3495ea1d0dda5f0f78270aeafd464d01908d4c83630f062fcb447369518a40feeffc006a246897266e9adea7ca461ea70cc87e8c7233c90a74518055f18786794b4940e2dd3f6999839e929fc923f3ecf5f60a6de1865a476f64eed8126102ab26077c21838f31c26435a6fd9895adf5f9c6c2bd9e4ffd7babe409ffb3e58233547478ef9de152b35a837f3f730cdc43f3683f208654997ae3b5129d0b90d728ab11452d58345040659271560e279a45db25e67e1b42f4bc5939f234a8100daf38314138aaae75116c33846ca3346a57997073adde0f2241b1329468d4d1179bd953798339588318a15e7dffe07bb4967e6510a1aa1ebdb6d60bf74509607ff615ecb366e35c36a9b4d0aa46443698dfae63382d15d2da95317225483dd94af3c01cbf6d00b4cf4303091c360cf303193727deb4a48824ca9fcfb844e9320798e903b819d7dfd802006ae4406b535b650d5d3a41f0ba2311b9bf5dc608f5a51d05cc9e317274fc096a4e93b9b056318cf035d19bf4d4022734e3c64c5e6aa805a87403a93cfe724f0b508bec3775d59f9e493f561f18d18153f1666c8803bdef0d0741795400e24c61b7dd519632943f7531d9df0bdf676a777e3b1dad9d97255b4cfe8b4e3bdc3d6c4364e58818ca840a9808eec010006b5589fbacaa4634c572062fd03ab672999ddbb3b7751cc5ec8dd5e8fba00638653a690bbe09b398d5850d800411ad6d5c123a79effb71546a8d65414790479274899f59f2f112eeffca2b369ec1109df702adc7d62cf045ce81d56d77c3869343a0f3f567145aeba1bc8fe0a202dd7e66150afe257b4baacad5886cd2d177ce6ef8cdef8e1b081090faf77a471b50ca9c38c4aa5b0c56f635aa514f014078a4c74ddeb8e444f1552089f09ff5048cfb71c1138a91927d11b5ce270075dd0509e7a08ca57c74bdee20e8de2b1c9688b1551fe691308f7befb3e5187422ffae4751b05090f0b299deba46f2525c6f3da2cca01e7cd4b25b9391eb1e0a9cdb4bb78721764217cb0b4b1ef98288a6d012c45aefd5c86eb88689272db226b525d330554eb078bf484d4471fed3024030f1469ef8acc019e5a4f974fa6b8b9b470569c696046e220008208c9cce9eebf60558fea80d0bfc265b6a876f3ed814aee3514f2996159ba7448b1e21fa58a6d0479f35a11df3d6e2c9f06a06cc308ac0bf9455710d500886fa41bfb688ef4f2e0721833fa21334c5b4e8bff333259019f6e5fc0e5e0de7345649b65269bf4fb610bca8d16914c4d8470a8c4768a4447e29579a41795874c39a16fbb98640d855b608095185cc11d0d023fb7e221f1cd7b99a6b157cad99253598f57f8349e697fcb8b2a0440a4047e326cfef178d47317264d7af676adb3e5b613b05efc8479b4e9bc3d7ad637a8ca0aae96838d9a7bea294184b564250727675972f6e2b7ab60820920c2c010ff1dd8cb9a2d7b30e20985cbe1c33c96eb67dc954c0f9f7d9d72442d60afaeaf73bca8d2a25a4bd5efcf671ae87a3b9b6435b20dd8e9f0f12ca207cef2add4e8bb76d3019f409f6f9ac09adda9facdbfd897b9e767786d142372e1ca68febfc4b79da65ce25f8d07f97c07caa2298950547b3b4b3ea2ad1e6a1b7ede7a9d6343ad77a25ca8cc0e183d649535c9bc6d1281ec4e9c61b280aa721fd8f6ca53f9ed3bf6d64eb8425581250242500d64113e819e1601df3f96a3b6ca155d32fbfd8b9ef1b6b4247ce848a5f3bc4069059294f329c03afbf8f0d92d42ce325ea3af8fc5850102f620664a54da4353b4f7d29d7377ac193c893556f3070f8b3fedc86d2cc62295bafa3912b29fd5ad1e39c1cb3a9d098d3acf434224bc264fcdc99077bca4a0eb473cb96d3258eab644d4c11b50287e886adad4b8e71c15060844f12713ccd834e8fb45434e6fb75cba0a29c97d8fcde2fedf64a26ebf3a7a5865fc6c1a182ef99e202221847a1f5b2aafd0dfd549967019dc3e4c685efbf24b72e95bb60b13b24f1c33e7fcaf306167ebe71db7e639946c5e466b2ca757ef57a8e9db4f20f2eef924cb2cb67b5520179f54724ce012d1b737375871a71a764a3ea75d89d01a05450188a8431529d64313da70c1039d2bdac061e3b9a1be39570a51d02973c284b1764d38cbb2bc7249e43afbb976e4cc9b5a3deba5c55ae87c01c8efaa85a763fb6e8b02c28cbdb0d30ab75ab076557a9def88a2828e2b0fb15eddd6397cf9f87eb393c6594af9a1463477446d62b8514a33b123121c0528312b0c69d56ad7150bf8655093105d99cb6c6a085e7b264b2bdbb2f0a3d068e82f8a1b28e7465b58007a0046abe48b1c4d94fce7c3f6ad7b092d9dcf93d8a78ffad94f549c7e1c48ca65b22e1bcf69e46c870e5d817818fc9c300d609a047e331f4cd492949af7c8d4fbbde13bb77501ea2558b272f9185a576648eeaf9835ce1ec7541c1fe33d0531343f30c48961ccafd38efbc8c51b48a7e22ff2b3c1f3a463a65777e8635045e7e8e8af484ed787e5c41ce3cc680034473220cf5894b976c643d166f29fb5ad0ef0eb52ede815584c9d405a7db09786a3920231dcd7e9e0bcd086565c772a89e786382ea64ece841543e3c0fff9a7f5f17f9cc109278d4854f5c43cd97e75be81b08e160d657fca1003c88fe18174039e414f5867a2ab8d8783c996ce7110d13554ee7590897d7711e14555b5f0c3961753bc2502d22448e5de1cb98c64e1f4a7c29ac0288e8efc54bbe4af8d0b068713af1ea93a20d572296dbe222a59acf1e7e1835bc05151283d49165222527de698499e2c907631dd77d68172ca91e2a67a8997dd68cee3606dffa72955a66346e17f70a78fc07bbd3f892f4506ec875a54ebda2c91e4335b905ac41f5e11f7cc943e540546a03e3f20df9f5c04bf470959126ed73abdc4c1062ab61e5705616ce446495d0a085e5f96f3eada2a97b5dc983c3a5556f6be3cf497415769f993054a5969e1d05478158e67141d34b28e697c4ea85873c599c73c8fe17da3ce3b1108cfac33db584debdbe8e3631588f57f62195411e515638e984eee8a0d13ebaec0ce0770f3bb992ed5efb78ec2afe94249bb1a157ffc737a8d5d227a2c44c63c3868e5acec2da6b0276125ca0a5410127f88ffb1c997ca90de93760cad4094c8cdaad2372c393970b25861fd988dba7e5098904a112b928f6264ce5579781cfbd418593ba6104ede39bd5433a771ff2dbca39d9c66f9a4e8444dd6b0bd1fd9239a624c7421001742a864fd58aa55dadcb8522f8fcccba21854898212451d19ae6f92011e6f707bd3886a36d601841aa2a113770dd67bc4fe2315efb39f35d06dceb82efe174a9b21e35c0f39baba3f8afe3308a230b7dc6de99b4ae07534f6d59b9d0df0ed2d3c600b1df6d41d696b4a01f4228a1be0b08a791c336113ad1f9901744b20e9def6205f2ea54af137add32508fcadbfb23fae62b9b0b7887aa5eab1d67c233cfd44c8604199fbf891f357ecc68ef3025bf7c6b3eff1175b7e57ae63cee1675465254224a82a347dce21da2dbc1072c0a9b04b61f7be17ee6c23d1d21ccd932c3564886d7f2e4aca5b6cc4be6ee871ba251ca39a2e5cd13eadf912dccb4cd7bd4c6bde560270011a6a11c1052dce1cc57238548bbec72fbb283c7316567ec005fea919fed5fc4ca437c39438076f79dd52d0d9d32f939c8c74dafc1221bb06ce52290487526af6a026903549a8d4c0d24aa62b7ca76b6d4bb276d3c942384f527ee70d3d88f75f9fcc3e4fe80a7448bea1fe428ac13c4de98ed64f804b512c927a40478e63e65df8d989a7d54bc9a227a80bfab7a0760f34844ce83c9efaccf237d7be0586c6e57a16d422396a2effe8c6c4815841cf4dba33a30c1788fa5a4b5037c3afa753069040fdc9b7b7d0d67cb7e3bd9103223758696cf298253d142e59c8863b198670c7d7ae6d8cfc223d8f9fbff1e58ff94a8f8087953da41bc4af60d53404cfe867254ec0789bcc8d066f77dd4a61cc0f1d41bf22ef6be754ea45fef2eaacfdac5fbd65a68d1ba6a08feb988e0b8ecd2b65b4c12397ac8133058a2c211a9727634b1e7b9287afafbe21f0734a7d426e031806794a3aa7961d05d0f99d4e907a0015b3268f3f25e8d2051af4973b86bf9b3c6cb97aade1e918e3b92a8576bcc1974dc1f4217763075937985768735d6e278593d93748600439e0ecb2c9ef46c6da30b9641f3b2b35413b74dea5b15950674c2a60ec7fbf376b1c2d2526cf9f4f15ecb7158db4f03a13164afbdab0efd30866a3bfea0f3e02d8caa572e842dc364e137f064c920b84c2ecd65df83b4febd11efb6dc26044092f5f3ad46810437f8bf1ec72e8646bbc971e2097279923f5d733e58cfd24378d33e16b84c9f1e29c008cdb7389509b8c5a1593f64a54e25b059abbd13778a9d939ccc55010eb8abd17f5c12195d1f69502ed3aa6cfcb38e40891f9178e6f52ec877b6e6c41907fc26f2d72284a5f5865a2d288195e190d5799bb3dffa99595a4a8d803b41e9611830c4f64204db2a55162f63699f458a6506e13b2acf033a92e0e2789c16bffc5c864c7bc240e80e144d51c2b92ee4686b22425e33047d88d538493aa5bebd34a40a0070868b0d47a337019ce1b77b190cb8d0f6b8d651df04166a5808b435924c62101402d57bf4b07b4f062a16d9fe3523572a7cbee7930f651c524ae1c0dc216d14b35cf8ffbda73090825ff55c05212cd36259f8effed5616d26e585ac740770c7784d346b4dc0853a0a95f426b0504d368f648762175c890887f5c8c757e78dbdd726a4ec464cc16c96c7541f67b83f7977648b6c3761269a24e1feac48b214b2de0b9802a3beff2f6f34ba6b36c8edfb0dca507a646bd4ff8c17af40b16a9b74720e48cb54c3634947081cfad534cf8c10097c7fa43d866fd1267a49b80099b7c9f45349fe3574ffe9ad44ebe5dd8d07b40f65ea616fe4aa615c8e18ec096c7e75c727f7dc15f589f9841976292d57d1cc0830692cd931739344392247338095ef38d04c8155988ff0ce8fea0c74c5bb4da8775c7c374e8a1b33c90b456cd82fee6b70709be7221c6a3ca6f656e29530bac124f4f33359f263d5ccef50f77ff745bb3447f3a006c51de49193a9a58edb0277ed284c7b4d2f91381922e914318426f32ea71b648b566d67797cc614f97c73b3"}) 19:46:26 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x317, 0x0, 0x0, 0xffffff89) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 19:46:26 executing program 4: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:26 executing program 3: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:29 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x1b6c]}}, 0xfffffea9) 19:46:29 executing program 4: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000180)=ANY=[@ANYBLOB="79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008914000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f45269f63251bdf58d266b01b54539f6dce1e2c4"]) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0xe46, 0x200) r2 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$get_security(0x11, r2, &(0x7f0000000240)=""/171, 0xab) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000040)) 19:46:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:29 executing program 2: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x2000, 0x78000110, &(0x7f0000ffc000/0x2000)=nil) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x4040) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x80, 0x2, 0x0, 0x8, 0x1b, 0x1f, 0x7f, 0x1, 0x3, 0x0, 0x1000, 0xffffffffffff8554}) r1 = shmget(0x2, 0x3000, 0xa0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x10}) 19:46:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x81) r1 = epoll_create1(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000480)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x317, 0x0, 0x0, 0xffffff89) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001940)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x0, 0x6, [{0x1, 0xf5b, 0x9, 0x38, '/dev/kvm\x00'}, {0x3, 0xa67a, 0xa, 0x0, '-vboxnet1$'}]}, 0x60) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x10000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) shmctl$SHM_INFO(0x0, 0xe, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fstat(r1, &(0x7f0000000180)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x7, 0x204a01) 19:46:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x81) r1 = epoll_create1(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000480)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x317, 0x0, 0x0, 0xffffff89) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001940)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000180)={0x38, 0x0, 0x6, [{0x3, 0xa67a, 0xa, 0x0, '-vboxnet1$'}]}, 0x38) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x10000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) shmctl$SHM_INFO(0x0, 0xe, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fstat(r1, &(0x7f0000000180)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x7, 0x204a01) 19:46:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:29 executing program 4: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) shmget(0x0, 0x2000, 0x54000000, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, 0x0) [ 2358.696986] kvm: vcpu 0: requested 34784 ns lapic timer period limited to 200000 ns [ 2358.708032] kvm: vcpu 0: requested 34784 ns lapic timer period limited to 200000 ns 19:46:29 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:29 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x30c000000000000, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 19:46:29 executing program 5: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(r0, 0x0, 0x9) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:29 executing program 2: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fcntl$lock(r0, 0x27, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) gettid() [ 2359.274927] net_ratelimit: 16 callbacks suppressed [ 2359.274936] protocol 88fb is buggy, dev hsr_slave_0 [ 2359.274976] protocol 88fb is buggy, dev hsr_slave_1 [ 2359.279962] protocol 88fb is buggy, dev hsr_slave_1 [ 2359.285095] protocol 88fb is buggy, dev hsr_slave_0 [ 2359.290105] protocol 88fb is buggy, dev hsr_slave_0 [ 2359.295103] protocol 88fb is buggy, dev hsr_slave_1 [ 2359.300102] protocol 88fb is buggy, dev hsr_slave_1 [ 2359.315254] protocol 88fb is buggy, dev hsr_slave_0 [ 2359.320297] protocol 88fb is buggy, dev hsr_slave_1 [ 2360.394982] protocol 88fb is buggy, dev hsr_slave_0 19:46:32 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x1e78]}}, 0xfffffea9) 19:46:32 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:32 executing program 5: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a83b2f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0xffff, 0x3, &(0x7f0000001200)=[{&(0x7f0000000080)="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", 0x1000, 0x3}, {&(0x7f0000001080)="ebe29fa070eb3ef8b076e6fe359fbf3bab6774caf1b57677256510b42836a4d9c3f20d36d77ef5b038f0f57dbecdbb969a21c3d3c7d07e0aeb16949f08f8e4e432fb9d0dee59f983e0177ac2cd1d41978a3d1c11c5932ecdb3fd8114fcf240222a659dc3cb2577d5c085b1d5a4985c388bef07c15a83d2da3ecad70ed43344ad518a4210d6819f35df28186b419f8be0a6cab643e64e76510a1e873134d381a9dc1a499ec7fd1fecd32eeb784392453850f7ea255a92f1d076", 0xb9, 0x5}, {&(0x7f0000001140)="95441aa94153d9eca9c881265aeb3e22e69989f926250a17ea2f4abd6f4473060ac1d68e6719cba15be2647cdbe28f2143f2bc6854ef971809a05a23a0768540139ded6d0480f7c48d5e70562063666dc03ef934db07b1cee48bba95fa0c3b3c6620fd2d9bd55628359346dc1dc2f7f6575e9dcac4332d8197cf9912c26644b9fbed6538febc2487c086fb6f3f5a76040139a99889eeeb00c26ca3a39555740ba16a82855a48bfe0ee84292da298fc3cf6b2ebc74d1355b32e5d03c0711fab", 0xbf, 0x2}], 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="6e6f737569646469722c737569646469722c73746143e8df8c34653d3078303030303b30303030303030303030362c6572726f72733d776f74612c7374617466735f7175616e74756d3d3078303030303030303030303030303030362c7374617466735f7178616e74756d3d3078303030303030303030303030363535352c00"]) shmctl$SHM_INFO(0x0, 0xe, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001300)='/dev/ashmem\x00', 0x40500, 0x0) 19:46:32 executing program 2: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080), 0x0, 0xfffffffffffffffc) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x7, 0x70, 0x1, 0x6, 0x3, 0x7, 0x0, 0x7ff, 0x0, 0x8, 0x873d, 0xfff, 0x7, 0x1000, 0x700, 0x8, 0xafa, 0x10001, 0xd1, 0x20, 0x8, 0x100, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x10001, 0x7, 0x7fff, 0x46e0, 0x2, 0xf1a, 0xfff, 0xb, 0x9, 0x3ff, 0x1, 0x5, 0x7, 0x0, 0xfff, 0x1, @perf_bp={&(0x7f0000000080), 0x9}, 0x10000, 0x401, 0xf383, 0x7, 0x6, 0xfff, 0xa6b8}, r2, 0x9, r0, 0x1) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r3) shmctl$SHM_INFO(0x0, 0xe, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x10000, 0x0) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) 19:46:32 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0xc03, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 19:46:32 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:32 executing program 2: r0 = semget$private(0x0, 0x5, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000100)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0]) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, r2, r3, r4, 0x80, 0x7}, 0x0, 0x9, 0x1}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) fcntl$lock(r5, 0x27, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r5, r5, &(0x7f0000000240), 0x4) r6 = socket$inet6(0xa, 0x3, 0x2d) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0xff}, 0x0, @in=@remote}}, 0xe8) shmctl$SHM_INFO(0x0, 0xe, 0x0) [ 2361.776746] gfs2: invalid mount option: staCèߌ4e=0x0000;00000000006 [ 2361.785496] gfs2: can't parse mount arguments 19:46:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:32 executing program 2: r0 = semget$private(0x0, 0x5, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000100)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0]) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, r2, r3, r4, 0x80, 0x7}, 0x0, 0x9, 0x1}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) fcntl$lock(r5, 0x27, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r5, r5, &(0x7f0000000240), 0x4) r6 = socket$inet6(0xa, 0x3, 0x2d) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0xff}, 0x0, @in=@remote}}, 0xe8) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x81) r1 = epoll_create1(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000480)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x317, 0x0, 0x0, 0xffffff89) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001940)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x0, 0x6, [{0x1, 0xf5b, 0x9, 0x38, '/dev/kvm\x00'}, {0x3, 0xa67a, 0xa, 0x0, '-vboxnet1$'}]}, 0x60) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x10000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) shmctl$SHM_INFO(0x0, 0xe, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fstat(r1, &(0x7f0000000180)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x7, 0x204a01) 19:46:32 executing program 5: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a83b2f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0xffff, 0x3, &(0x7f0000001200)=[{&(0x7f0000000080)="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", 0x1000, 0x3}, {&(0x7f0000001080)="ebe29fa070eb3ef8b076e6fe359fbf3bab6774caf1b57677256510b42836a4d9c3f20d36d77ef5b038f0f57dbecdbb969a21c3d3c7d07e0aeb16949f08f8e4e432fb9d0dee59f983e0177ac2cd1d41978a3d1c11c5932ecdb3fd8114fcf240222a659dc3cb2577d5c085b1d5a4985c388bef07c15a83d2da3ecad70ed43344ad518a4210d6819f35df28186b419f8be0a6cab643e64e76510a1e873134d381a9dc1a499ec7fd1fecd32eeb784392453850f7ea255a92f1d076", 0xb9, 0x5}, {&(0x7f0000001140)="95441aa94153d9eca9c881265aeb3e22e69989f926250a17ea2f4abd6f4473060ac1d68e6719cba15be2647cdbe28f2143f2bc6854ef971809a05a23a0768540139ded6d0480f7c48d5e70562063666dc03ef934db07b1cee48bba95fa0c3b3c6620fd2d9bd55628359346dc1dc2f7f6575e9dcac4332d8197cf9912c26644b9fbed6538febc2487c086fb6f3f5a76040139a99889eeeb00c26ca3a39555740ba16a82855a48bfe0ee84292da298fc3cf6b2ebc74d1355b32e5d03c0711fab", 0xbf, 0x2}], 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="6e6f737569646469722c737569646469722c73746143e8df8c34653d3078303030303b30303030303030303030362c6572726f72733d776f74612c7374617466735f7175616e74756d3d3078303030303030303030303030303030362c7374617466735f7178616e74756d3d3078303030303030303030303030363535352c00"]) shmctl$SHM_INFO(0x0, 0xe, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001300)='/dev/ashmem\x00', 0x40500, 0x0) 19:46:32 executing program 2: r0 = semget$private(0x0, 0x5, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000100)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0]) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, r2, r3, r4, 0x80, 0x7}, 0x0, 0x9, 0x1}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) fcntl$lock(r5, 0x27, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r5, r5, &(0x7f0000000240), 0x4) r6 = socket$inet6(0xa, 0x3, 0x2d) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0xff}, 0x0, @in=@remote}}, 0xe8) shmctl$SHM_INFO(0x0, 0xe, 0x0) [ 2362.070840] kvm: vcpu 0: requested 34784 ns lapic timer period limited to 200000 ns [ 2362.079526] gfs2: invalid mount option: staCèߌ4e=0x0000;00000000006 [ 2362.096654] gfs2: can't parse mount arguments [ 2364.554992] net_ratelimit: 23 callbacks suppressed [ 2364.555009] protocol 88fb is buggy, dev hsr_slave_0 [ 2364.565153] protocol 88fb is buggy, dev hsr_slave_1 19:46:35 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x2400]}}, 0xfffffea9) 19:46:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:35 executing program 2: r0 = semget$private(0x0, 0x5, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000100)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0]) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, r2, r3, r4, 0x80, 0x7}, 0x0, 0x9, 0x1}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) fcntl$lock(r5, 0x27, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r5, r5, &(0x7f0000000240), 0x4) r6 = socket$inet6(0xa, 0x3, 0x2d) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0xff}, 0x0, @in=@remote}}, 0xe8) 19:46:35 executing program 5: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='security.apparmor\x00', &(0x7f00000000c0)=""/58, 0x3a) 19:46:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x81) r1 = epoll_create1(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000480)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x317, 0x0, 0x0, 0xffffff89) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001940)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x0, 0x6, [{0x1, 0xf5b, 0x9, 0x38, '/dev/kvm\x00'}, {0x3, 0xa67a, 0xa, 0x0, '-vboxnet1$'}]}, 0x60) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x10000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) shmctl$SHM_INFO(0x0, 0xe, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0xfffffffffffffffe}) fstat(r1, &(0x7f0000000180)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x7, 0x204a01) 19:46:35 executing program 0 (fault-call:7 fault-nth:0): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:35 executing program 5 (fault-call:4 fault-nth:0): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:46:35 executing program 2: r0 = semget$private(0x0, 0x5, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000100)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0]) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, r2, r3, r4, 0x80, 0x7}, 0x0, 0x9, 0x1}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) fcntl$lock(r5, 0x27, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r5, r5, &(0x7f0000000240), 0x4) r6 = socket$inet6(0xa, 0x3, 0x2d) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) [ 2365.001582] FAULT_INJECTION: forcing a failure. [ 2365.001582] name failslab, interval 1, probability 0, space 0, times 0 [ 2365.023122] CPU: 1 PID: 16768 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2365.030418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2365.039786] Call Trace: [ 2365.042485] dump_stack+0x172/0x1f0 [ 2365.046200] should_fail.cold+0xa/0x1b [ 2365.050112] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2365.055288] ? lock_downgrade+0x810/0x810 [ 2365.059507] ? ___might_sleep+0x163/0x280 [ 2365.063748] __should_failslab+0x121/0x190 [ 2365.068037] should_failslab+0x9/0x14 [ 2365.071865] kmem_cache_alloc_trace+0x2d1/0x760 [ 2365.076638] loop_add+0x51/0x8d0 [ 2365.080017] ? idr_find+0x47/0x60 [ 2365.083510] loop_control_ioctl+0x165/0x360 [ 2365.087869] ? loop_add+0x8d0/0x8d0 [ 2365.091507] ? __might_sleep+0x95/0x190 [ 2365.095491] ? loop_add+0x8d0/0x8d0 [ 2365.099190] do_vfs_ioctl+0xd6e/0x1390 [ 2365.103155] ? selinux_file_ioctl+0x46f/0x5e0 [ 2365.107662] ? selinux_file_ioctl+0x125/0x5e0 [ 2365.112183] ? ioctl_preallocate+0x210/0x210 [ 2365.116604] ? selinux_file_mprotect+0x620/0x620 [ 2365.121383] ? iterate_fd+0x360/0x360 [ 2365.125232] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2365.130811] ? fput+0x128/0x1a0 [ 2365.134134] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2365.139740] ? security_file_ioctl+0x93/0xc0 [ 2365.144164] ksys_ioctl+0xab/0xd0 [ 2365.147643] __x64_sys_ioctl+0x73/0xb0 [ 2365.151574] do_syscall_64+0x103/0x610 [ 2365.155481] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2365.160676] RIP: 0033:0x457e39 [ 2365.163884] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2365.182797] RSP: 002b:00007fc45d3b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2365.190512] RAX: ffffffffffffffda RBX: 00007fc45d3b7c90 RCX: 0000000000457e39 19:46:36 executing program 4: r0 = semget$private(0x0, 0x5, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000100)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0]) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, r2, r3, r4, 0x80, 0x7}, 0x0, 0x9, 0x1}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) fcntl$lock(r5, 0x27, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r5, r5, &(0x7f0000000240), 0x4) r6 = socket$inet6(0xa, 0x3, 0x2d) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0xff}, 0x0, @in=@remote}}, 0xe8) [ 2365.197807] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2365.205089] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 2365.212362] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3b86d4 [ 2365.219634] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:46:36 executing program 0 (fault-call:7 fault-nth:1): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2365.302261] FAULT_INJECTION: forcing a failure. [ 2365.302261] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2365.362293] CPU: 1 PID: 16773 Comm: syz-executor.5 Not tainted 5.0.0-rc5+ #63 [ 2365.369611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2365.378977] Call Trace: [ 2365.381614] dump_stack+0x172/0x1f0 [ 2365.385264] should_fail.cold+0xa/0x1b [ 2365.389207] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2365.394327] ? ___might_sleep+0x163/0x280 [ 2365.398565] should_fail_alloc_page+0x50/0x60 [ 2365.403073] __alloc_pages_nodemask+0x1a1/0x710 [ 2365.407809] ? kasan_check_read+0x11/0x20 [ 2365.411980] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2365.417012] ? __lock_acquire+0x53b/0x4700 [ 2365.421307] ? pmd_val+0x85/0x100 [ 2365.424778] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2365.430331] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2365.435908] alloc_pages_vma+0xdd/0x540 [ 2365.439901] __handle_mm_fault+0x1dd4/0x3f20 [ 2365.444336] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2365.449190] ? find_held_lock+0x35/0x130 [ 2365.453261] ? handle_mm_fault+0x322/0xb30 [ 2365.457556] ? kasan_check_read+0x11/0x20 [ 2365.461718] handle_mm_fault+0x43f/0xb30 [ 2365.465851] __do_page_fault+0x5da/0xd60 [ 2365.469943] do_page_fault+0x71/0x581 [ 2365.473754] ? page_fault+0x8/0x30 [ 2365.477312] page_fault+0x1e/0x30 [ 2365.480771] RIP: 0033:0x4070fd [ 2365.483972] Code: 0f 1f 44 00 00 c6 44 24 0e 06 48 c7 04 24 10 00 00 00 e9 56 ff ff ff e8 11 49 05 00 90 41 55 41 54 55 53 48 81 ec a8 1b 00 00 <48> 89 74 24 18 48 89 7c 24 30 64 48 8b 34 25 28 00 00 00 48 89 b4 [ 2365.502889] RSP: 002b:00007f49d80fd0a0 EFLAGS: 00010206 [ 2365.508267] RAX: 00000000004070f0 RBX: 00007f49d80fec90 RCX: 0000000000000000 [ 2365.514938] protocol 88fb is buggy, dev hsr_slave_0 [ 2365.515548] RDX: 0000000020fe8000 RSI: 0000000000000006 RDI: 0000000000000003 [ 2365.515558] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2365.515567] R10: 0000000000000064 R11: 0000000000000000 R12: 00007f49d80ff6d4 [ 2365.515577] R13: 00000000004c65df R14: 00000000004dba70 R15: 0000000000000007 [ 2365.515850] protocol 88fb is buggy, dev hsr_slave_0 [ 2365.520699] protocol 88fb is buggy, dev hsr_slave_1 19:46:36 executing program 2: r0 = semget$private(0x0, 0x5, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000100)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0]) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, r2, r3, r4, 0x80, 0x7}, 0x0, 0x9, 0x1}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) fcntl$lock(r5, 0x27, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r5, r5, &(0x7f0000000240), 0x4) socket$inet6(0xa, 0x3, 0x2d) [ 2365.527982] protocol 88fb is buggy, dev hsr_slave_1 [ 2365.535333] protocol 88fb is buggy, dev hsr_slave_0 [ 2365.542598] protocol 88fb is buggy, dev hsr_slave_0 [ 2365.549844] protocol 88fb is buggy, dev hsr_slave_1 [ 2365.554879] protocol 88fb is buggy, dev hsr_slave_1 [ 2365.604741] syz-executor.5 invoked oom-killer: gfp_mask=0x0(), order=0, oom_score_adj=1000 [ 2365.617428] FAULT_INJECTION: forcing a failure. [ 2365.617428] name failslab, interval 1, probability 0, space 0, times 0 [ 2365.618283] CPU: 1 PID: 16773 Comm: syz-executor.5 Not tainted 5.0.0-rc5+ #63 [ 2365.635966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2365.635973] Call Trace: [ 2365.635997] dump_stack+0x172/0x1f0 [ 2365.636078] dump_header+0x10f/0xb6c [ 2365.636098] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2365.651647] ? ___ratelimit+0x60/0x595 [ 2365.651664] ? do_raw_spin_unlock+0x57/0x270 [ 2365.651685] oom_kill_process.cold+0x10/0x6f5 [ 2365.651702] ? lock_downgrade+0x810/0x810 [ 2365.668900] ? rcu_read_unlock_special+0xf3/0x210 [ 2365.668923] out_of_memory+0x79a/0x1280 [ 2365.686361] ? lock_acquire+0x16f/0x3f0 [ 2365.690349] ? pagefault_out_of_memory+0xeb/0x11c [ 2365.695208] ? oom_killer_disable+0x280/0x280 [ 2365.699749] ? mutex_trylock+0x18e/0x1e0 [ 2365.703850] ? pagefault_out_of_memory+0xeb/0x11c [ 2365.708712] pagefault_out_of_memory+0x109/0x11c [ 2365.713483] ? out_of_memory+0x1280/0x1280 [ 2365.717738] ? lock_downgrade+0x810/0x810 [ 2365.721913] mm_fault_error+0x100/0x3a0 [ 2365.725909] __do_page_fault+0xc13/0xd60 [ 2365.729995] do_page_fault+0x71/0x581 [ 2365.733812] ? page_fault+0x8/0x30 [ 2365.737361] page_fault+0x1e/0x30 [ 2365.740838] RIP: 0033:0x4070fd [ 2365.744041] Code: 0f 1f 44 00 00 c6 44 24 0e 06 48 c7 04 24 10 00 00 00 e9 56 ff ff ff e8 11 49 05 00 90 41 55 41 54 55 53 48 81 ec a8 1b 00 00 <48> 89 74 24 18 48 89 7c 24 30 64 48 8b 34 25 28 00 00 00 48 89 b4 [ 2365.762952] RSP: 002b:00007f49d80fd0a0 EFLAGS: 00010206 [ 2365.768319] RAX: 00000000004070f0 RBX: 00007f49d80fec90 RCX: 0000000000000000 [ 2365.775603] RDX: 0000000020fe8000 RSI: 0000000000000006 RDI: 0000000000000003 [ 2365.782879] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2365.790155] R10: 0000000000000064 R11: 0000000000000000 R12: 00007f49d80ff6d4 [ 2365.797445] R13: 00000000004c65df R14: 00000000004dba70 R15: 0000000000000007 [ 2365.804744] CPU: 0 PID: 16780 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2365.812035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2365.813970] Mem-Info: [ 2365.821385] Call Trace: [ 2365.821407] dump_stack+0x172/0x1f0 [ 2365.821428] should_fail.cold+0xa/0x1b [ 2365.821446] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2365.821464] ? lock_downgrade+0x810/0x810 [ 2365.823955] active_anon:140732 inactive_anon:201 isolated_anon:0 [ 2365.823955] active_file:8405 inactive_file:45731 isolated_file:0 [ 2365.823955] unevictable:4 dirty:241 writeback:0 unstable:0 [ 2365.823955] slab_reclaimable:20598 slab_unreclaimable:101404 [ 2365.823955] mapped:58722 shmem:245 pagetables:1963 bounce:0 [ 2365.823955] free:768991 free_pcp:587 free_cma:0 [ 2365.826448] ? ___might_sleep+0x163/0x280 [ 2365.826472] __should_failslab+0x121/0x190 [ 2365.826492] should_failslab+0x9/0x14 [ 2365.826507] kmem_cache_alloc_node_trace+0x270/0x720 [ 2365.826523] ? retint_kernel+0x2d/0x2d [ 2365.833449] Node 0 active_anon:562928kB inactive_anon:804kB active_file:33476kB inactive_file:182924kB unevictable:16kB isolated(anon):0kB isolated(file):0kB mapped:234888kB dirty:964kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 186368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2365.834058] __kmalloc_node+0x3d/0x70 [ 2365.839615] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2365.843360] blk_mq_alloc_tag_set+0x346/0xd40 [ 2365.843390] loop_add+0x286/0x8d0 [ 2365.877624] Node 0 DMA free:10788kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2365.881266] ? idr_find+0x47/0x60 [ 2365.881289] loop_control_ioctl+0x165/0x360 [ 2365.881305] ? loop_add+0x8d0/0x8d0 [ 2365.881322] ? __might_sleep+0x95/0x190 [ 2365.885922] lowmem_reserve[]: 0 2553 2555 2555 [ 2365.889346] ? loop_add+0x8d0/0x8d0 [ 2365.889366] do_vfs_ioctl+0xd6e/0x1390 [ 2365.889384] ? selinux_file_ioctl+0x46f/0x5e0 [ 2365.889402] ? selinux_file_ioctl+0x125/0x5e0 [ 2365.894555] Node 0 DMA32 free:434032kB min:117748kB low:126804kB high:135860kB active_anon:562928kB inactive_anon:804kB active_file:33476kB inactive_file:182924kB unevictable:16kB writepending:964kB present:3129332kB managed:2617972kB mlocked:16kB kernel_stack:8320kB pagetables:7852kB bounce:0kB free_pcp:2340kB local_pcp:1016kB free_cma:0kB [ 2365.898380] ? ioctl_preallocate+0x210/0x210 [ 2365.898398] ? selinux_file_mprotect+0x620/0x620 [ 2365.898421] ? iterate_fd+0x360/0x360 [ 2365.898439] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2365.898456] ? fput+0x128/0x1a0 [ 2365.927477] lowmem_reserve[]: 0 0 2 2 [ 2365.930554] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2365.930573] ? security_file_ioctl+0x93/0xc0 [ 2365.930590] ksys_ioctl+0xab/0xd0 [ 2365.956745] Node 0 Normal free:1480kB min:2076kB low:2080kB high:2084kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:96kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2365.960862] __x64_sys_ioctl+0x73/0xb0 [ 2365.960883] do_syscall_64+0x103/0x610 [ 2365.960903] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2365.964424] lowmem_reserve[]: 0 0 0 0 [ 2365.990486] RIP: 0033:0x457e39 [ 2365.990504] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2365.990512] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2365.990527] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2365.990536] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2365.990544] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2365.990553] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2365.990564] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 [ 2365.996421] Node 1 Normal free:2629664kB min:53624kB low:67028kB high:80432kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2366.141754] lowmem_reserve[]: 0 0 0 0 [ 2366.194396] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10788kB [ 2366.253934] Node 0 DMA32: 774*4kB (UME) 3235*8kB (UME) 1573*16kB (UM) 342*32kB (UME) 198*64kB (UM) 115*128kB (UME) 222*256kB (UME) 110*512kB (UM) 73*1024kB (UM) 31*2048kB (UME) 22*4096kB (UM) = 433984kB [ 2366.273576] Node 0 Normal: 18*4kB (UM) 18*8kB (UME) 9*16kB (UME) 5*32kB (UM) 1*64kB (E) 1*128kB (M) 1*256kB (E) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 1480kB [ 2366.288951] Node 1 Normal: 72*4kB (UME) 238*8kB (UME) 261*16kB (UME) 64*32kB (UE) 17*64kB (UME) 14*128kB (U) 4*256kB (UME) 6*512kB (UME) 5*1024kB (UME) 2*2048kB (U) 636*4096kB (UM) = 2629664kB [ 2366.306649] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2366.315937] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2366.324726] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2366.334025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2366.344596] 54380 total pagecache pages [ 2366.351561] 0 pages in swap cache [ 2366.355917] Swap cache stats: add 0, delete 0, find 0/0 [ 2366.361466] Free swap = 0kB [ 2366.364652] Total swap = 0kB [ 2366.368167] 1965979 pages RAM [ 2366.371698] 0 pages HighMem/MovableOnly [ 2366.376093] 339412 pages reserved [ 2366.379723] 0 pages cma reserved [ 2366.383251] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,global_oom,task_memcg=/syz2,task=syz-executor.2,pid=7410,uid=0 [ 2366.399778] Out of memory: Kill process 7410 (syz-executor.2) score 1007 or sacrifice child [ 2366.428129] Killed process 7410 (syz-executor.2) total-vm:72580kB, anon-rss:16548kB, file-rss:35820kB, shmem-rss:0kB 19:46:38 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x6c1b]}}, 0xfffffea9) 19:46:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:38 executing program 4: r0 = semget$private(0x0, 0x5, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000100)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0]) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, r2, r3, r4, 0x80, 0x7}, 0x0, 0x9, 0x1}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) fcntl$lock(r5, 0x27, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r5, r5, &(0x7f0000000240), 0x4) r6 = socket$inet6(0xa, 0x3, 0x2d) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0xff}, 0x0, @in=@remote}}, 0xe8) 19:46:38 executing program 2: r0 = semget$private(0x0, 0x5, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000100)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0]) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, r2, r3, r4, 0x80, 0x7}, 0x0, 0x9, 0x1}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) fcntl$lock(r5, 0x27, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r5, r5, &(0x7f0000000240), 0x4) 19:46:38 executing program 0 (fault-call:7 fault-nth:2): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:38 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:46:38 executing program 2: r0 = semget$private(0x0, 0x5, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000100)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0]) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, r2, r3, r4, 0x80, 0x7}, 0x0, 0x9, 0x1}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) fcntl$lock(r5, 0x27, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19:46:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:39 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) [ 2367.997056] FAULT_INJECTION: forcing a failure. [ 2367.997056] name failslab, interval 1, probability 0, space 0, times 0 [ 2368.051485] CPU: 1 PID: 16796 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2368.058794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2368.068180] Call Trace: [ 2368.070791] dump_stack+0x172/0x1f0 [ 2368.074436] should_fail.cold+0xa/0x1b [ 2368.078361] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2368.083478] ? lock_downgrade+0x810/0x810 [ 2368.087653] ? ___might_sleep+0x163/0x280 [ 2368.091830] __should_failslab+0x121/0x190 [ 2368.096077] should_failslab+0x9/0x14 [ 2368.099889] kmem_cache_alloc_node_trace+0x270/0x720 [ 2368.105001] ? kasan_unpoison_shadow+0x35/0x50 [ 2368.109596] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2368.114733] __kmalloc_node+0x3d/0x70 [ 2368.118586] blk_mq_alloc_tag_set+0x492/0xd40 [ 2368.123136] loop_add+0x286/0x8d0 [ 2368.126596] ? idr_find+0x47/0x60 [ 2368.130063] loop_control_ioctl+0x165/0x360 [ 2368.134392] ? loop_add+0x8d0/0x8d0 [ 2368.138027] ? __might_sleep+0x95/0x190 [ 2368.142011] ? loop_add+0x8d0/0x8d0 [ 2368.145648] do_vfs_ioctl+0xd6e/0x1390 [ 2368.149550] ? selinux_file_ioctl+0x46f/0x5e0 [ 2368.154053] ? selinux_file_ioctl+0x125/0x5e0 [ 2368.158550] ? ioctl_preallocate+0x210/0x210 [ 2368.162990] ? selinux_file_mprotect+0x620/0x620 [ 2368.167763] ? iterate_fd+0x360/0x360 [ 2368.171602] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2368.177146] ? fput+0x128/0x1a0 [ 2368.180436] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2368.185996] ? security_file_ioctl+0x93/0xc0 [ 2368.190427] ksys_ioctl+0xab/0xd0 [ 2368.193889] __x64_sys_ioctl+0x73/0xb0 [ 2368.197788] do_syscall_64+0x103/0x610 [ 2368.201688] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2368.206894] RIP: 0033:0x457e39 [ 2368.210095] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2368.229000] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2368.236722] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2368.243997] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2368.251280] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2368.258555] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2368.265827] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:46:39 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2, 0x0, 0x0, 0x0) 19:46:39 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:46:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) [ 2369.674897] net_ratelimit: 16 callbacks suppressed [ 2369.674906] protocol 88fb is buggy, dev hsr_slave_0 [ 2369.674930] protocol 88fb is buggy, dev hsr_slave_1 [ 2369.679960] protocol 88fb is buggy, dev hsr_slave_1 [ 2369.685098] protocol 88fb is buggy, dev hsr_slave_0 [ 2369.690140] protocol 88fb is buggy, dev hsr_slave_0 [ 2369.695134] protocol 88fb is buggy, dev hsr_slave_1 [ 2369.700150] protocol 88fb is buggy, dev hsr_slave_1 [ 2369.705223] protocol 88fb is buggy, dev hsr_slave_0 [ 2369.720243] protocol 88fb is buggy, dev hsr_slave_1 [ 2370.794904] protocol 88fb is buggy, dev hsr_slave_0 19:46:41 executing program 2: r0 = semget$private(0x0, 0x5, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000100)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0]) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, r2, r3, r4, 0x80, 0x7}, 0x0, 0x9, 0x1}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) fcntl$lock(r5, 0x27, 0x0) 19:46:41 executing program 0 (fault-call:7 fault-nth:3): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:41 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x781e]}}, 0xfffffea9) 19:46:41 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x4, 0x0, 0x0, 0x0) 19:46:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:41 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:46:42 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0x4b47, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:46:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:42 executing program 2: r0 = semget$private(0x0, 0x5, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000100)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0]) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, r2, r3, r4, 0x80, 0x7}, 0x0, 0x9, 0x1}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) [ 2371.086891] FAULT_INJECTION: forcing a failure. [ 2371.086891] name failslab, interval 1, probability 0, space 0, times 0 [ 2371.119261] CPU: 0 PID: 16821 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2371.126568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2371.126576] Call Trace: [ 2371.126605] dump_stack+0x172/0x1f0 [ 2371.126628] should_fail.cold+0xa/0x1b [ 2371.126649] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2371.126667] ? lock_downgrade+0x810/0x810 [ 2371.126688] ? ___might_sleep+0x163/0x280 [ 2371.126731] __should_failslab+0x121/0x190 [ 2371.155383] should_failslab+0x9/0x14 [ 2371.167545] kmem_cache_alloc_node_trace+0x270/0x720 [ 2371.172658] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2371.178267] ? find_next_bit+0x107/0x130 [ 2371.178291] blk_mq_init_tags+0x73/0x2c0 [ 2371.186401] blk_mq_alloc_rq_map+0x88/0x200 [ 2371.186420] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 2371.186433] ? kasan_kmalloc+0x9/0x10 [ 2371.186451] blk_mq_alloc_tag_set+0x78a/0xd40 [ 2371.186474] loop_add+0x286/0x8d0 [ 2371.186490] ? idr_find+0x47/0x60 [ 2371.186508] loop_control_ioctl+0x165/0x360 [ 2371.217491] ? loop_add+0x8d0/0x8d0 [ 2371.221126] ? __might_sleep+0x95/0x190 [ 2371.225110] ? loop_add+0x8d0/0x8d0 [ 2371.228747] do_vfs_ioctl+0xd6e/0x1390 [ 2371.232651] ? selinux_file_ioctl+0x46f/0x5e0 [ 2371.237158] ? selinux_file_ioctl+0x125/0x5e0 [ 2371.241659] ? ioctl_preallocate+0x210/0x210 [ 2371.246482] ? selinux_file_mprotect+0x620/0x620 [ 2371.251281] ? iterate_fd+0x360/0x360 [ 2371.255094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2371.259855] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2371.265405] ? security_file_ioctl+0x93/0xc0 [ 2371.269815] ksys_ioctl+0xab/0xd0 [ 2371.273275] __x64_sys_ioctl+0x73/0xb0 [ 2371.277173] ? do_syscall_64+0x5b/0x610 [ 2371.281162] do_syscall_64+0x103/0x610 [ 2371.285068] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2371.290258] RIP: 0033:0x457e39 [ 2371.293452] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2371.312371] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2371.320096] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2371.327388] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2371.334657] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2371.341923] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2371.349193] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 [ 2371.382722] blk-mq: reduced tag depth (128 -> 64) 19:46:42 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x5, 0x0, 0x0, 0x0) 19:46:42 executing program 0 (fault-call:7 fault-nth:4): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:42 executing program 2: r0 = semget$private(0x0, 0x5, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000100)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0]) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, r2, r3, r4, 0x80, 0x7}, 0x0, 0x9, 0x1}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 19:46:42 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0x4b49, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:46:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) [ 2371.925614] FAULT_INJECTION: forcing a failure. [ 2371.925614] name failslab, interval 1, probability 0, space 0, times 0 [ 2371.937283] CPU: 0 PID: 16846 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2371.944597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2371.944605] Call Trace: [ 2371.944633] dump_stack+0x172/0x1f0 [ 2371.944660] should_fail.cold+0xa/0x1b [ 2371.964102] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2371.964120] ? lock_downgrade+0x810/0x810 [ 2371.964139] ? ___might_sleep+0x163/0x280 [ 2371.964162] __should_failslab+0x121/0x190 [ 2371.973419] should_failslab+0x9/0x14 [ 2371.973436] kmem_cache_alloc_node_trace+0x270/0x720 [ 2371.973451] ? __lock_is_held+0xb6/0x140 [ 2371.973464] ? should_fail+0x14d/0x85c [ 2371.973485] __kmalloc_node+0x3d/0x70 [ 2372.003644] sbitmap_init_node+0x29e/0x510 [ 2372.007897] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2372.013374] sbitmap_queue_init_node+0x40/0x710 [ 2372.018057] ? find_next_bit+0x107/0x130 [ 2372.022140] blk_mq_init_tags+0x119/0x2c0 [ 2372.026300] blk_mq_alloc_rq_map+0x88/0x200 [ 2372.030653] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 2372.035161] ? kasan_kmalloc+0x9/0x10 [ 2372.038974] blk_mq_alloc_tag_set+0x78a/0xd40 [ 2372.043504] loop_add+0x286/0x8d0 [ 2372.046994] ? idr_find+0x47/0x60 [ 2372.050464] loop_control_ioctl+0x165/0x360 [ 2372.054814] ? loop_add+0x8d0/0x8d0 [ 2372.058457] ? __might_sleep+0x95/0x190 [ 2372.062438] ? loop_add+0x8d0/0x8d0 [ 2372.066072] do_vfs_ioctl+0xd6e/0x1390 [ 2372.069976] ? selinux_file_ioctl+0x46f/0x5e0 [ 2372.074480] ? selinux_file_ioctl+0x125/0x5e0 [ 2372.079001] ? ioctl_preallocate+0x210/0x210 [ 2372.083416] ? selinux_file_mprotect+0x620/0x620 [ 2372.088199] ? iterate_fd+0x360/0x360 [ 2372.092007] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2372.097562] ? fput+0x128/0x1a0 [ 2372.100853] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2372.106402] ? security_file_ioctl+0x93/0xc0 [ 2372.110827] ksys_ioctl+0xab/0xd0 [ 2372.114289] __x64_sys_ioctl+0x73/0xb0 [ 2372.118204] do_syscall_64+0x103/0x610 [ 2372.122121] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2372.127332] RIP: 0033:0x457e39 [ 2372.130535] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2372.149443] RSP: 002b:00007fc45d3b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2372.157161] RAX: ffffffffffffffda RBX: 00007fc45d3b7c90 RCX: 0000000000457e39 [ 2372.164432] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2372.171705] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 2372.178988] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3b86d4 [ 2372.186260] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 [ 2372.194555] blk-mq: reduced tag depth (128 -> 64) 19:46:45 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000]}}, 0xfffffea9) 19:46:45 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0x541b, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:46:45 executing program 2: r0 = semget$private(0x0, 0x5, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000100)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0]) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, r2, r3, r4, 0x80, 0x7}, 0x0, 0x9, 0x1}) 19:46:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:45 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x6, 0x0, 0x0, 0x0) 19:46:45 executing program 0 (fault-call:7 fault-nth:5): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:45 executing program 2: r0 = semget$private(0x0, 0x5, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000100)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0]) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, r2, r3, 0x0, 0x80, 0x7}, 0x0, 0x9, 0x1}) 19:46:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:45 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0x5421, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:46:45 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x7, 0x0, 0x0, 0x0) [ 2374.358820] FAULT_INJECTION: forcing a failure. [ 2374.358820] name failslab, interval 1, probability 0, space 0, times 0 [ 2374.386988] CPU: 0 PID: 16862 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2374.394292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2374.403660] Call Trace: [ 2374.406269] dump_stack+0x172/0x1f0 [ 2374.409920] should_fail.cold+0xa/0x1b [ 2374.413822] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2374.418942] ? lock_downgrade+0x810/0x810 [ 2374.423138] ? ___might_sleep+0x163/0x280 [ 2374.427332] __should_failslab+0x121/0x190 [ 2374.431607] should_failslab+0x9/0x14 [ 2374.435425] kmem_cache_alloc_node_trace+0x270/0x720 [ 2374.440602] ? check_preemption_disabled+0x48/0x290 [ 2374.445658] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2374.450683] ? find_next_bit+0x107/0x130 [ 2374.454808] sbitmap_queue_init_node+0x29e/0x710 [ 2374.459597] blk_mq_init_tags+0x119/0x2c0 [ 2374.463765] blk_mq_alloc_rq_map+0x88/0x200 [ 2374.468105] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 2374.472609] ? kasan_kmalloc+0x9/0x10 [ 2374.476420] blk_mq_alloc_tag_set+0x78a/0xd40 [ 2374.480936] loop_add+0x286/0x8d0 [ 2374.484404] ? idr_find+0x47/0x60 [ 2374.487896] loop_control_ioctl+0x165/0x360 [ 2374.492239] ? loop_add+0x8d0/0x8d0 [ 2374.495877] ? __might_sleep+0x95/0x190 [ 2374.499865] ? loop_add+0x8d0/0x8d0 [ 2374.503505] do_vfs_ioctl+0xd6e/0x1390 [ 2374.507415] ? selinux_file_ioctl+0x46f/0x5e0 [ 2374.511918] ? selinux_file_ioctl+0x125/0x5e0 [ 2374.516419] ? ioctl_preallocate+0x210/0x210 [ 2374.520839] ? selinux_file_mprotect+0x620/0x620 [ 2374.525621] ? iterate_fd+0x360/0x360 [ 2374.529433] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2374.534981] ? fput+0x128/0x1a0 [ 2374.538271] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2374.543820] ? security_file_ioctl+0x93/0xc0 [ 2374.548242] ksys_ioctl+0xab/0xd0 [ 2374.551720] __x64_sys_ioctl+0x73/0xb0 [ 2374.555628] do_syscall_64+0x103/0x610 [ 2374.559533] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2374.564737] RIP: 0033:0x457e39 [ 2374.567935] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2374.586858] RSP: 002b:00007fc45d3b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2374.595008] RAX: ffffffffffffffda RBX: 00007fc45d3b7c90 RCX: 0000000000457e39 [ 2374.602280] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 19:46:45 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0x5450, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:46:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) [ 2374.609554] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 2374.616825] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3b86d4 [ 2374.624099] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 [ 2374.660138] blk-mq: reduced tag depth (128 -> 64) [ 2374.954923] net_ratelimit: 19 callbacks suppressed [ 2374.954933] protocol 88fb is buggy, dev hsr_slave_0 [ 2374.965058] protocol 88fb is buggy, dev hsr_slave_1 [ 2375.914926] protocol 88fb is buggy, dev hsr_slave_0 [ 2375.914961] protocol 88fb is buggy, dev hsr_slave_1 [ 2375.920024] protocol 88fb is buggy, dev hsr_slave_1 [ 2375.925133] protocol 88fb is buggy, dev hsr_slave_0 [ 2375.930173] protocol 88fb is buggy, dev hsr_slave_0 [ 2375.935143] protocol 88fb is buggy, dev hsr_slave_1 [ 2375.940154] protocol 88fb is buggy, dev hsr_slave_1 [ 2375.945249] protocol 88fb is buggy, dev hsr_slave_0 19:46:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x2000000]}}, 0xfffffea9) 19:46:48 executing program 2: r0 = semget$private(0x0, 0x5, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000100)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0]) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, r2, 0x0, 0x0, 0x80, 0x7}, 0x0, 0x9, 0x1}) 19:46:48 executing program 0 (fault-call:7 fault-nth:6): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:48 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0x5451, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:46:48 executing program 3 (fault-call:1 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:48 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) 19:46:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:46:48 executing program 2: r0 = semget$private(0x0, 0x5, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0x0, 0x0, 0x0, 0x80, 0x7}, 0x0, 0x9, 0x1}) 19:46:48 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0x5452, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:46:48 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xa, 0x0, 0x0, 0x0) [ 2377.457483] FAULT_INJECTION: forcing a failure. [ 2377.457483] name failslab, interval 1, probability 0, space 0, times 0 [ 2377.481052] CPU: 1 PID: 16893 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2377.488355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2377.497732] Call Trace: [ 2377.500368] dump_stack+0x172/0x1f0 [ 2377.504020] should_fail.cold+0xa/0x1b [ 2377.507924] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2377.513050] ? lock_downgrade+0x810/0x810 [ 2377.517212] ? ___might_sleep+0x163/0x280 [ 2377.521380] __should_failslab+0x121/0x190 [ 2377.525627] should_failslab+0x9/0x14 [ 2377.529446] kmem_cache_alloc_node_trace+0x270/0x720 [ 2377.534583] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2377.540127] ? sbitmap_init_node+0x149/0x510 [ 2377.544556] sbitmap_queue_init_node+0x29e/0x710 [ 2377.549334] blk_mq_init_tags+0x17b/0x2c0 [ 2377.553501] blk_mq_alloc_rq_map+0x88/0x200 [ 2377.557835] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 2377.562337] ? kasan_kmalloc+0x9/0x10 [ 2377.566170] blk_mq_alloc_tag_set+0x78a/0xd40 [ 2377.570706] loop_add+0x286/0x8d0 [ 2377.574184] ? idr_find+0x47/0x60 [ 2377.577652] loop_control_ioctl+0x165/0x360 [ 2377.581984] ? loop_add+0x8d0/0x8d0 [ 2377.585628] ? __might_sleep+0x95/0x190 [ 2377.589612] ? loop_add+0x8d0/0x8d0 [ 2377.593248] do_vfs_ioctl+0xd6e/0x1390 [ 2377.597156] ? selinux_file_ioctl+0x46f/0x5e0 [ 2377.601663] ? selinux_file_ioctl+0x125/0x5e0 [ 2377.606165] ? ioctl_preallocate+0x210/0x210 [ 2377.610582] ? selinux_file_mprotect+0x620/0x620 [ 2377.615358] ? iterate_fd+0x360/0x360 [ 2377.619186] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2377.624751] ? fput+0x128/0x1a0 [ 2377.628056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2377.633606] ? security_file_ioctl+0x93/0xc0 [ 2377.638025] ksys_ioctl+0xab/0xd0 [ 2377.641492] __x64_sys_ioctl+0x73/0xb0 [ 2377.645393] do_syscall_64+0x103/0x610 [ 2377.649298] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2377.654495] RIP: 0033:0x457e39 [ 2377.657704] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2377.676641] RSP: 002b:00007fc45d3b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2377.684355] RAX: ffffffffffffffda RBX: 00007fc45d3b7c90 RCX: 0000000000457e39 [ 2377.691629] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2377.699599] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 19:46:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0x2, 0x0) [ 2377.706871] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3b86d4 [ 2377.714145] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 [ 2377.768660] blk-mq: reduced tag depth (128 -> 64) 19:46:48 executing program 2: r0 = semget$private(0x0, 0x5, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0x0, 0x0, 0x0, 0x80, 0x7}, 0x0, 0x9, 0x1}) [ 2380.074923] net_ratelimit: 15 callbacks suppressed [ 2380.074931] protocol 88fb is buggy, dev hsr_slave_0 [ 2380.075630] protocol 88fb is buggy, dev hsr_slave_0 [ 2380.079959] protocol 88fb is buggy, dev hsr_slave_1 [ 2380.085005] protocol 88fb is buggy, dev hsr_slave_1 [ 2380.090102] protocol 88fb is buggy, dev hsr_slave_0 [ 2380.095148] protocol 88fb is buggy, dev hsr_slave_0 [ 2380.100114] protocol 88fb is buggy, dev hsr_slave_1 [ 2380.105147] protocol 88fb is buggy, dev hsr_slave_1 [ 2380.120258] protocol 88fb is buggy, dev hsr_slave_0 [ 2380.125366] protocol 88fb is buggy, dev hsr_slave_1 19:46:51 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x30c0000]}}, 0xfffffea9) 19:46:51 executing program 0 (fault-call:7 fault-nth:7): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0x3, 0x0) 19:46:51 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0x5460, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:46:51 executing program 2: r0 = semget$private(0x0, 0x5, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0x0, 0x0, 0x0, 0x80, 0x7}, 0x0, 0x9, 0x1}) 19:46:51 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xb, 0x0, 0x0, 0x0) 19:46:51 executing program 2: r0 = semget$private(0x0, 0x5, 0x4) getgroups(0x4, &(0x7f0000000100)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0]) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, r1, 0x0, 0x0, 0x80, 0x7}, 0x0, 0x9, 0x1}) 19:46:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xb, 0x0) 19:46:51 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0x40049409, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:46:51 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0x0) [ 2380.569629] FAULT_INJECTION: forcing a failure. [ 2380.569629] name failslab, interval 1, probability 0, space 0, times 0 19:46:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xc, 0x0) 19:46:51 executing program 2: getgroups(0x4, &(0x7f0000000100)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, r0, 0x0, 0x0, 0x80, 0x7}, 0x0, 0x9, 0x1}) [ 2380.625105] CPU: 1 PID: 16924 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2380.632408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2380.641792] Call Trace: [ 2380.644398] dump_stack+0x172/0x1f0 [ 2380.648054] should_fail.cold+0xa/0x1b [ 2380.651962] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2380.657084] ? ___might_sleep+0x163/0x280 [ 2380.661249] __should_failslab+0x121/0x190 [ 2380.665502] should_failslab+0x9/0x14 [ 2380.669316] kmem_cache_alloc_node_trace+0x270/0x720 [ 2380.674439] __kmalloc_node+0x3d/0x70 [ 2380.678250] blk_mq_alloc_rq_map+0xb9/0x200 [ 2380.682642] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 2380.687159] ? kasan_kmalloc+0x9/0x10 [ 2380.690973] blk_mq_alloc_tag_set+0x78a/0xd40 [ 2380.695495] loop_add+0x286/0x8d0 [ 2380.698960] ? idr_find+0x47/0x60 [ 2380.702439] loop_control_ioctl+0x165/0x360 [ 2380.706769] ? loop_add+0x8d0/0x8d0 [ 2380.710405] ? __might_sleep+0x95/0x190 [ 2380.714410] ? loop_add+0x8d0/0x8d0 [ 2380.718065] do_vfs_ioctl+0xd6e/0x1390 [ 2380.721993] ? selinux_file_ioctl+0x46f/0x5e0 [ 2380.726497] ? selinux_file_ioctl+0x125/0x5e0 [ 2380.731003] ? ioctl_preallocate+0x210/0x210 [ 2380.735420] ? selinux_file_mprotect+0x620/0x620 [ 2380.740189] ? iterate_fd+0x360/0x360 [ 2380.743999] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2380.749544] ? fput+0x128/0x1a0 [ 2380.752852] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2380.758410] ? security_file_ioctl+0x93/0xc0 [ 2380.762834] ksys_ioctl+0xab/0xd0 [ 2380.766316] __x64_sys_ioctl+0x73/0xb0 [ 2380.770236] do_syscall_64+0x103/0x610 [ 2380.774137] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2380.779332] RIP: 0033:0x457e39 [ 2380.782549] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2380.801483] RSP: 002b:00007fc45d3b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2380.809194] RAX: ffffffffffffffda RBX: 00007fc45d3b7c90 RCX: 0000000000457e39 [ 2380.816481] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2380.823764] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 2380.831041] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3b86d4 [ 2380.838316] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 [ 2380.855150] blk-mq: reduced tag depth (128 -> 64) 19:46:54 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x4000000]}}, 0xfffffea9) 19:46:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0x40086602, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:46:54 executing program 0 (fault-call:7 fault-nth:8): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xd, 0x0) 19:46:54 executing program 2: getgroups(0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7}, 0x0, 0x9, 0x1}) 19:46:54 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x14, 0x0, 0x0, 0x0) 19:46:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xf, 0x0) 19:46:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0x40087602, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:46:54 executing program 2: getgroups(0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7}, 0x0, 0x9, 0x1}) 19:46:54 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x50, 0x0, 0x0, 0x0) [ 2383.715660] FAULT_INJECTION: forcing a failure. [ 2383.715660] name failslab, interval 1, probability 0, space 0, times 0 19:46:54 executing program 2: getgroups(0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7}, 0x0, 0x9, 0x1}) 19:46:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0x4020940d, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) [ 2383.779232] CPU: 1 PID: 16953 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2383.786548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2383.795906] Call Trace: [ 2383.798508] dump_stack+0x172/0x1f0 [ 2383.802154] should_fail.cold+0xa/0x1b [ 2383.806078] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2383.811244] ? ___might_sleep+0x163/0x280 [ 2383.815461] __should_failslab+0x121/0x190 [ 2383.819722] should_failslab+0x9/0x14 [ 2383.823532] kmem_cache_alloc_node_trace+0x270/0x720 [ 2383.828649] ? kasan_unpoison_shadow+0x35/0x50 [ 2383.833245] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2383.838362] __kmalloc_node+0x3d/0x70 [ 2383.842189] blk_mq_alloc_rq_map+0xfa/0x200 [ 2383.846525] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 2383.851026] ? kasan_kmalloc+0x9/0x10 [ 2383.854847] blk_mq_alloc_tag_set+0x78a/0xd40 [ 2383.859382] loop_add+0x286/0x8d0 [ 2383.862862] ? idr_find+0x47/0x60 [ 2383.866330] loop_control_ioctl+0x165/0x360 [ 2383.870677] ? loop_add+0x8d0/0x8d0 [ 2383.874322] ? __might_sleep+0x95/0x190 [ 2383.878315] ? loop_add+0x8d0/0x8d0 [ 2383.881965] do_vfs_ioctl+0xd6e/0x1390 [ 2383.885877] ? selinux_file_ioctl+0x46f/0x5e0 [ 2383.890385] ? selinux_file_ioctl+0x125/0x5e0 [ 2383.894894] ? ioctl_preallocate+0x210/0x210 [ 2383.899321] ? selinux_file_mprotect+0x620/0x620 [ 2383.904107] ? iterate_fd+0x360/0x360 [ 2383.907929] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2383.913478] ? fput+0x128/0x1a0 [ 2383.916772] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2383.922322] ? security_file_ioctl+0x93/0xc0 [ 2383.926744] ksys_ioctl+0xab/0xd0 [ 2383.930217] __x64_sys_ioctl+0x73/0xb0 [ 2383.934119] do_syscall_64+0x103/0x610 [ 2383.938030] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2383.943236] RIP: 0033:0x457e39 [ 2383.946473] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2383.965375] RSP: 002b:00007fc45d3b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2383.973099] RAX: ffffffffffffffda RBX: 00007fc45d3b7c90 RCX: 0000000000457e39 [ 2383.980372] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2383.987651] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 2383.994925] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3b86d4 [ 2384.002217] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 [ 2384.025047] blk-mq: reduced tag depth (128 -> 64) [ 2385.354930] net_ratelimit: 24 callbacks suppressed [ 2385.354940] protocol 88fb is buggy, dev hsr_slave_0 [ 2385.365056] protocol 88fb is buggy, dev hsr_slave_1 [ 2386.314910] protocol 88fb is buggy, dev hsr_slave_0 [ 2386.314915] protocol 88fb is buggy, dev hsr_slave_0 [ 2386.315005] protocol 88fb is buggy, dev hsr_slave_1 [ 2386.320043] protocol 88fb is buggy, dev hsr_slave_1 [ 2386.325223] protocol 88fb is buggy, dev hsr_slave_0 [ 2386.330212] protocol 88fb is buggy, dev hsr_slave_0 [ 2386.335203] protocol 88fb is buggy, dev hsr_slave_1 [ 2386.340232] protocol 88fb is buggy, dev hsr_slave_1 19:46:57 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x5000000]}}, 0xfffffea9) 19:46:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0x1da, 0x0) 19:46:57 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0x40405514, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:46:57 executing program 2: getgroups(0x3, &(0x7f0000000100)=[0xee00, 0xee01, 0xffffffffffffffff]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, r0, 0x0, 0x0, 0x80, 0x7}, 0x0, 0x9, 0x1}) 19:46:57 executing program 0 (fault-call:7 fault-nth:9): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:46:57 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xc0, 0x0, 0x0, 0x0) 19:46:57 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0x40405515, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:46:57 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 19:46:57 executing program 2: getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xee01]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7}, 0x0, 0x9, 0x1}) 19:46:57 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x500, 0x0, 0x0, 0x0) [ 2386.755114] FAULT_INJECTION: forcing a failure. [ 2386.755114] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2386.785223] CPU: 0 PID: 16984 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2386.792532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2386.801919] Call Trace: [ 2386.804536] dump_stack+0x172/0x1f0 [ 2386.808191] should_fail.cold+0xa/0x1b [ 2386.812091] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2386.817212] ? ___might_sleep+0x163/0x280 [ 2386.821381] should_fail_alloc_page+0x50/0x60 [ 2386.825888] __alloc_pages_nodemask+0x1a1/0x710 [ 2386.830568] ? __lock_is_held+0xb6/0x140 [ 2386.834653] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2386.839677] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2386.845227] ? find_next_bit+0x107/0x130 [ 2386.849363] ? __cpu_to_node+0x7e/0xa0 [ 2386.853263] ? blk_mq_hw_queue_to_node+0xf1/0x140 [ 2386.858123] blk_mq_alloc_rqs+0x223/0x7f0 [ 2386.862287] ? __kmalloc_node+0x4e/0x70 [ 2386.866291] __blk_mq_alloc_rq_map+0x15f/0x2e0 [ 2386.870878] ? kasan_kmalloc+0x9/0x10 [ 2386.874692] blk_mq_alloc_tag_set+0x78a/0xd40 [ 2386.879226] loop_add+0x286/0x8d0 [ 2386.882689] ? idr_find+0x47/0x60 [ 2386.886168] loop_control_ioctl+0x165/0x360 [ 2386.890498] ? loop_add+0x8d0/0x8d0 [ 2386.894141] ? __might_sleep+0x95/0x190 [ 2386.898156] ? loop_add+0x8d0/0x8d0 [ 2386.901812] do_vfs_ioctl+0xd6e/0x1390 [ 2386.905729] ? selinux_file_ioctl+0x46f/0x5e0 [ 2386.910246] ? selinux_file_ioctl+0x125/0x5e0 [ 2386.914805] ? ioctl_preallocate+0x210/0x210 [ 2386.919241] ? selinux_file_mprotect+0x620/0x620 [ 2386.924011] ? iterate_fd+0x360/0x360 [ 2386.927830] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2386.933374] ? fput+0x128/0x1a0 [ 2386.936693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2386.942289] ? security_file_ioctl+0x93/0xc0 [ 2386.946712] ksys_ioctl+0xab/0xd0 [ 2386.950189] __x64_sys_ioctl+0x73/0xb0 [ 2386.954093] do_syscall_64+0x103/0x610 [ 2386.957997] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2386.963194] RIP: 0033:0x457e39 [ 2386.966393] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2386.985348] RSP: 002b:00007fc45d3b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2386.993068] RAX: ffffffffffffffda RBX: 00007fc45d3b7c90 RCX: 0000000000457e39 [ 2387.000380] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2387.007657] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 2387.014947] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3b86d4 [ 2387.022236] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:46:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) syslog(0x9, &(0x7f0000000000)=""/135, 0x87) 19:46:58 executing program 2: getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xee01]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7}, 0x0, 0x9, 0x1}) 19:47:00 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x6000000]}}, 0xfffffea9) 19:47:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0x80045500, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:47:00 executing program 0 (fault-call:7 fault-nth:10): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:00 executing program 2: getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xee01]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7}, 0x0, 0x9, 0x1}) 19:47:00 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffb000/0x3000)=nil) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) shmctl$SHM_INFO(r1, 0xe, 0x0) r2 = socket$inet6(0xa, 0x80a, 0x1) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000000)="583d3abaca8e8abf7ad3783fa16fb1c465077a234d742c8a59cc27d82058ab292f61355715e14c3f65de770632d431aec3ee45e81b4b0a9b6909e0665107caa9ec21167c9987113b82b843145879856887884b3dc9745c1d599429daad1729ea7f51a2", 0x63) 19:47:00 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x600, 0x0, 0x0, 0x0) 19:47:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0x800455d1, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:47:00 executing program 2: getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, r0, 0x0, 0x0, 0x80, 0x7}, 0x0, 0x9, 0x1}) 19:47:00 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002dbd7000fcdbdf2501000000000000000941000000140018000000017564703a73797a3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x41) shmget(0x0, 0x3000, 0x9, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x7, &(0x7f0000ffb000/0x3000)=nil) r2 = shmget(0x3, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffb, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:47:00 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x700, 0x0, 0x0, 0x0) [ 2389.915144] FAULT_INJECTION: forcing a failure. [ 2389.915144] name failslab, interval 1, probability 0, space 0, times 0 [ 2389.949589] CPU: 1 PID: 17019 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2389.956903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2389.966255] Call Trace: [ 2389.968860] dump_stack+0x172/0x1f0 [ 2389.972520] should_fail.cold+0xa/0x1b [ 2389.976451] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2389.981563] ? lock_downgrade+0x810/0x810 [ 2389.985754] ? ___might_sleep+0x163/0x280 [ 2389.989936] __should_failslab+0x121/0x190 [ 2389.994208] should_failslab+0x9/0x14 [ 2389.998015] kmem_cache_alloc_node+0x265/0x710 [ 2390.002615] ? debug_mutex_init+0x2d/0x60 [ 2390.006783] ? __mutex_init+0xef/0x130 [ 2390.010775] blk_alloc_queue_node+0x32/0x760 [ 2390.015209] blk_mq_init_queue+0x4a/0xb0 [ 2390.019281] loop_add+0x2dd/0x8d0 [ 2390.022762] ? idr_find+0x47/0x60 [ 2390.026230] loop_control_ioctl+0x165/0x360 [ 2390.030562] ? loop_add+0x8d0/0x8d0 [ 2390.034214] ? __might_sleep+0x95/0x190 [ 2390.038201] ? loop_add+0x8d0/0x8d0 [ 2390.041837] do_vfs_ioctl+0xd6e/0x1390 [ 2390.045745] ? selinux_file_ioctl+0x46f/0x5e0 [ 2390.050264] ? selinux_file_ioctl+0x125/0x5e0 [ 2390.054800] ? ioctl_preallocate+0x210/0x210 [ 2390.059247] ? selinux_file_mprotect+0x620/0x620 [ 2390.064027] ? iterate_fd+0x360/0x360 [ 2390.067833] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2390.073375] ? fput+0x128/0x1a0 [ 2390.076665] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2390.082219] ? security_file_ioctl+0x93/0xc0 [ 2390.086649] ksys_ioctl+0xab/0xd0 [ 2390.090130] __x64_sys_ioctl+0x73/0xb0 [ 2390.094053] do_syscall_64+0x103/0x610 [ 2390.097980] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2390.103182] RIP: 0033:0x457e39 [ 2390.106409] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2390.125331] RSP: 002b:00007fc45d3b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2390.133052] RAX: ffffffffffffffda RBX: 00007fc45d3b7c90 RCX: 0000000000457e39 [ 2390.140322] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2390.147595] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 2390.154866] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3b86d4 19:47:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0x80086601, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:47:01 executing program 2: getgroups(0x1, &(0x7f0000000100)=[0xffffffffffffffff]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, r0, 0x0, 0x0, 0x80, 0x7}, 0x0, 0x9, 0x1}) [ 2390.162140] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 [ 2390.474920] net_ratelimit: 16 callbacks suppressed [ 2390.474929] protocol 88fb is buggy, dev hsr_slave_0 [ 2390.474965] protocol 88fb is buggy, dev hsr_slave_1 [ 2390.479956] protocol 88fb is buggy, dev hsr_slave_1 [ 2390.485073] protocol 88fb is buggy, dev hsr_slave_0 [ 2390.490085] protocol 88fb is buggy, dev hsr_slave_0 [ 2390.495069] protocol 88fb is buggy, dev hsr_slave_1 [ 2390.500080] protocol 88fb is buggy, dev hsr_slave_1 [ 2390.505203] protocol 88fb is buggy, dev hsr_slave_0 [ 2390.520161] protocol 88fb is buggy, dev hsr_slave_1 [ 2391.595759] protocol 88fb is buggy, dev hsr_slave_0 19:47:03 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x1b6c0000]}}, 0xfffffea9) 19:47:03 executing program 0 (fault-call:7 fault-nth:11): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:03 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0x80087601, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:47:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@mcast1}, &(0x7f0000000080)=0x14) 19:47:03 executing program 2: getgroups(0x1, &(0x7f0000000100)=[0xffffffffffffffff]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, r0, 0x0, 0x0, 0x80, 0x7}, 0x0, 0x9, 0x1}) 19:47:03 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x900, 0x0, 0x0, 0x0) 19:47:03 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0x81785501, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:47:03 executing program 2: getgroups(0x1, &(0x7f0000000100)=[0xffffffffffffffff]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, r0, 0x0, 0x0, 0x80, 0x7}, 0x0, 0x9, 0x1}) 19:47:03 executing program 3: modify_ldt$read_default(0x2, &(0x7f0000000000)=""/118, 0x76) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) ioctl$void(r0, 0x5451) [ 2392.856944] FAULT_INJECTION: forcing a failure. [ 2392.856944] name failslab, interval 1, probability 0, space 0, times 0 [ 2392.916054] CPU: 0 PID: 17046 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2392.923356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2392.932707] Call Trace: [ 2392.932749] dump_stack+0x172/0x1f0 [ 2392.932776] should_fail.cold+0xa/0x1b [ 2392.932803] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2392.932827] ? lock_downgrade+0x810/0x810 [ 2392.952166] ? ___might_sleep+0x163/0x280 [ 2392.956349] __should_failslab+0x121/0x190 [ 2392.960593] should_failslab+0x9/0x14 [ 2392.964398] kmem_cache_alloc_node_trace+0x270/0x720 [ 2392.969512] ? lockdep_init_map+0x10c/0x5b0 [ 2392.973851] __kmalloc_node+0x3d/0x70 [ 2392.977658] ? mempool_alloc+0x380/0x380 [ 2392.981732] ? mempool_free+0x380/0x380 [ 2392.985710] mempool_init_node+0x138/0x560 [ 2392.989961] ? wait_for_completion+0x440/0x440 [ 2392.994563] ? mempool_alloc+0x380/0x380 [ 2392.998624] ? mempool_free+0x380/0x380 [ 2393.002598] mempool_init+0x3d/0x50 [ 2393.006242] bioset_init+0x33a/0x710 [ 2393.009976] blk_alloc_queue_node+0x137/0x760 [ 2393.014490] blk_mq_init_queue+0x4a/0xb0 [ 2393.018570] loop_add+0x2dd/0x8d0 [ 2393.022028] ? idr_find+0x47/0x60 [ 2393.025514] loop_control_ioctl+0x165/0x360 [ 2393.029851] ? loop_add+0x8d0/0x8d0 [ 2393.033477] ? __might_sleep+0x95/0x190 [ 2393.037451] ? loop_add+0x8d0/0x8d0 [ 2393.041119] do_vfs_ioctl+0xd6e/0x1390 [ 2393.045010] ? selinux_file_ioctl+0x46f/0x5e0 [ 2393.049516] ? selinux_file_ioctl+0x125/0x5e0 [ 2393.054016] ? ioctl_preallocate+0x210/0x210 [ 2393.058428] ? selinux_file_mprotect+0x620/0x620 [ 2393.063189] ? iterate_fd+0x360/0x360 [ 2393.067011] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2393.071778] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2393.077351] ? security_file_ioctl+0x93/0xc0 [ 2393.081772] ksys_ioctl+0xab/0xd0 [ 2393.085266] __x64_sys_ioctl+0x73/0xb0 [ 2393.089152] ? do_syscall_64+0x5b/0x610 [ 2393.093146] do_syscall_64+0x103/0x610 [ 2393.097044] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2393.102230] RIP: 0033:0x457e39 [ 2393.105420] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2393.124321] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2393.132029] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2393.139295] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2393.146560] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2393.153830] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2393.161112] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:04 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xa00, 0x0, 0x0, 0x0) 19:47:04 executing program 2: getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) 19:47:04 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc0045516, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) [ 2395.754937] net_ratelimit: 23 callbacks suppressed [ 2395.754946] protocol 88fb is buggy, dev hsr_slave_0 [ 2395.765251] protocol 88fb is buggy, dev hsr_slave_1 19:47:06 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x1e780000]}}, 0xfffffea9) 19:47:06 executing program 0 (fault-call:7 fault-nth:12): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'hwsim0\x00', {0x2, 0x4e24, @multicast1}}) recvmsg(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@nl=@proc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/74, 0x4a}, {&(0x7f00000001c0)=""/34, 0x22}], 0x2, &(0x7f0000000240)=""/74, 0x4a}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x8c, 0x80000) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000340)={0x6, "c9e302213f5af29b84c27e1103049158bc7d17eb495ea1ac198ba874fb881488", 0x800, 0x4b, 0x3, 0x14, 0x4}) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000040)) 19:47:06 executing program 2: getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) 19:47:06 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc00455d0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:47:06 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xb00, 0x0, 0x0, 0x0) 19:47:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x800, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0xdd, 0x40, 0x3a, "abdec2e44ddc3b9453c308ef56c754251a475a1845de31094dbb2852a911a0797376342b1a196297380ef1ba2c27b4432f76a81ccc70322a4a92f96f964a1cadf0201767276161009085c9e4e691d127249718249efc50f79b653c2dc809648b736f1b2ab0578e25771c225a90e2649d9918550053e47909f9677c4b63c24fe6ccc51e5aa0a894116f182b857d16f8816b9293c8265b601f22944b2f1e6b7942b5da6917ef55169313e75c312db28683ba9dd10c169f3b0773c43b49e2f71bde40a09b7f054c77954dbc337085ad2e35590d9e7c3d1d352ae8d67a509d"}) 19:47:06 executing program 2: getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) [ 2395.980574] FAULT_INJECTION: forcing a failure. [ 2395.980574] name failslab, interval 1, probability 0, space 0, times 0 19:47:07 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc0045878, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) [ 2396.025025] CPU: 0 PID: 17075 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2396.032320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2396.041683] Call Trace: [ 2396.044290] dump_stack+0x172/0x1f0 [ 2396.047955] should_fail.cold+0xa/0x1b [ 2396.051857] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2396.056967] ? lock_downgrade+0x810/0x810 [ 2396.061130] ? ___might_sleep+0x163/0x280 [ 2396.065298] __should_failslab+0x121/0x190 [ 2396.069552] should_failslab+0x9/0x14 [ 2396.073362] kmem_cache_alloc+0x2be/0x710 [ 2396.077539] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2396.082659] ? mempool_free+0x380/0x380 [ 2396.086644] mempool_alloc_slab+0x47/0x60 [ 2396.090812] ? mempool_alloc+0x380/0x380 [ 2396.094904] mempool_init_node+0x2e1/0x560 [ 2396.099157] ? mempool_alloc+0x380/0x380 [ 2396.103222] ? mempool_free+0x380/0x380 [ 2396.107200] mempool_init+0x3d/0x50 [ 2396.110837] bioset_init+0x33a/0x710 [ 2396.114573] blk_alloc_queue_node+0x137/0x760 [ 2396.119096] blk_mq_init_queue+0x4a/0xb0 [ 2396.123179] loop_add+0x2dd/0x8d0 [ 2396.126649] ? idr_find+0x47/0x60 [ 2396.130117] loop_control_ioctl+0x165/0x360 [ 2396.134467] ? loop_add+0x8d0/0x8d0 [ 2396.138103] ? __might_sleep+0x95/0x190 [ 2396.142085] ? retint_kernel+0x2d/0x2d [ 2396.145997] ? loop_add+0x8d0/0x8d0 [ 2396.149634] do_vfs_ioctl+0xd6e/0x1390 [ 2396.153533] ? selinux_file_ioctl+0x46f/0x5e0 [ 2396.158047] ? selinux_file_ioctl+0x125/0x5e0 [ 2396.162549] ? ioctl_preallocate+0x210/0x210 [ 2396.166992] ? selinux_file_mprotect+0x620/0x620 [ 2396.171774] ? iterate_fd+0x360/0x360 [ 2396.175591] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2396.180370] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2396.185922] ? security_file_ioctl+0x93/0xc0 [ 2396.190344] ksys_ioctl+0xab/0xd0 [ 2396.193836] __x64_sys_ioctl+0x73/0xb0 [ 2396.197745] ? do_syscall_64+0xed/0x610 [ 2396.201734] do_syscall_64+0x103/0x610 [ 2396.205643] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2396.210838] RIP: 0033:0x457e39 [ 2396.214038] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2396.232949] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2396.240665] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2396.247941] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2396.255229] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2396.262502] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2396.269774] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:07 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xd00, 0x0, 0x0, 0x0) 19:47:07 executing program 0 (fault-call:7 fault-nth:13): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:07 executing program 2: getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7}, 0x0, 0x9, 0x1}) [ 2396.509615] FAULT_INJECTION: forcing a failure. [ 2396.509615] name failslab, interval 1, probability 0, space 0, times 0 [ 2396.556007] CPU: 1 PID: 17095 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2396.563349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2396.572707] Call Trace: [ 2396.575328] dump_stack+0x172/0x1f0 [ 2396.578980] should_fail.cold+0xa/0x1b [ 2396.582886] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2396.588026] ? lock_downgrade+0x810/0x810 [ 2396.592185] ? ___might_sleep+0x163/0x280 [ 2396.596372] __should_failslab+0x121/0x190 [ 2396.600619] should_failslab+0x9/0x14 [ 2396.604425] kmem_cache_alloc+0x2be/0x710 [ 2396.608609] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2396.614154] ? __phys_addr+0xa4/0x120 [ 2396.617990] ? mempool_init+0x3d/0x50 [ 2396.621810] mempool_alloc_slab+0x47/0x60 [ 2396.625988] ? mempool_alloc+0x380/0x380 [ 2396.630049] mempool_init_node+0x2e1/0x560 [ 2396.634306] ? mempool_alloc+0x380/0x380 [ 2396.638373] ? mempool_free+0x380/0x380 [ 2396.642353] mempool_init+0x3d/0x50 [ 2396.646008] bioset_init+0x33a/0x710 [ 2396.649757] blk_alloc_queue_node+0x137/0x760 [ 2396.654262] blk_mq_init_queue+0x4a/0xb0 [ 2396.658336] loop_add+0x2dd/0x8d0 [ 2396.661795] ? idr_find+0x47/0x60 [ 2396.665258] loop_control_ioctl+0x165/0x360 [ 2396.669593] ? loop_add+0x8d0/0x8d0 [ 2396.673292] ? do_vfs_ioctl+0xca/0x1390 [ 2396.677315] ? __sanitizer_cov_trace_switch+0x37/0x80 [ 2396.682506] ? loop_add+0x8d0/0x8d0 [ 2396.686136] do_vfs_ioctl+0xd6e/0x1390 [ 2396.690025] ? selinux_file_ioctl+0x46f/0x5e0 [ 2396.694520] ? selinux_file_ioctl+0x125/0x5e0 [ 2396.699038] ? ioctl_preallocate+0x210/0x210 [ 2396.703451] ? selinux_file_mprotect+0x620/0x620 [ 2396.708221] ? iterate_fd+0x360/0x360 [ 2396.712050] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2396.714920] protocol 88fb is buggy, dev hsr_slave_0 [ 2396.716819] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2396.716838] ? security_file_ioctl+0x93/0xc0 [ 2396.716855] ksys_ioctl+0xab/0xd0 [ 2396.716872] __x64_sys_ioctl+0x73/0xb0 [ 2396.721940] protocol 88fb is buggy, dev hsr_slave_1 [ 2396.727417] ? do_syscall_64+0x5b/0x610 [ 2396.727434] do_syscall_64+0x103/0x610 [ 2396.727469] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2396.727509] RIP: 0033:0x457e39 [ 2396.732053] protocol 88fb is buggy, dev hsr_slave_0 [ 2396.735357] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2396.735365] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2396.735379] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2396.735389] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2396.739317] protocol 88fb is buggy, dev hsr_slave_1 [ 2396.744288] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2396.744304] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2396.826210] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 [ 2396.864516] protocol 88fb is buggy, dev hsr_slave_0 [ 2396.870233] protocol 88fb is buggy, dev hsr_slave_1 [ 2396.876874] protocol 88fb is buggy, dev hsr_slave_0 [ 2396.882426] protocol 88fb is buggy, dev hsr_slave_1 19:47:09 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x24000000]}}, 0xfffffea9) 19:47:09 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc0045878, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:47:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmget$private(0x0, 0x1000, 0x21, &(0x7f0000fff000/0x1000)=nil) shmget(0x2, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmget(0x3, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x4000, 0x87, &(0x7f0000ffa000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x300, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r0, 0xe, 0x0) 19:47:09 executing program 2: getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7}, 0x0, 0x9, 0x1}) 19:47:09 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x1400, 0x0, 0x0, 0x0) 19:47:09 executing program 0 (fault-call:7 fault-nth:14): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:10 executing program 2: getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7}, 0x0, 0x9, 0x1}) 19:47:10 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) [ 2399.160302] FAULT_INJECTION: forcing a failure. [ 2399.160302] name failslab, interval 1, probability 0, space 0, times 0 [ 2399.197782] CPU: 1 PID: 17110 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2399.205074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2399.214423] Call Trace: [ 2399.217025] dump_stack+0x172/0x1f0 [ 2399.220664] should_fail.cold+0xa/0x1b [ 2399.224560] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2399.229672] ? lock_downgrade+0x810/0x810 [ 2399.233832] ? ___might_sleep+0x163/0x280 [ 2399.237994] __should_failslab+0x121/0x190 [ 2399.242260] should_failslab+0x9/0x14 [ 2399.246309] kmem_cache_alloc_node_trace+0x270/0x720 [ 2399.251445] __kmalloc_node+0x3d/0x70 [ 2399.255250] ? mempool_alloc+0x380/0x380 [ 2399.259332] ? mempool_free+0x380/0x380 [ 2399.263335] mempool_init_node+0x138/0x560 [ 2399.267592] ? mempool_alloc+0x380/0x380 [ 2399.271652] ? mempool_free+0x380/0x380 [ 2399.275628] mempool_init+0x3d/0x50 [ 2399.279267] bioset_init+0x547/0x710 [ 2399.282995] blk_alloc_queue_node+0x137/0x760 [ 2399.287506] blk_mq_init_queue+0x4a/0xb0 [ 2399.291580] loop_add+0x2dd/0x8d0 [ 2399.295056] ? idr_find+0x47/0x60 [ 2399.298516] loop_control_ioctl+0x165/0x360 [ 2399.302842] ? loop_add+0x8d0/0x8d0 [ 2399.306470] ? __might_sleep+0x95/0x190 [ 2399.310463] ? loop_add+0x8d0/0x8d0 [ 2399.314101] do_vfs_ioctl+0xd6e/0x1390 [ 2399.317994] ? selinux_file_ioctl+0x46f/0x5e0 [ 2399.322532] ? selinux_file_ioctl+0x125/0x5e0 [ 2399.327031] ? ioctl_preallocate+0x210/0x210 [ 2399.331446] ? selinux_file_mprotect+0x620/0x620 [ 2399.336210] ? iterate_fd+0x360/0x360 [ 2399.340029] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2399.345590] ? security_file_ioctl+0x93/0xc0 [ 2399.350006] ksys_ioctl+0xab/0xd0 [ 2399.353969] __x64_sys_ioctl+0x73/0xb0 [ 2399.357899] do_syscall_64+0x103/0x610 [ 2399.361796] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2399.366983] RIP: 0033:0x457e39 [ 2399.370186] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2399.389089] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2399.396798] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2399.404076] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 19:47:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="10012abd7000fedbdf25010000000000000002410000001000137564708384a39db310b67100"], 0x2c}, 0x1, 0x0, 0x0, 0x44081}, 0x80) 19:47:10 executing program 2: getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x9, 0x1}) [ 2399.411345] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2399.418624] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2399.425892] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:10 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2000, 0x0, 0x0, 0x0) 19:47:10 executing program 0 (fault-call:7 fault-nth:15): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2399.722096] FAULT_INJECTION: forcing a failure. [ 2399.722096] name failslab, interval 1, probability 0, space 0, times 0 [ 2399.734140] CPU: 1 PID: 17129 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2399.741564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2399.750954] Call Trace: [ 2399.753554] dump_stack+0x172/0x1f0 [ 2399.757255] should_fail.cold+0xa/0x1b [ 2399.761181] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2399.766312] ? lock_downgrade+0x810/0x810 [ 2399.770502] ? ___might_sleep+0x163/0x280 [ 2399.774675] __should_failslab+0x121/0x190 [ 2399.778917] should_failslab+0x9/0x14 [ 2399.782733] kmem_cache_alloc+0x2be/0x710 [ 2399.786889] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2399.792005] ? mempool_free+0x380/0x380 [ 2399.795984] mempool_alloc_slab+0x47/0x60 [ 2399.800141] ? mempool_alloc+0x380/0x380 [ 2399.804210] mempool_init_node+0x2e1/0x560 [ 2399.808459] ? mempool_alloc+0x380/0x380 [ 2399.812526] ? mempool_free+0x380/0x380 [ 2399.816511] mempool_init+0x3d/0x50 [ 2399.820183] bioset_init+0x547/0x710 [ 2399.823920] blk_alloc_queue_node+0x137/0x760 [ 2399.828438] blk_mq_init_queue+0x4a/0xb0 [ 2399.832516] loop_add+0x2dd/0x8d0 [ 2399.836000] ? idr_find+0x47/0x60 [ 2399.839478] loop_control_ioctl+0x165/0x360 [ 2399.843806] ? loop_add+0x8d0/0x8d0 [ 2399.847468] ? __might_sleep+0x95/0x190 [ 2399.851468] ? loop_add+0x8d0/0x8d0 [ 2399.855118] do_vfs_ioctl+0xd6e/0x1390 [ 2399.859018] ? selinux_file_ioctl+0x46f/0x5e0 [ 2399.863530] ? selinux_file_ioctl+0x125/0x5e0 [ 2399.868038] ? ioctl_preallocate+0x210/0x210 [ 2399.872459] ? selinux_file_mprotect+0x620/0x620 [ 2399.877239] ? iterate_fd+0x360/0x360 [ 2399.881053] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2399.886596] ? fput+0x128/0x1a0 [ 2399.889892] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2399.895451] ? security_file_ioctl+0x93/0xc0 [ 2399.899865] ksys_ioctl+0xab/0xd0 [ 2399.903340] __x64_sys_ioctl+0x73/0xb0 [ 2399.907242] do_syscall_64+0x103/0x610 [ 2399.911150] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2399.916372] RIP: 0033:0x457e39 [ 2399.919595] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2399.938498] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2399.946214] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2399.953498] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2399.960772] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2399.968057] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2399.975359] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 [ 2400.874965] net_ratelimit: 16 callbacks suppressed [ 2400.874974] protocol 88fb is buggy, dev hsr_slave_0 [ 2400.885165] protocol 88fb is buggy, dev hsr_slave_1 [ 2400.890315] protocol 88fb is buggy, dev hsr_slave_0 [ 2400.895433] protocol 88fb is buggy, dev hsr_slave_1 [ 2401.034910] protocol 88fb is buggy, dev hsr_slave_0 [ 2401.040033] protocol 88fb is buggy, dev hsr_slave_1 [ 2401.045204] protocol 88fb is buggy, dev hsr_slave_0 [ 2401.050247] protocol 88fb is buggy, dev hsr_slave_1 [ 2401.055392] protocol 88fb is buggy, dev hsr_slave_0 [ 2401.060435] protocol 88fb is buggy, dev hsr_slave_1 19:47:13 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x16e0b8c4fdc]}}, 0xfffffea9) 19:47:13 executing program 2: getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, r0}, 0x0, 0x9, 0x1}) 19:47:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:47:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x119101, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000040)=0x40) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:47:13 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x3f00, 0x0, 0x0, 0x0) 19:47:13 executing program 0 (fault-call:7 fault-nth:16): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:47:13 executing program 2: getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, r0}, 0x0, 0x0, 0x1}) 19:47:13 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) tee(r0, r0, 0x6, 0xa) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) splice(r0, &(0x7f00000000c0), r0, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000040)={{0x2, 0x4e20, @multicast2}, {0x306, @local}, 0x2, {0x2, 0x4e20, @local}, 'veth0_to_bond\x00'}) [ 2402.236236] FAULT_INJECTION: forcing a failure. [ 2402.236236] name failslab, interval 1, probability 0, space 0, times 0 [ 2402.270115] CPU: 0 PID: 17141 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2402.277423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2402.286771] Call Trace: [ 2402.289379] dump_stack+0x172/0x1f0 [ 2402.293057] should_fail.cold+0xa/0x1b [ 2402.296969] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2402.302086] ? lock_downgrade+0x810/0x810 [ 2402.306235] ? ___might_sleep+0x163/0x280 [ 2402.310394] __should_failslab+0x121/0x190 [ 2402.314632] should_failslab+0x9/0x14 [ 2402.318436] kmem_cache_alloc+0x2be/0x710 [ 2402.322597] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2402.328134] ? __phys_addr+0xa4/0x120 [ 2402.331937] ? mempool_init+0x3d/0x50 [ 2402.335795] mempool_alloc_slab+0x47/0x60 [ 2402.339961] ? mempool_alloc+0x380/0x380 [ 2402.344023] mempool_init_node+0x2e1/0x560 [ 2402.348268] ? mempool_alloc+0x380/0x380 [ 2402.352329] ? mempool_free+0x380/0x380 [ 2402.356563] mempool_init+0x3d/0x50 [ 2402.360209] bioset_init+0x547/0x710 [ 2402.363936] blk_alloc_queue_node+0x137/0x760 [ 2402.368438] blk_mq_init_queue+0x4a/0xb0 [ 2402.372510] loop_add+0x2dd/0x8d0 [ 2402.376002] ? idr_find+0x47/0x60 [ 2402.379476] loop_control_ioctl+0x165/0x360 [ 2402.383815] ? loop_add+0x8d0/0x8d0 [ 2402.387476] ? __might_sleep+0x95/0x190 [ 2402.391509] ? loop_add+0x8d0/0x8d0 [ 2402.395193] do_vfs_ioctl+0xd6e/0x1390 [ 2402.399101] ? selinux_file_ioctl+0x46f/0x5e0 [ 2402.403630] ? selinux_file_ioctl+0x125/0x5e0 [ 2402.408132] ? ioctl_preallocate+0x210/0x210 [ 2402.412541] ? selinux_file_mprotect+0x620/0x620 [ 2402.417316] ? iterate_fd+0x360/0x360 [ 2402.421129] ? fput+0x128/0x1a0 [ 2402.424434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2402.429973] ? security_file_ioctl+0x93/0xc0 [ 2402.434387] ksys_ioctl+0xab/0xd0 [ 2402.437851] __x64_sys_ioctl+0x73/0xb0 [ 2402.441749] do_syscall_64+0x103/0x610 [ 2402.445650] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2402.450846] RIP: 0033:0x457e39 [ 2402.454040] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2402.472991] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2402.480703] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2402.487978] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2402.495259] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2402.502525] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2402.509793] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:13 executing program 2: getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, r0}}) 19:47:13 executing program 0 (fault-call:7 fault-nth:17): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmget(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) shmget(0x2, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget(0x3, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, 0x0) [ 2402.760533] FAULT_INJECTION: forcing a failure. [ 2402.760533] name failslab, interval 1, probability 0, space 0, times 0 [ 2402.780512] CPU: 0 PID: 17159 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2402.787804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2402.797159] Call Trace: [ 2402.799761] dump_stack+0x172/0x1f0 [ 2402.803403] should_fail.cold+0xa/0x1b [ 2402.807298] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2402.812427] ? lock_downgrade+0x810/0x810 [ 2402.816606] ? ___might_sleep+0x163/0x280 [ 2402.820771] __should_failslab+0x121/0x190 [ 2402.825027] should_failslab+0x9/0x14 [ 2402.828860] kmem_cache_alloc_node_trace+0x270/0x720 [ 2402.833983] ? mempool_alloc+0x380/0x380 [ 2402.838054] ? mempool_free+0x380/0x380 [ 2402.842037] ? mempool_init+0x3d/0x50 [ 2402.845865] bdi_alloc_node+0x8a/0x100 [ 2402.849767] blk_alloc_queue_node+0x15d/0x760 [ 2402.854279] blk_mq_init_queue+0x4a/0xb0 [ 2402.858355] loop_add+0x2dd/0x8d0 [ 2402.861824] ? idr_find+0x47/0x60 [ 2402.865317] loop_control_ioctl+0x165/0x360 [ 2402.869650] ? loop_add+0x8d0/0x8d0 [ 2402.873299] ? __might_sleep+0x95/0x190 [ 2402.877292] ? loop_add+0x8d0/0x8d0 [ 2402.880931] do_vfs_ioctl+0xd6e/0x1390 [ 2402.884837] ? selinux_file_ioctl+0x46f/0x5e0 [ 2402.889342] ? selinux_file_ioctl+0x125/0x5e0 [ 2402.893857] ? ioctl_preallocate+0x210/0x210 [ 2402.898283] ? selinux_file_mprotect+0x620/0x620 [ 2402.903058] ? iterate_fd+0x360/0x360 [ 2402.906868] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2402.912414] ? fput+0x128/0x1a0 [ 2402.915721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2402.921288] ? security_file_ioctl+0x93/0xc0 [ 2402.925722] ksys_ioctl+0xab/0xd0 [ 2402.929207] __x64_sys_ioctl+0x73/0xb0 [ 2402.933103] do_syscall_64+0x103/0x610 [ 2402.937014] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2402.942242] RIP: 0033:0x457e39 [ 2402.945451] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2402.964359] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2402.972069] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2402.979337] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2402.986646] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2402.993912] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2403.001195] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x100000000000000]}}, 0xfffffea9) 19:47:16 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:47:16 executing program 2: socketpair$unix(0x1, 0x10000000000001, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rt6_stats\x00') preadv(r1, &(0x7f00000017c0), 0x1a1, 0x0) 19:47:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x98000, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x2a, 0x4, 0x0, {0x2, 0xb4, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:47:16 executing program 0 (fault-call:7 fault-nth:18): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:16 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x4000, 0x0, 0x0, 0x0) 19:47:16 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc0405519, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) [ 2405.300956] FAULT_INJECTION: forcing a failure. [ 2405.300956] name failslab, interval 1, probability 0, space 0, times 0 [ 2405.335631] CPU: 1 PID: 17166 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2405.342946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2405.352318] Call Trace: [ 2405.354944] dump_stack+0x172/0x1f0 [ 2405.358584] should_fail.cold+0xa/0x1b [ 2405.362491] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2405.367616] ? lock_downgrade+0x810/0x810 [ 2405.371779] ? ___might_sleep+0x163/0x280 [ 2405.375958] __should_failslab+0x121/0x190 [ 2405.380218] should_failslab+0x9/0x14 [ 2405.384040] kmem_cache_alloc_node_trace+0x270/0x720 [ 2405.389150] ? mempool_alloc+0x380/0x380 [ 2405.393212] ? mempool_free+0x380/0x380 [ 2405.397187] ? mempool_init+0x3d/0x50 [ 2405.401005] bdi_alloc_node+0x8a/0x100 [ 2405.404910] blk_alloc_queue_node+0x15d/0x760 [ 2405.409413] blk_mq_init_queue+0x4a/0xb0 [ 2405.413493] loop_add+0x2dd/0x8d0 [ 2405.416951] ? idr_find+0x47/0x60 [ 2405.420421] loop_control_ioctl+0x165/0x360 [ 2405.424757] ? loop_add+0x8d0/0x8d0 [ 2405.428395] ? do_vfs_ioctl+0xd08/0x1390 [ 2405.432457] ? loop_add+0x8d0/0x8d0 [ 2405.436099] do_vfs_ioctl+0xd6e/0x1390 [ 2405.439994] ? selinux_file_ioctl+0x46f/0x5e0 [ 2405.444516] ? selinux_file_ioctl+0x125/0x5e0 [ 2405.449015] ? ioctl_preallocate+0x210/0x210 [ 2405.453443] ? selinux_file_mprotect+0x620/0x620 [ 2405.458320] ? iterate_fd+0x360/0x360 [ 2405.462122] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2405.467660] ? fput+0x128/0x1a0 [ 2405.470940] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2405.476480] ? security_file_ioctl+0x93/0xc0 [ 2405.480892] ksys_ioctl+0xab/0xd0 [ 2405.484365] __x64_sys_ioctl+0x73/0xb0 [ 2405.488258] do_syscall_64+0x103/0x610 [ 2405.492169] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2405.497358] RIP: 0033:0x457e39 [ 2405.500554] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2405.519471] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2405.527182] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2405.534465] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2405.541755] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 19:47:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x779e3dab769842fd, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1d, &(0x7f0000000040)={@mcast2, 0x0}, &(0x7f0000000280)=0x1ce) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000002c0)=r1) shmctl$SHM_INFO(0x0, 0xe, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 19:47:16 executing program 2: shmget$private(0x0, 0x4000, 0x1808, &(0x7f0000ffb000/0x4000)=nil) [ 2405.549023] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2405.556292] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x200000000000000]}}, 0xfffffea9) 19:47:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x809, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = dup(r0) write$P9_RREMOVE(r1, &(0x7f0000000000)={0x7, 0x7b, 0x2}, 0x7) 19:47:16 executing program 0 (fault-call:7 fault-nth:19): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:16 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc0505510, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:47:16 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101000, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) [ 2405.797236] FAULT_INJECTION: forcing a failure. [ 2405.797236] name failslab, interval 1, probability 0, space 0, times 0 [ 2405.834356] input: syz1 as /devices/virtual/input/input19 [ 2405.843009] CPU: 0 PID: 17192 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2405.850312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2405.859675] Call Trace: [ 2405.859703] dump_stack+0x172/0x1f0 [ 2405.859727] should_fail.cold+0xa/0x1b [ 2405.859747] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2405.859768] ? ___might_sleep+0x88/0x280 [ 2405.859787] ? ___might_sleep+0x163/0x280 [ 2405.859826] __should_failslab+0x121/0x190 [ 2405.879292] should_failslab+0x9/0x14 [ 2405.879308] kmem_cache_alloc_trace+0x2d1/0x760 [ 2405.879328] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2405.887691] ? bdi_init+0x356/0x420 [ 2405.887712] blk_alloc_queue_stats+0x40/0x100 [ 2405.887730] blk_alloc_queue_node+0x195/0x760 [ 2405.887760] blk_mq_init_queue+0x4a/0xb0 [ 2405.887779] loop_add+0x2dd/0x8d0 [ 2405.887794] ? idr_find+0x47/0x60 [ 2405.887846] loop_control_ioctl+0x165/0x360 [ 2405.929671] ? loop_add+0x8d0/0x8d0 [ 2405.929689] ? __might_sleep+0x95/0x190 [ 2405.929704] ? loop_add+0x8d0/0x8d0 [ 2405.937337] do_vfs_ioctl+0xd6e/0x1390 19:47:16 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc1105511, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:47:16 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x5000, 0x0, 0x0, 0x0) 19:47:16 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) r1 = dup3(r0, r0, 0x80000) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) shmget(0x2, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_INFO(0x0, 0xe, 0x0) [ 2405.937356] ? selinux_file_ioctl+0x46f/0x5e0 [ 2405.937372] ? selinux_file_ioctl+0x125/0x5e0 [ 2405.937388] ? ioctl_preallocate+0x210/0x210 [ 2405.937405] ? selinux_file_mprotect+0x620/0x620 [ 2405.937426] ? iterate_fd+0x360/0x360 [ 2405.958589] ? fput+0x128/0x1a0 [ 2405.958604] ? ksys_write+0x15c/0x1f0 [ 2405.958623] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2405.967161] ? security_file_ioctl+0x93/0xc0 [ 2405.967179] ksys_ioctl+0xab/0xd0 [ 2405.967197] __x64_sys_ioctl+0x73/0xb0 [ 2405.967215] do_syscall_64+0x103/0x610 [ 2405.967236] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2405.967251] RIP: 0033:0x457e39 [ 2405.979849] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2405.979859] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2405.979874] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2405.979883] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2405.979895] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2406.052301] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2406.059587] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:17 executing program 2: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x20000300}) 19:47:17 executing program 0 (fault-call:7 fault-nth:20): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2406.154904] net_ratelimit: 24 callbacks suppressed [ 2406.154913] protocol 88fb is buggy, dev hsr_slave_0 [ 2406.165065] protocol 88fb is buggy, dev hsr_slave_1 19:47:17 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc1105517, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:47:17 executing program 3: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x3}}, 0x18) r2 = shmget(0x3, 0x3000, 0x54000402, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$bt_cmtp(0x1f, 0x3, 0x5) shmctl$SHM_INFO(0x0, 0xe, 0x0) [ 2406.328596] FAULT_INJECTION: forcing a failure. [ 2406.328596] name failslab, interval 1, probability 0, space 0, times 0 [ 2406.364067] CPU: 0 PID: 17216 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2406.371386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2406.380744] Call Trace: [ 2406.383360] dump_stack+0x172/0x1f0 [ 2406.387012] should_fail.cold+0xa/0x1b [ 2406.390914] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2406.396029] ? lock_downgrade+0x810/0x810 [ 2406.400219] ? ___might_sleep+0x163/0x280 [ 2406.404397] __should_failslab+0x121/0x190 [ 2406.408650] should_failslab+0x9/0x14 [ 2406.412462] kmem_cache_alloc_node_trace+0x270/0x720 [ 2406.417579] ? retint_kernel+0x2d/0x2d [ 2406.421485] ? blk_set_pm_only+0x30/0x30 [ 2406.425618] blkg_alloc+0x93/0x590 [ 2406.429200] blkcg_init_queue+0x27/0x3d0 [ 2406.433283] blk_alloc_queue_node+0x541/0x760 [ 2406.437791] blk_mq_init_queue+0x4a/0xb0 [ 2406.441873] loop_add+0x2dd/0x8d0 [ 2406.445340] ? idr_find+0x47/0x60 [ 2406.448815] loop_control_ioctl+0x165/0x360 [ 2406.453148] ? loop_add+0x8d0/0x8d0 [ 2406.456830] ? __might_sleep+0x95/0x190 [ 2406.460829] ? loop_add+0x8d0/0x8d0 [ 2406.464473] do_vfs_ioctl+0xd6e/0x1390 [ 2406.468375] ? selinux_file_ioctl+0x46f/0x5e0 [ 2406.472889] ? selinux_file_ioctl+0x125/0x5e0 [ 2406.477405] ? ioctl_preallocate+0x210/0x210 [ 2406.481849] ? selinux_file_mprotect+0x620/0x620 [ 2406.486666] ? iterate_fd+0x360/0x360 [ 2406.490480] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2406.496026] ? fput+0x128/0x1a0 [ 2406.499318] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2406.504872] ? security_file_ioctl+0x93/0xc0 [ 2406.509295] ksys_ioctl+0xab/0xd0 [ 2406.512783] __x64_sys_ioctl+0x73/0xb0 [ 2406.516700] do_syscall_64+0x103/0x610 [ 2406.520600] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2406.525794] RIP: 0033:0x457e39 [ 2406.529006] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2406.547932] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2406.555658] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2406.562942] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2406.570227] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2406.577505] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2406.584781] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 [ 2407.114991] protocol 88fb is buggy, dev hsr_slave_0 [ 2407.120153] protocol 88fb is buggy, dev hsr_slave_1 [ 2407.125349] protocol 88fb is buggy, dev hsr_slave_0 [ 2407.130439] protocol 88fb is buggy, dev hsr_slave_1 [ 2407.274937] protocol 88fb is buggy, dev hsr_slave_0 [ 2407.280037] protocol 88fb is buggy, dev hsr_slave_1 [ 2407.285205] protocol 88fb is buggy, dev hsr_slave_0 [ 2407.290253] protocol 88fb is buggy, dev hsr_slave_1 19:47:19 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x60ff, 0x0, 0x0, 0x0) 19:47:19 executing program 2: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x20000300}) 19:47:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc1105518, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:47:19 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x30c000000000000]}}, 0xfffffea9) 19:47:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x90200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x4) 19:47:19 executing program 0 (fault-call:7 fault-nth:21): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc4c85512, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:47:19 executing program 2: r0 = socket$packet(0x11, 0x400000000000003, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) creat(0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) dup2(r0, r1) 19:47:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) [ 2408.901646] FAULT_INJECTION: forcing a failure. [ 2408.901646] name failslab, interval 1, probability 0, space 0, times 0 19:47:19 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x7400, 0x0, 0x0, 0x0) [ 2408.965405] CPU: 0 PID: 17231 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2408.972734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2408.982092] Call Trace: [ 2408.984726] dump_stack+0x172/0x1f0 [ 2408.988384] should_fail.cold+0xa/0x1b [ 2408.992285] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2408.997419] ? lock_downgrade+0x810/0x810 [ 2409.001586] ? ___might_sleep+0x163/0x280 [ 2409.005767] __should_failslab+0x121/0x190 [ 2409.010028] should_failslab+0x9/0x14 [ 2409.013846] kmem_cache_alloc_trace+0x2d1/0x760 [ 2409.018612] blk_iolatency_init+0x4e/0x2f0 [ 2409.022865] blkcg_init_queue+0x163/0x3d0 [ 2409.027042] blk_alloc_queue_node+0x541/0x760 [ 2409.031554] blk_mq_init_queue+0x4a/0xb0 [ 2409.035634] loop_add+0x2dd/0x8d0 [ 2409.039102] ? idr_find+0x47/0x60 [ 2409.042568] loop_control_ioctl+0x165/0x360 [ 2409.046931] ? loop_add+0x8d0/0x8d0 [ 2409.050572] ? __might_sleep+0x95/0x190 [ 2409.054557] ? loop_add+0x8d0/0x8d0 [ 2409.058198] do_vfs_ioctl+0xd6e/0x1390 [ 2409.062134] ? selinux_file_ioctl+0x46f/0x5e0 [ 2409.066641] ? selinux_file_ioctl+0x125/0x5e0 [ 2409.071150] ? ioctl_preallocate+0x210/0x210 [ 2409.075624] ? selinux_file_mprotect+0x620/0x620 [ 2409.080397] ? iterate_fd+0x360/0x360 [ 2409.084208] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2409.089756] ? fput+0x128/0x1a0 [ 2409.093050] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2409.098601] ? security_file_ioctl+0x93/0xc0 [ 2409.103030] ksys_ioctl+0xab/0xd0 [ 2409.106497] __x64_sys_ioctl+0x73/0xb0 [ 2409.110399] do_syscall_64+0x103/0x610 [ 2409.114302] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2409.119576] RIP: 0033:0x457e39 [ 2409.122788] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2409.141708] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2409.149424] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2409.156702] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 19:47:20 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc4c85513, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) [ 2409.163973] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2409.171261] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2409.178538] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:20 executing program 0 (fault-call:7 fault-nth:22): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:20 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x1, 0x0, [{0x0, 0x0, 0x0, [], 0x1ff}]}}) r6 = getpgrp(0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1ffa, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r6, 0x7, r0, &(0x7f0000000040)={r7, r0, 0x3}) 19:47:20 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000013"]) 19:47:20 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x9400, 0x0, 0x0, 0x0) [ 2409.413926] FAULT_INJECTION: forcing a failure. [ 2409.413926] name failslab, interval 1, probability 0, space 0, times 0 [ 2409.465537] CPU: 0 PID: 17253 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2409.472838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2409.482211] Call Trace: [ 2409.484828] dump_stack+0x172/0x1f0 [ 2409.488476] should_fail.cold+0xa/0x1b [ 2409.492381] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2409.497496] ? lock_downgrade+0x810/0x810 [ 2409.501662] ? ___might_sleep+0x163/0x280 [ 2409.505849] __should_failslab+0x121/0x190 [ 2409.510098] should_failslab+0x9/0x14 [ 2409.513909] kmem_cache_alloc_node_trace+0x270/0x720 [ 2409.519032] ? iolatency_pd_alloc+0x2f/0x140 [ 2409.523467] iolatency_pd_alloc+0x8d/0x140 [ 2409.527711] ? blkcg_iolatency_throttle+0xfb0/0xfb0 [ 2409.532776] blkcg_activate_policy+0x128/0x560 [ 2409.537414] blk_iolatency_init+0x151/0x2f0 [ 2409.541767] blkcg_init_queue+0x163/0x3d0 [ 2409.545941] blk_alloc_queue_node+0x541/0x760 [ 2409.550450] blk_mq_init_queue+0x4a/0xb0 [ 2409.554523] loop_add+0x2dd/0x8d0 [ 2409.557991] ? idr_find+0x47/0x60 [ 2409.561463] loop_control_ioctl+0x165/0x360 [ 2409.565796] ? loop_add+0x8d0/0x8d0 [ 2409.569452] ? __might_sleep+0x95/0x190 [ 2409.573436] ? loop_add+0x8d0/0x8d0 [ 2409.577076] do_vfs_ioctl+0xd6e/0x1390 [ 2409.580985] ? selinux_file_ioctl+0x46f/0x5e0 [ 2409.585538] ? selinux_file_ioctl+0x125/0x5e0 [ 2409.590045] ? ioctl_preallocate+0x210/0x210 [ 2409.594475] ? selinux_file_mprotect+0x620/0x620 [ 2409.599251] ? iterate_fd+0x360/0x360 [ 2409.603063] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2409.608608] ? fput+0x128/0x1a0 [ 2409.611906] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2409.617459] ? security_file_ioctl+0x93/0xc0 [ 2409.621882] ksys_ioctl+0xab/0xd0 [ 2409.625349] __x64_sys_ioctl+0x73/0xb0 [ 2409.629255] do_syscall_64+0x103/0x610 [ 2409.633160] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2409.638353] RIP: 0033:0x457e39 [ 2409.641558] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2409.660484] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2409.668200] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2409.675478] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2409.682759] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2409.690048] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2409.697324] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 [ 2411.274920] net_ratelimit: 16 callbacks suppressed [ 2411.274931] protocol 88fb is buggy, dev hsr_slave_0 [ 2411.285044] protocol 88fb is buggy, dev hsr_slave_1 [ 2411.290138] protocol 88fb is buggy, dev hsr_slave_0 [ 2411.295245] protocol 88fb is buggy, dev hsr_slave_1 [ 2411.434976] protocol 88fb is buggy, dev hsr_slave_0 [ 2411.440068] protocol 88fb is buggy, dev hsr_slave_1 [ 2411.445223] protocol 88fb is buggy, dev hsr_slave_0 [ 2411.450274] protocol 88fb is buggy, dev hsr_slave_1 [ 2411.455454] protocol 88fb is buggy, dev hsr_slave_0 [ 2411.460531] protocol 88fb is buggy, dev hsr_slave_1 19:47:22 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x400000000000000]}}, 0xfffffea9) 19:47:22 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000013"]) 19:47:22 executing program 0 (fault-call:7 fault-nth:23): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:22 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x200000, 0x0, 0x0, 0x0) 19:47:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0), 0xc) getsockname$packet(r0, 0x0, &(0x7f00000006c0)) 19:47:22 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400200, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x7, 0x888, [0x0, 0x200000c0, 0x20000368, 0x20000520], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x900) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000040)={0x3, 0x56b, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000b00)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000c00)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000c40)={@remote, 0x39, r1}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000a00)=0x1ff, 0x8) openat$cgroup(r0, &(0x7f0000000a40)='syz0\x00', 0x200002, 0x0) [ 2412.006440] FAULT_INJECTION: forcing a failure. [ 2412.006440] name failslab, interval 1, probability 0, space 0, times 0 [ 2412.017982] CPU: 1 PID: 17267 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2412.018020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2412.018028] Call Trace: [ 2412.037259] dump_stack+0x172/0x1f0 [ 2412.040902] should_fail.cold+0xa/0x1b [ 2412.044799] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2412.050346] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2412.055491] __should_failslab+0x121/0x190 [ 2412.055511] should_failslab+0x9/0x14 [ 2412.055527] kmem_cache_alloc_node_trace+0x5a/0x720 [ 2412.055544] ? do_raw_spin_lock+0x12a/0x2e0 [ 2412.055560] ? rwlock_bug.part.0+0x90/0x90 [ 2412.055577] ? lock_acquire+0x16f/0x3f0 [ 2412.081174] iolatency_pd_alloc+0x8d/0x140 [ 2412.085418] ? blkcg_iolatency_throttle+0xfb0/0xfb0 [ 2412.090444] blkcg_activate_policy+0x242/0x560 [ 2412.090475] blk_iolatency_init+0x151/0x2f0 [ 2412.090494] blkcg_init_queue+0x163/0x3d0 [ 2412.090514] blk_alloc_queue_node+0x541/0x760 [ 2412.108030] blk_mq_init_queue+0x4a/0xb0 [ 2412.112102] loop_add+0x2dd/0x8d0 [ 2412.115569] ? idr_find+0x47/0x60 [ 2412.119035] loop_control_ioctl+0x165/0x360 [ 2412.123367] ? loop_add+0x8d0/0x8d0 [ 2412.127009] ? __might_sleep+0x95/0x190 [ 2412.130993] ? loop_add+0x8d0/0x8d0 [ 2412.134630] do_vfs_ioctl+0xd6e/0x1390 [ 2412.138529] ? selinux_file_ioctl+0x46f/0x5e0 [ 2412.143044] ? selinux_file_ioctl+0x125/0x5e0 [ 2412.147543] ? ioctl_preallocate+0x210/0x210 [ 2412.151953] ? selinux_file_mprotect+0x620/0x620 [ 2412.156718] ? iterate_fd+0x360/0x360 [ 2412.160533] ? check_memory_region+0x112/0x190 [ 2412.165123] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2412.170661] ? security_file_ioctl+0x93/0xc0 [ 2412.175075] ksys_ioctl+0xab/0xd0 [ 2412.178536] __x64_sys_ioctl+0x73/0xb0 [ 2412.182457] do_syscall_64+0x103/0x610 [ 2412.186353] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2412.191541] RIP: 0033:0x457e39 19:47:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0), 0xc) getsockname$packet(r0, 0x0, &(0x7f00000006c0)) [ 2412.194744] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2412.213675] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2412.221386] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2412.228655] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2412.235922] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2412.243188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2412.250458] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:23 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0400000013"]) 19:47:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmget(0x0, 0x3000, 0x78000080, &(0x7f0000ffb000/0x3000)=nil) shmget(0x2, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x60a, &(0x7f0000ffb000/0x2000)=nil) shmget(0x3, 0x3000, 0x300, &(0x7f0000ffc000/0x3000)=nil) shmget(0x1, 0x4000, 0x33, &(0x7f0000ffc000/0x4000)=nil) shmget(0x0, 0x3000, 0x901, &(0x7f0000ffa000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_INFO(r0, 0xe, 0x0) 19:47:23 executing program 0 (fault-call:7 fault-nth:24): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:23 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000013"]) 19:47:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x80, 0x0) [ 2412.807640] FAULT_INJECTION: forcing a failure. [ 2412.807640] name failslab, interval 1, probability 0, space 0, times 0 [ 2412.863076] CPU: 0 PID: 17293 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2412.870403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2412.879787] Call Trace: [ 2412.882403] dump_stack+0x172/0x1f0 [ 2412.886051] should_fail.cold+0xa/0x1b [ 2412.889953] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2412.895074] ? lock_downgrade+0x810/0x810 [ 2412.899236] ? ___might_sleep+0x163/0x280 [ 2412.903432] __should_failslab+0x121/0x190 [ 2412.907677] should_failslab+0x9/0x14 [ 2412.911486] kmem_cache_alloc_node_trace+0x270/0x720 [ 2412.916654] ? init_timer_key+0x122/0x370 [ 2412.920825] blk_throtl_init+0x7d/0x680 [ 2412.924831] blkcg_init_queue+0x277/0x3d0 [ 2412.929000] blk_alloc_queue_node+0x541/0x760 [ 2412.933507] blk_mq_init_queue+0x4a/0xb0 [ 2412.937618] loop_add+0x2dd/0x8d0 [ 2412.941091] ? idr_find+0x47/0x60 [ 2412.944572] loop_control_ioctl+0x165/0x360 [ 2412.948912] ? loop_add+0x8d0/0x8d0 [ 2412.952584] ? __might_sleep+0x95/0x190 [ 2412.956573] ? loop_add+0x8d0/0x8d0 [ 2412.960213] do_vfs_ioctl+0xd6e/0x1390 [ 2412.964119] ? selinux_file_ioctl+0x46f/0x5e0 [ 2412.968628] ? selinux_file_ioctl+0x125/0x5e0 [ 2412.973150] ? ioctl_preallocate+0x210/0x210 [ 2412.977567] ? selinux_file_mprotect+0x620/0x620 [ 2412.982336] ? iterate_fd+0x360/0x360 [ 2412.986160] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2412.991711] ? fput+0x128/0x1a0 [ 2412.995004] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2413.000550] ? security_file_ioctl+0x93/0xc0 [ 2413.004973] ksys_ioctl+0xab/0xd0 [ 2413.008437] __x64_sys_ioctl+0x73/0xb0 [ 2413.012337] do_syscall_64+0x103/0x610 [ 2413.016244] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2413.021437] RIP: 0033:0x457e39 [ 2413.024637] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2413.043543] RSP: 002b:00007fc45d3b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2413.051267] RAX: ffffffffffffffda RBX: 00007fc45d3b7c90 RCX: 0000000000457e39 [ 2413.058542] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2413.065828] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 2413.073100] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3b86d4 [ 2413.080385] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:25 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x500000000000000]}}, 0xfffffea9) 19:47:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0), 0xc) getsockname$packet(r0, 0x0, &(0x7f00000006c0)) 19:47:25 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x207100, 0x0, 0x0, 0x0) 19:47:25 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000013"]) 19:47:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:47:25 executing program 0 (fault-call:7 fault-nth:25): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x100000000, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000040)={0x3, 0x101, 0x800e, 0x0, 0x5, 0x8001, 0x6, 0xa0}, &(0x7f0000000080)=0x20) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000100)={0x7, 0x5, 0x1}) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:47:26 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0700000013"]) [ 2415.052640] FAULT_INJECTION: forcing a failure. [ 2415.052640] name failslab, interval 1, probability 0, space 0, times 0 [ 2415.120127] CPU: 1 PID: 17308 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2415.127433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2415.136802] Call Trace: [ 2415.139414] dump_stack+0x172/0x1f0 [ 2415.143064] should_fail.cold+0xa/0x1b [ 2415.146970] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2415.152103] ? lock_downgrade+0x810/0x810 [ 2415.156263] ? ___might_sleep+0x163/0x280 [ 2415.160463] __should_failslab+0x121/0x190 [ 2415.164722] should_failslab+0x9/0x14 [ 2415.168536] kmem_cache_alloc_node_trace+0x270/0x720 [ 2415.173650] ? __debug_object_init+0x190/0xc30 [ 2415.178243] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2415.183366] throtl_pd_alloc+0x8b/0x990 [ 2415.187349] ? throtl_schedule_next_dispatch+0x640/0x640 [ 2415.192810] blkcg_activate_policy+0x128/0x560 [ 2415.197413] ? throtl_pd_offline+0x210/0x210 [ 2415.201836] blk_throtl_init+0x459/0x680 [ 2415.205917] blkcg_init_queue+0x277/0x3d0 [ 2415.210080] blk_alloc_queue_node+0x541/0x760 [ 2415.214593] blk_mq_init_queue+0x4a/0xb0 [ 2415.218679] loop_add+0x2dd/0x8d0 [ 2415.222146] ? idr_find+0x47/0x60 [ 2415.225625] loop_control_ioctl+0x165/0x360 [ 2415.229956] ? loop_add+0x8d0/0x8d0 [ 2415.233593] ? __might_sleep+0x95/0x190 [ 2415.237579] ? loop_add+0x8d0/0x8d0 [ 2415.241220] do_vfs_ioctl+0xd6e/0x1390 [ 2415.245117] ? selinux_file_ioctl+0x46f/0x5e0 [ 2415.249840] ? selinux_file_ioctl+0x125/0x5e0 [ 2415.254350] ? ioctl_preallocate+0x210/0x210 [ 2415.258773] ? selinux_file_mprotect+0x620/0x620 [ 2415.263545] ? iterate_fd+0x360/0x360 [ 2415.267358] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2415.272134] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2415.277681] ? security_file_ioctl+0x93/0xc0 [ 2415.282104] ksys_ioctl+0xab/0xd0 [ 2415.285588] __x64_sys_ioctl+0x73/0xb0 [ 2415.289484] ? do_syscall_64+0x5b/0x610 [ 2415.293473] do_syscall_64+0x103/0x610 [ 2415.297381] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2415.302576] RIP: 0033:0x457e39 19:47:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0), 0xc) getsockname$packet(r0, 0x0, &(0x7f00000006c0)) 19:47:26 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x400000, 0x0, 0x0, 0x0) [ 2415.305788] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2415.324703] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2415.332414] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2415.339685] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2415.346958] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2415.354235] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2415.361520] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:26 executing program 0 (fault-call:7 fault-nth:26): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@dev, @in=@empty}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) r1 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, 0x0) [ 2415.565737] FAULT_INJECTION: forcing a failure. [ 2415.565737] name failslab, interval 1, probability 0, space 0, times 0 [ 2415.576965] CPU: 1 PID: 17329 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2415.584239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2415.593594] Call Trace: [ 2415.596205] dump_stack+0x172/0x1f0 [ 2415.599856] should_fail.cold+0xa/0x1b [ 2415.603755] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2415.608869] ? __debug_object_init+0x190/0xc30 [ 2415.613475] ? __lock_is_held+0xb6/0x140 [ 2415.617558] __should_failslab+0x121/0x190 [ 2415.621809] should_failslab+0x9/0x14 [ 2415.625619] kmem_cache_alloc_node_trace+0x5a/0x720 [ 2415.630647] ? rwlock_bug.part.0+0x90/0x90 [ 2415.634893] ? lock_acquire+0x16f/0x3f0 [ 2415.638880] ? blkcg_activate_policy+0x14d/0x560 [ 2415.643652] throtl_pd_alloc+0x8b/0x990 [ 2415.647636] ? throtl_schedule_next_dispatch+0x640/0x640 [ 2415.653098] blkcg_activate_policy+0x242/0x560 [ 2415.657715] blk_throtl_init+0x459/0x680 [ 2415.661791] blkcg_init_queue+0x277/0x3d0 [ 2415.665957] blk_alloc_queue_node+0x541/0x760 [ 2415.670465] blk_mq_init_queue+0x4a/0xb0 [ 2415.674536] loop_add+0x2dd/0x8d0 [ 2415.677998] ? idr_find+0x47/0x60 [ 2415.681481] loop_control_ioctl+0x165/0x360 [ 2415.685809] ? loop_add+0x8d0/0x8d0 [ 2415.689448] ? __might_sleep+0x95/0x190 [ 2415.693433] ? loop_add+0x8d0/0x8d0 [ 2415.697068] do_vfs_ioctl+0xd6e/0x1390 [ 2415.700971] ? selinux_file_ioctl+0x46f/0x5e0 [ 2415.705474] ? selinux_file_ioctl+0x125/0x5e0 [ 2415.709982] ? ioctl_preallocate+0x210/0x210 [ 2415.714402] ? selinux_file_mprotect+0x620/0x620 [ 2415.719177] ? iterate_fd+0x360/0x360 [ 2415.723009] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2415.727779] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2415.733335] ? security_file_ioctl+0x93/0xc0 [ 2415.737755] ksys_ioctl+0xab/0xd0 [ 2415.741224] __x64_sys_ioctl+0x73/0xb0 [ 2415.745125] ? do_syscall_64+0x5b/0x610 [ 2415.749109] do_syscall_64+0x103/0x610 [ 2415.753009] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2415.758205] RIP: 0033:0x457e39 [ 2415.761405] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2415.780344] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2415.788056] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2415.795342] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2415.802620] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2415.809897] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2415.817173] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 [ 2416.555195] net_ratelimit: 24 callbacks suppressed [ 2416.555205] protocol 88fb is buggy, dev hsr_slave_0 [ 2416.565329] protocol 88fb is buggy, dev hsr_slave_1 [ 2417.514985] protocol 88fb is buggy, dev hsr_slave_0 [ 2417.520179] protocol 88fb is buggy, dev hsr_slave_1 [ 2417.525396] protocol 88fb is buggy, dev hsr_slave_0 [ 2417.530500] protocol 88fb is buggy, dev hsr_slave_1 [ 2417.834933] protocol 88fb is buggy, dev hsr_slave_0 [ 2417.840042] protocol 88fb is buggy, dev hsr_slave_1 [ 2417.845188] protocol 88fb is buggy, dev hsr_slave_0 [ 2417.850240] protocol 88fb is buggy, dev hsr_slave_1 19:47:29 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x600000000000000]}}, 0xfffffea9) 19:47:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$packet(r0, 0x0, &(0x7f00000006c0)) 19:47:29 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000013"]) 19:47:29 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x50a000, 0x0, 0x0, 0x0) 19:47:29 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x101000, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000080)={0x5, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socket(0x1f, 0x1, 0x7) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000300)={@remote, 0x29, r2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000400)) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f00000003c0)={0x0, 0xffffffffffff0001, 0x6, [], &(0x7f0000000380)=0x2}) 19:47:29 executing program 0 (fault-call:7 fault-nth:27): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:29 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0900000013"]) 19:47:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$packet(r0, 0x0, &(0x7f00000006c0)) 19:47:29 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x2) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:47:29 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x6b6b6b, 0x0, 0x0, 0x0) [ 2418.315575] FAULT_INJECTION: forcing a failure. [ 2418.315575] name failslab, interval 1, probability 0, space 0, times 0 [ 2418.341757] CPU: 0 PID: 17350 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2418.349081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2418.358578] Call Trace: [ 2418.361191] dump_stack+0x172/0x1f0 [ 2418.364846] should_fail.cold+0xa/0x1b [ 2418.368754] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2418.373871] ? lock_downgrade+0x810/0x810 [ 2418.378033] ? ___might_sleep+0x163/0x280 [ 2418.382197] __should_failslab+0x121/0x190 [ 2418.386450] should_failslab+0x9/0x14 [ 2418.390273] kmem_cache_alloc_trace+0x2d1/0x760 [ 2418.394988] ? throtl_pd_free+0x23/0x30 [ 2418.398982] ? blkcg_activate_policy+0x6a/0x560 [ 2418.403668] ? blk_mq_queue_stopped+0x130/0x130 [ 2418.408347] blk_stat_alloc_callback+0x58/0x270 [ 2418.413027] ? blk_mq_hctx_mark_pending+0x180/0x180 [ 2418.418058] blk_mq_init_allocated_queue+0x85/0x1570 [ 2418.423177] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2418.428729] ? blkcg_init_queue+0x18a/0x3d0 [ 2418.433065] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2418.438616] ? blk_alloc_queue_node+0x559/0x760 [ 2418.443299] blk_mq_init_queue+0x62/0xb0 [ 2418.447380] loop_add+0x2dd/0x8d0 [ 2418.450853] ? idr_find+0x47/0x60 [ 2418.454319] loop_control_ioctl+0x165/0x360 [ 2418.458649] ? loop_add+0x8d0/0x8d0 [ 2418.462293] ? __might_sleep+0x95/0x190 [ 2418.466280] ? loop_add+0x8d0/0x8d0 [ 2418.469922] do_vfs_ioctl+0xd6e/0x1390 [ 2418.473835] ? selinux_file_ioctl+0x46f/0x5e0 [ 2418.478341] ? selinux_file_ioctl+0x125/0x5e0 [ 2418.482850] ? ioctl_preallocate+0x210/0x210 [ 2418.487268] ? selinux_file_mprotect+0x620/0x620 [ 2418.492047] ? iterate_fd+0x360/0x360 [ 2418.495866] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2418.501412] ? fput+0x128/0x1a0 [ 2418.504709] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2418.510268] ? security_file_ioctl+0x93/0xc0 [ 2418.514688] ksys_ioctl+0xab/0xd0 [ 2418.518154] __x64_sys_ioctl+0x73/0xb0 [ 2418.522060] do_syscall_64+0x103/0x610 [ 2418.525962] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2418.531160] RIP: 0033:0x457e39 [ 2418.534362] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2418.553269] RSP: 002b:00007fc45d3b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2418.560986] RAX: ffffffffffffffda RBX: 00007fc45d3b7c90 RCX: 0000000000457e39 [ 2418.568270] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2418.575546] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 2418.582826] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3b86d4 [ 2418.590103] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:29 executing program 0 (fault-call:7 fault-nth:28): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:29 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000013"]) [ 2418.842227] FAULT_INJECTION: forcing a failure. [ 2418.842227] name failslab, interval 1, probability 0, space 0, times 0 [ 2418.859959] CPU: 0 PID: 17365 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2418.867249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2418.876604] Call Trace: [ 2418.879212] dump_stack+0x172/0x1f0 [ 2418.882881] should_fail.cold+0xa/0x1b [ 2418.886789] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2418.891907] ? lock_downgrade+0x810/0x810 [ 2418.896064] ? ___might_sleep+0x163/0x280 [ 2418.900226] ? blk_mq_queue_stopped+0x130/0x130 [ 2418.904906] __should_failslab+0x121/0x190 [ 2418.909154] should_failslab+0x9/0x14 [ 2418.912962] __kmalloc+0x2dc/0x740 [ 2418.916508] ? kmem_cache_alloc_trace+0x354/0x760 [ 2418.921360] ? throtl_pd_free+0x23/0x30 [ 2418.925343] ? blk_stat_alloc_callback+0x84/0x270 [ 2418.930198] ? blk_mq_queue_stopped+0x130/0x130 [ 2418.934894] blk_stat_alloc_callback+0x84/0x270 [ 2418.939573] ? blk_mq_hctx_mark_pending+0x180/0x180 [ 2418.944598] blk_mq_init_allocated_queue+0x85/0x1570 [ 2418.949712] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2418.955275] ? blkcg_init_queue+0x18a/0x3d0 [ 2418.959607] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2418.965155] ? blk_alloc_queue_node+0x559/0x760 [ 2418.969842] blk_mq_init_queue+0x62/0xb0 [ 2418.973919] loop_add+0x2dd/0x8d0 [ 2418.977381] ? idr_find+0x47/0x60 [ 2418.980848] loop_control_ioctl+0x165/0x360 [ 2418.985185] ? loop_add+0x8d0/0x8d0 [ 2418.988828] ? __might_sleep+0x95/0x190 [ 2418.992821] ? loop_add+0x8d0/0x8d0 [ 2418.996460] do_vfs_ioctl+0xd6e/0x1390 [ 2419.000358] ? selinux_file_ioctl+0x46f/0x5e0 [ 2419.004862] ? selinux_file_ioctl+0x125/0x5e0 [ 2419.009370] ? ioctl_preallocate+0x210/0x210 [ 2419.013785] ? selinux_file_mprotect+0x620/0x620 [ 2419.018563] ? iterate_fd+0x360/0x360 [ 2419.022377] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2419.027921] ? fput+0x128/0x1a0 [ 2419.031216] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2419.036768] ? security_file_ioctl+0x93/0xc0 [ 2419.041192] ksys_ioctl+0xab/0xd0 [ 2419.044655] __x64_sys_ioctl+0x73/0xb0 [ 2419.048557] do_syscall_64+0x103/0x610 [ 2419.052499] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2419.057711] RIP: 0033:0x457e39 [ 2419.060924] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2419.079835] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2419.087547] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2419.094824] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2419.102101] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2419.109369] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2419.116640] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:32 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x1b6c000000000000]}}, 0xfffffea9) 19:47:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$packet(r0, 0x0, &(0x7f00000006c0)) 19:47:32 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80000, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmget(0x2, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) syncfs(r1) r2 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcf) 19:47:32 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000013"]) 19:47:32 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x709000, 0x0, 0x0, 0x0) 19:47:32 executing program 0 (fault-call:7 fault-nth:29): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:32 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000013"]) 19:47:32 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f00000001c0), 0xc) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) 19:47:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = shmget(0x1, 0x2000, 0x100, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, 0x0) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x7, 0x80, 0x100000000, 0x8, 0x0, 0x90, 0x88, 0x0, 0x5, 0x7, 0x6000000000, 0x30, 0x96, 0x200, 0xef35, 0x7, 0xc1ed, 0x100, 0x8, 0x8, 0x1, 0x2, 0x4, 0x1, 0x9, 0x7, 0x5, 0x1000, 0x9, 0x1, 0x1, 0x1000, 0x9, 0x4, 0xffff, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x9, 0x600000000}, 0x210, 0x5, 0x3, 0x7, 0x0, 0x1, 0x8}, 0xffffffffffffffff, 0xf, 0xffffffffffffff9c, 0x0) [ 2421.284461] FAULT_INJECTION: forcing a failure. [ 2421.284461] name failslab, interval 1, probability 0, space 0, times 0 [ 2421.332018] CPU: 1 PID: 17371 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2421.339332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2421.348694] Call Trace: [ 2421.351299] dump_stack+0x172/0x1f0 [ 2421.354959] should_fail.cold+0xa/0x1b [ 2421.358870] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2421.363986] ? lock_downgrade+0x810/0x810 [ 2421.368153] ? ___might_sleep+0x163/0x280 [ 2421.372321] __should_failslab+0x121/0x190 [ 2421.376566] should_failslab+0x9/0x14 [ 2421.380383] kmem_cache_alloc_trace+0x2d1/0x760 [ 2421.385070] ? blk_mq_queue_stopped+0x130/0x130 [ 2421.389753] ? blk_stat_alloc_callback+0x1b0/0x270 [ 2421.394702] blk_mq_init_allocated_queue+0xf1/0x1570 [ 2421.399841] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2421.405387] ? blkcg_init_queue+0x18a/0x3d0 [ 2421.409709] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2421.415256] ? blk_alloc_queue_node+0x559/0x760 [ 2421.419938] blk_mq_init_queue+0x62/0xb0 [ 2421.424038] loop_add+0x2dd/0x8d0 [ 2421.427523] ? idr_find+0x47/0x60 [ 2421.430984] loop_control_ioctl+0x165/0x360 [ 2421.435322] ? loop_add+0x8d0/0x8d0 [ 2421.438959] ? loop_add+0x8d0/0x8d0 [ 2421.442616] do_vfs_ioctl+0xd6e/0x1390 [ 2421.446510] ? selinux_file_ioctl+0x46f/0x5e0 [ 2421.451006] ? selinux_file_ioctl+0x125/0x5e0 [ 2421.455506] ? ioctl_preallocate+0x210/0x210 [ 2421.459917] ? selinux_file_mprotect+0x620/0x620 [ 2421.464684] ? iterate_fd+0x360/0x360 [ 2421.468493] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2421.474031] ? fput+0x128/0x1a0 [ 2421.477330] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2421.482871] ? security_file_ioctl+0x93/0xc0 [ 2421.487288] ksys_ioctl+0xab/0xd0 [ 2421.490755] __x64_sys_ioctl+0x73/0xb0 [ 2421.494650] do_syscall_64+0x103/0x610 [ 2421.498547] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2421.503749] RIP: 0033:0x457e39 [ 2421.506950] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2421.525867] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2421.533574] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2421.540852] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2421.548124] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2421.555412] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2421.562690] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:32 executing program 0 (fault-call:7 fault-nth:30): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:32 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f00000001c0), 0xc) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) 19:47:32 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000013"]) [ 2421.674943] net_ratelimit: 16 callbacks suppressed [ 2421.674951] protocol 88fb is buggy, dev hsr_slave_0 [ 2421.685052] protocol 88fb is buggy, dev hsr_slave_1 [ 2421.690202] protocol 88fb is buggy, dev hsr_slave_0 [ 2421.695316] protocol 88fb is buggy, dev hsr_slave_1 [ 2421.820445] FAULT_INJECTION: forcing a failure. [ 2421.820445] name failslab, interval 1, probability 0, space 0, times 0 [ 2421.850651] CPU: 0 PID: 17391 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2421.857947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2421.867315] Call Trace: [ 2421.869932] dump_stack+0x172/0x1f0 [ 2421.873583] should_fail.cold+0xa/0x1b [ 2421.877509] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2421.882640] ? lock_downgrade+0x810/0x810 [ 2421.886817] ? ___might_sleep+0x163/0x280 [ 2421.890990] __should_failslab+0x121/0x190 [ 2421.895240] should_failslab+0x9/0x14 [ 2421.899050] kmem_cache_alloc_node_trace+0x270/0x720 [ 2421.904170] ? find_next_bit+0x107/0x130 [ 2421.908723] __kmalloc_node+0x3d/0x70 [ 2421.912548] blk_mq_init_allocated_queue+0x3df/0x1570 [ 2421.917841] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2421.923394] ? blkcg_init_queue+0x18a/0x3d0 [ 2421.927735] blk_mq_init_queue+0x62/0xb0 [ 2421.931825] loop_add+0x2dd/0x8d0 [ 2421.935289] ? idr_find+0x47/0x60 [ 2421.938765] loop_control_ioctl+0x165/0x360 [ 2421.943099] ? loop_add+0x8d0/0x8d0 [ 2421.946749] ? __might_sleep+0x95/0x190 [ 2421.950735] ? loop_add+0x8d0/0x8d0 [ 2421.954386] do_vfs_ioctl+0xd6e/0x1390 [ 2421.958285] ? selinux_file_ioctl+0x46f/0x5e0 [ 2421.962801] ? selinux_file_ioctl+0x125/0x5e0 [ 2421.967316] ? ioctl_preallocate+0x210/0x210 [ 2421.971749] ? selinux_file_mprotect+0x620/0x620 [ 2421.976527] ? iterate_fd+0x360/0x360 [ 2421.980337] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2421.985884] ? fput+0x128/0x1a0 [ 2421.989177] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2421.994726] ? security_file_ioctl+0x93/0xc0 [ 2421.999158] ksys_ioctl+0xab/0xd0 [ 2422.002627] __x64_sys_ioctl+0x73/0xb0 [ 2422.006539] do_syscall_64+0x103/0x610 [ 2422.010447] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2422.015641] RIP: 0033:0x457e39 [ 2422.018857] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2422.037774] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2422.045497] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2422.052779] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2422.060062] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2422.067337] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2422.074609] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 [ 2422.085009] protocol 88fb is buggy, dev hsr_slave_0 [ 2422.090103] protocol 88fb is buggy, dev hsr_slave_1 [ 2422.090206] protocol 88fb is buggy, dev hsr_slave_0 [ 2422.100257] protocol 88fb is buggy, dev hsr_slave_1 [ 2422.105415] protocol 88fb is buggy, dev hsr_slave_0 [ 2422.110484] protocol 88fb is buggy, dev hsr_slave_1 19:47:35 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x1e78000000000000]}}, 0xfffffea9) 19:47:35 executing program 3: syz_extract_tcp_res(&(0x7f0000000000), 0x9, 0xffffffff) 19:47:35 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00\x00\a']) 19:47:35 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f00000001c0), 0xc) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) 19:47:35 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x712000, 0x0, 0x0, 0x0) 19:47:35 executing program 0 (fault-call:7 fault-nth:31): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x78) read$FUSE(r0, &(0x7f0000000100), 0x1000) 19:47:35 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f00000001c0), 0xc) getsockname$packet(r0, 0x0, &(0x7f00000006c0)) 19:47:35 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00\x00\a']) [ 2424.354545] FAULT_INJECTION: forcing a failure. [ 2424.354545] name failslab, interval 1, probability 0, space 0, times 0 [ 2424.405697] CPU: 1 PID: 17403 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2424.413041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2424.422399] Call Trace: [ 2424.422442] dump_stack+0x172/0x1f0 [ 2424.422468] should_fail.cold+0xa/0x1b [ 2424.432540] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2424.432562] ? ___might_sleep+0x163/0x280 [ 2424.432584] __should_failslab+0x121/0x190 [ 2424.432602] should_failslab+0x9/0x14 [ 2424.449895] kmem_cache_alloc_node_trace+0x270/0x720 [ 2424.455018] ? find_next_bit+0x107/0x130 [ 2424.459092] __kmalloc_node+0x3d/0x70 [ 2424.463028] blk_mq_realloc_hw_ctxs+0x1a0/0xfa0 [ 2424.467704] ? kasan_unpoison_shadow+0x35/0x50 [ 2424.472289] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2424.477437] blk_mq_init_allocated_queue+0x420/0x1570 [ 2424.482636] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2424.488200] blk_mq_init_queue+0x62/0xb0 [ 2424.492324] loop_add+0x2dd/0x8d0 [ 2424.495783] ? idr_find+0x47/0x60 [ 2424.499243] loop_control_ioctl+0x165/0x360 [ 2424.503566] ? loop_add+0x8d0/0x8d0 [ 2424.507200] ? __might_sleep+0x95/0x190 [ 2424.511181] ? loop_add+0x8d0/0x8d0 [ 2424.514839] do_vfs_ioctl+0xd6e/0x1390 [ 2424.518765] ? selinux_file_ioctl+0x46f/0x5e0 [ 2424.523295] ? selinux_file_ioctl+0x125/0x5e0 [ 2424.527831] ? ioctl_preallocate+0x210/0x210 [ 2424.532283] ? selinux_file_mprotect+0x620/0x620 [ 2424.537063] ? iterate_fd+0x360/0x360 [ 2424.540876] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2424.546417] ? fput+0x128/0x1a0 [ 2424.549700] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2424.555237] ? security_file_ioctl+0x93/0xc0 [ 2424.559647] ksys_ioctl+0xab/0xd0 [ 2424.563107] __x64_sys_ioctl+0x73/0xb0 [ 2424.567020] do_syscall_64+0x103/0x610 [ 2424.570918] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2424.576123] RIP: 0033:0x457e39 [ 2424.579333] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2424.598233] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2424.605969] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2424.613251] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2424.620514] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2424.627790] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2424.635057] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:35 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x740000, 0x0, 0x0, 0x0) 19:47:35 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f00000001c0), 0xc) getsockname$packet(r0, 0x0, &(0x7f00000006c0)) 19:47:35 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000000)="4152ee2d63a72d3b1048d0e7b421b703e913a0106a2ffd733a224fd142ba0f94a002dbf61f48e3f48df8bb1dd03ffe635e3eefdec47e60f10baa6ef69ec12b2c9bbaef8f7366158eb6dcb174b5d42c505da0c4d8eac32de5cc4751334595554ad248eda7a9e3df540723e568fb76c6889ae2e95ef0bdb58daa28bc2892c5d9f4c9316236b203292abe365186d23a44ef5a478547e124fabef1e7a43331bd5a0de428629034189a904d2f35fc3b5b035b7e20aad28c290e63856f255df705dd4f0de3d0fe10277fa0f313c5884789f07d69a99603aec8c38cf8", 0xd9, r0}, 0x68) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x400400, 0x0) bind$pptp(r1, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) [ 2426.954989] net_ratelimit: 24 callbacks suppressed [ 2426.955012] protocol 88fb is buggy, dev hsr_slave_0 [ 2426.965185] protocol 88fb is buggy, dev hsr_slave_1 19:47:38 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x2400000000000000]}}, 0xfffffea9) 19:47:38 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00\x00\a']) 19:47:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f00000001c0), 0xc) getsockname$packet(r0, 0x0, &(0x7f00000006c0)) 19:47:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = shmget(0x3, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) 19:47:38 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x80ffff, 0x0, 0x0, 0x0) 19:47:38 executing program 0 (fault-call:7 fault-nth:32): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000006c0)) 19:47:38 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000040)={0x70, 0x0, 0x4, [{0x2, 0xffffffffffffffe0, 0xd, 0x4, '[\x16cpusetuser#'}, {0x2, 0x8001, 0x1c, 0x1, '/user,\'.vboxnet1@\\vmnet1self'}]}, 0x70) 19:47:38 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000180)=0xf4240) r1 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffff9c, 0x50, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r2, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d00000013342d39ae237ac74031ff6387d3367ca65423fa8f18727ca335e9a6d04fbdd33e3e5169ff584928edbacfe4cbb9320000000000000000000000000000"]) [ 2427.519719] FAULT_INJECTION: forcing a failure. [ 2427.519719] name failslab, interval 1, probability 0, space 0, times 0 [ 2427.552184] CPU: 1 PID: 17432 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2427.559495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2427.568856] Call Trace: [ 2427.571466] dump_stack+0x172/0x1f0 [ 2427.575114] should_fail.cold+0xa/0x1b [ 2427.579028] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2427.584151] ? blk_mq_realloc_hw_ctxs+0x42e/0xfa0 [ 2427.584181] ? ___might_sleep+0x163/0x280 [ 2427.584213] __should_failslab+0x121/0x190 [ 2427.584229] should_failslab+0x9/0x14 [ 2427.601215] kmem_cache_alloc_node_trace+0x270/0x720 [ 2427.606345] ? lock_downgrade+0x810/0x810 [ 2427.610526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2427.616078] ? check_preemption_disabled+0x48/0x290 [ 2427.621106] __kmalloc_node+0x3d/0x70 [ 2427.624933] blk_mq_realloc_hw_ctxs+0x4c5/0xfa0 [ 2427.629604] ? kasan_unpoison_shadow+0x35/0x50 [ 2427.634212] blk_mq_init_allocated_queue+0x420/0x1570 [ 2427.639408] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2427.644955] blk_mq_init_queue+0x62/0xb0 [ 2427.649026] loop_add+0x2dd/0x8d0 [ 2427.652481] ? idr_find+0x47/0x60 [ 2427.655940] loop_control_ioctl+0x165/0x360 [ 2427.660266] ? loop_add+0x8d0/0x8d0 [ 2427.663954] ? __might_sleep+0x95/0x190 [ 2427.667932] ? loop_add+0x8d0/0x8d0 [ 2427.671561] do_vfs_ioctl+0xd6e/0x1390 [ 2427.675463] ? selinux_file_ioctl+0x46f/0x5e0 [ 2427.679966] ? selinux_file_ioctl+0x125/0x5e0 [ 2427.684462] ? ioctl_preallocate+0x210/0x210 [ 2427.688876] ? selinux_file_mprotect+0x620/0x620 [ 2427.693643] ? iterate_fd+0x360/0x360 [ 2427.697447] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2427.702987] ? fput+0x128/0x1a0 [ 2427.706284] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2427.711829] ? security_file_ioctl+0x93/0xc0 [ 2427.716283] ksys_ioctl+0xab/0xd0 [ 2427.719755] __x64_sys_ioctl+0x73/0xb0 [ 2427.723650] do_syscall_64+0x103/0x610 [ 2427.727543] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2427.732728] RIP: 0033:0x457e39 [ 2427.735935] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2427.754840] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2427.762547] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 19:47:38 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x907000, 0x0, 0x0, 0x0) [ 2427.769812] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2427.777101] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2427.784366] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2427.791651] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:38 executing program 0 (fault-call:7 fault-nth:33): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000006c0)) [ 2427.924915] protocol 88fb is buggy, dev hsr_slave_0 [ 2427.930083] protocol 88fb is buggy, dev hsr_slave_1 [ 2427.935219] protocol 88fb is buggy, dev hsr_slave_0 [ 2427.940292] protocol 88fb is buggy, dev hsr_slave_1 [ 2428.088087] FAULT_INJECTION: forcing a failure. [ 2428.088087] name failslab, interval 1, probability 0, space 0, times 0 [ 2428.117325] CPU: 1 PID: 17458 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2428.124616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2428.133970] Call Trace: [ 2428.136573] dump_stack+0x172/0x1f0 [ 2428.140219] should_fail.cold+0xa/0x1b [ 2428.144119] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2428.149234] ? ___might_sleep+0x163/0x280 [ 2428.153394] __should_failslab+0x121/0x190 [ 2428.157639] should_failslab+0x9/0x14 [ 2428.161449] kmem_cache_alloc_node_trace+0x270/0x720 [ 2428.166554] ? __kmalloc_node+0x3d/0x70 [ 2428.170542] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2428.176013] __kmalloc_node+0x3d/0x70 [ 2428.179829] sbitmap_init_node+0x29e/0x510 [ 2428.184110] blk_mq_realloc_hw_ctxs+0x53b/0xfa0 [ 2428.188832] blk_mq_init_allocated_queue+0x420/0x1570 [ 2428.194036] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2428.199594] blk_mq_init_queue+0x62/0xb0 [ 2428.203681] loop_add+0x2dd/0x8d0 [ 2428.207151] ? idr_find+0x47/0x60 [ 2428.210615] loop_control_ioctl+0x165/0x360 [ 2428.214944] ? loop_add+0x8d0/0x8d0 [ 2428.218583] ? __might_sleep+0x95/0x190 [ 2428.222579] ? loop_add+0x8d0/0x8d0 [ 2428.226218] do_vfs_ioctl+0xd6e/0x1390 [ 2428.230120] ? selinux_file_ioctl+0x46f/0x5e0 [ 2428.234627] ? selinux_file_ioctl+0x125/0x5e0 [ 2428.239136] ? ioctl_preallocate+0x210/0x210 [ 2428.243569] ? selinux_file_mprotect+0x620/0x620 [ 2428.248347] ? iterate_fd+0x360/0x360 [ 2428.252159] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2428.256931] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2428.262502] ? security_file_ioctl+0x93/0xc0 [ 2428.266922] ksys_ioctl+0xab/0xd0 [ 2428.270388] __x64_sys_ioctl+0x73/0xb0 [ 2428.274283] ? do_syscall_64+0x5b/0x610 [ 2428.278271] do_syscall_64+0x103/0x610 [ 2428.282168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2428.287386] RIP: 0033:0x457e39 [ 2428.290584] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2428.309491] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2428.317206] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2428.324476] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2428.331755] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2428.339040] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2428.346311] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 [ 2428.355407] protocol 88fb is buggy, dev hsr_slave_0 [ 2428.361855] protocol 88fb is buggy, dev hsr_slave_1 [ 2428.368424] protocol 88fb is buggy, dev hsr_slave_0 [ 2428.374136] protocol 88fb is buggy, dev hsr_slave_1 19:47:41 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0xdc4f8c0b6e010000]}}, 0xfffffea9) 19:47:41 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESHEX=r0], @ANYBLOB, @ANYRESHEX=r0, @ANYRESHEX]) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000140)) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x400000) getsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x4) epoll_create1(0x80000) 19:47:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc7, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffff9c, 0x1) r0 = shmget(0x0, 0x2000, 0x1040, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, 0x0) 19:47:41 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x940000, 0x0, 0x0, 0x0) 19:47:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000006c0)) 19:47:41 executing program 0 (fault-call:7 fault-nth:34): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) clock_getres(0x2, &(0x7f0000000000)) gettid() 19:47:41 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x10800) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x20) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:47:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0), 0xc) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) [ 2430.562752] FAULT_INJECTION: forcing a failure. [ 2430.562752] name failslab, interval 1, probability 0, space 0, times 0 [ 2430.601121] CPU: 1 PID: 17467 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2430.608438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2430.617798] Call Trace: [ 2430.620404] dump_stack+0x172/0x1f0 [ 2430.624054] should_fail.cold+0xa/0x1b [ 2430.627960] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2430.633098] ? __should_failslab+0x79/0x190 [ 2430.637436] ? __should_failslab+0x87/0x190 [ 2430.641783] __should_failslab+0x121/0x190 [ 2430.646038] should_failslab+0x9/0x14 [ 2430.649847] kmem_cache_alloc_node_trace+0x270/0x720 [ 2430.654974] blk_alloc_flush_queue+0x8f/0x2d0 [ 2430.659487] blk_mq_realloc_hw_ctxs+0x732/0xfa0 [ 2430.664167] ? kasan_unpoison_shadow+0x35/0x50 [ 2430.668783] blk_mq_init_allocated_queue+0x420/0x1570 [ 2430.673987] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2430.679545] blk_mq_init_queue+0x62/0xb0 [ 2430.683616] loop_add+0x2dd/0x8d0 [ 2430.687082] ? idr_find+0x47/0x60 [ 2430.690548] loop_control_ioctl+0x165/0x360 [ 2430.694881] ? loop_add+0x8d0/0x8d0 [ 2430.698522] ? __might_sleep+0x95/0x190 [ 2430.702512] ? loop_add+0x8d0/0x8d0 [ 2430.706152] do_vfs_ioctl+0xd6e/0x1390 [ 2430.710063] ? selinux_file_ioctl+0x46f/0x5e0 [ 2430.714566] ? selinux_file_ioctl+0x125/0x5e0 [ 2430.719077] ? ioctl_preallocate+0x210/0x210 [ 2430.723501] ? selinux_file_mprotect+0x620/0x620 [ 2430.728277] ? iterate_fd+0x360/0x360 [ 2430.732094] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2430.737639] ? fput+0x128/0x1a0 [ 2430.740952] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2430.746510] ? security_file_ioctl+0x93/0xc0 [ 2430.750930] ksys_ioctl+0xab/0xd0 [ 2430.754399] __x64_sys_ioctl+0x73/0xb0 [ 2430.758300] do_syscall_64+0x103/0x610 [ 2430.762212] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2430.767415] RIP: 0033:0x457e39 [ 2430.770621] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2430.789527] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2430.797240] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2430.804521] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 19:47:41 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xa05000, 0x0, 0x0, 0x0) [ 2430.811794] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2430.819084] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2430.826355] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:41 executing program 0 (fault-call:7 fault-nth:35): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:41 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000001580)={'vlan0\x00', {0x2, 0x0, @broadcast}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x8000000000001, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @link_local}, 0x10) r2 = syz_open_dev$admmidi(&(0x7f0000004580)='/dev/admmidi#\x00', 0x8, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000004840)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000004800)={&(0x7f0000004640)={0x1c, 0x0, 0xb00, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4004) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000012c0)=[{0x0}, {0x0}], 0x2}, 0x0) sendmmsg(r1, &(0x7f00000007c0), 0x4da0d00277156b, 0x0) fcntl$setstatus(r1, 0x4, 0x42c02) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x10000, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000000c0)=0x400, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000100)=ANY=[@ANYRES64=r0]) time(&(0x7f0000000080)) [ 2431.081557] FAULT_INJECTION: forcing a failure. [ 2431.081557] name failslab, interval 1, probability 0, space 0, times 0 [ 2431.131435] CPU: 0 PID: 17493 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2431.138752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2431.148114] Call Trace: [ 2431.150721] dump_stack+0x172/0x1f0 [ 2431.154369] should_fail.cold+0xa/0x1b [ 2431.158271] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2431.163387] ? ___might_sleep+0x163/0x280 [ 2431.167552] __should_failslab+0x121/0x190 [ 2431.171802] should_failslab+0x9/0x14 [ 2431.175619] kmem_cache_alloc_node_trace+0x270/0x720 [ 2431.180732] ? rcu_read_lock_sched_held+0x110/0x130 [ 2431.185755] ? kmem_cache_alloc_node_trace+0x352/0x720 [ 2431.191065] __kmalloc_node+0x3d/0x70 [ 2431.194881] blk_alloc_flush_queue+0x102/0x2d0 [ 2431.199482] blk_mq_realloc_hw_ctxs+0x732/0xfa0 [ 2431.204170] ? kasan_unpoison_shadow+0x35/0x50 [ 2431.208849] blk_mq_init_allocated_queue+0x420/0x1570 [ 2431.214058] ? blkcg_init_queue+0x18a/0x3d0 [ 2431.218399] ? blk_alloc_queue_node+0x541/0x760 [ 2431.223084] blk_mq_init_queue+0x62/0xb0 [ 2431.227159] loop_add+0x2dd/0x8d0 [ 2431.230621] ? idr_find+0x47/0x60 [ 2431.234091] loop_control_ioctl+0x165/0x360 [ 2431.238426] ? loop_add+0x8d0/0x8d0 [ 2431.242068] ? __inode_security_revalidate+0x71/0x120 [ 2431.247647] ? __inode_security_revalidate+0x8a/0x120 [ 2431.252854] ? loop_add+0x8d0/0x8d0 [ 2431.256497] do_vfs_ioctl+0xd6e/0x1390 [ 2431.260396] ? selinux_file_ioctl+0x46f/0x5e0 [ 2431.264900] ? selinux_file_ioctl+0x125/0x5e0 [ 2431.269402] ? ioctl_preallocate+0x210/0x210 [ 2431.273828] ? selinux_file_mprotect+0x620/0x620 [ 2431.278599] ? iterate_fd+0x360/0x360 [ 2431.282413] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2431.287187] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2431.292734] ? security_file_ioctl+0x93/0xc0 [ 2431.297164] ksys_ioctl+0xab/0xd0 [ 2431.300631] __x64_sys_ioctl+0x73/0xb0 [ 2431.304534] do_syscall_64+0x103/0x610 [ 2431.308434] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2431.313631] RIP: 0033:0x457e39 [ 2431.316837] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2431.335755] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2431.343488] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2431.350763] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2431.358532] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2431.365808] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2431.373086] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 [ 2432.074923] net_ratelimit: 16 callbacks suppressed [ 2432.074933] protocol 88fb is buggy, dev hsr_slave_0 [ 2432.085029] protocol 88fb is buggy, dev hsr_slave_1 [ 2432.090164] protocol 88fb is buggy, dev hsr_slave_0 [ 2432.095280] protocol 88fb is buggy, dev hsr_slave_1 [ 2432.474933] protocol 88fb is buggy, dev hsr_slave_0 [ 2432.480082] protocol 88fb is buggy, dev hsr_slave_1 [ 2432.485237] protocol 88fb is buggy, dev hsr_slave_0 [ 2432.490327] protocol 88fb is buggy, dev hsr_slave_1 [ 2432.495464] protocol 88fb is buggy, dev hsr_slave_0 [ 2432.500524] protocol 88fb is buggy, dev hsr_slave_1 19:47:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0), 0xc) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) 19:47:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmget(0x2, 0x4000, 0xf13aadb54eae8115, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget(0x3, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x1501, &(0x7f0000ffd000/0x3000)=nil) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40280) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/215) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'batadv0\x00', 0x4000}) r2 = shmget(0x3, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_INFO(r2, 0xe, 0x0) 19:47:44 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x1000000, 0x0, 0x0, 0x0) 19:47:44 executing program 0 (fault-call:7 fault-nth:36): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:44 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x4) r1 = dup3(r0, r0, 0x80000) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000280)) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d00000013"]) rt_sigprocmask(0x3, &(0x7f0000000000)={0xebd}, &(0x7f0000000080), 0x8) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x200, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20048811}, 0x20000004) 19:47:44 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xfffffea9) 19:47:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0), 0xc) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) 19:47:44 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000001c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x10c, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, r2, 0x4}, @transaction_sg={0x40486311, {{0x6, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x28, 0x48, &(0x7f0000000100)=[@ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x1, 0x3, 0x2}], &(0x7f0000000140)=[0x38, 0x20, 0x18, 0x20, 0x78, 0x68, 0x28, 0x20, 0x20]}}}, @increfs={0x40046304, 0x1}, @increfs_done={0x40106308, r3, 0x2}, @reply_sg={0x40486312, {{0x8, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x30, 0x18, &(0x7f0000000240)=[@flat={0x73622a85, 0x10b, r4, 0x2}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000280)=[0x20, 0x0, 0x0]}}}, @transaction={0x40406300, {0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x73, 0x0, &(0x7f0000000480)="b9cc0a611474b1ae284bfc3d64963920976bdcacecd814e7a5930d08026c1c8e7ec49ec5f4ab22a7b6750ebb420fb4bc030e8253de0fbd897abcd57232233e71afa3e18f20764336e7a31d3025467fafe69deec600468b21647de4d112f0c255b6ea06246573b4717383ffd153d0cdc96b8b43"}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x140840}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) 19:47:44 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x100, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x1e3001, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x8, r1, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) [ 2433.670387] FAULT_INJECTION: forcing a failure. [ 2433.670387] name failslab, interval 1, probability 0, space 0, times 0 [ 2433.732608] CPU: 1 PID: 17504 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2433.739921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2433.749281] Call Trace: [ 2433.751892] dump_stack+0x172/0x1f0 [ 2433.755534] should_fail.cold+0xa/0x1b [ 2433.759435] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2433.764549] ? lock_downgrade+0x810/0x810 [ 2433.768707] ? ___might_sleep+0x163/0x280 [ 2433.772896] __should_failslab+0x121/0x190 [ 2433.777145] should_failslab+0x9/0x14 [ 2433.780955] kmem_cache_alloc_node_trace+0x270/0x720 [ 2433.786095] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2433.790861] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2433.796413] ? find_next_bit+0x107/0x130 [ 2433.800494] blk_mq_init_tags+0x73/0x2c0 [ 2433.804571] blk_mq_alloc_rq_map+0x88/0x200 [ 2433.808906] blk_mq_init_sched+0x20c/0x750 [ 2433.813160] elevator_init_mq+0xcd/0x160 [ 2433.817233] blk_mq_init_allocated_queue+0x1136/0x1570 [ 2433.822537] blk_mq_init_queue+0x62/0xb0 [ 2433.826609] loop_add+0x2dd/0x8d0 [ 2433.830070] ? idr_find+0x47/0x60 [ 2433.833536] loop_control_ioctl+0x165/0x360 [ 2433.837871] ? loop_add+0x8d0/0x8d0 [ 2433.841513] ? do_vfs_ioctl+0xcf2/0x1390 [ 2433.845582] ? loop_add+0x8d0/0x8d0 [ 2433.849218] do_vfs_ioctl+0xd6e/0x1390 [ 2433.853119] ? selinux_file_ioctl+0x46f/0x5e0 [ 2433.857643] ? selinux_file_ioctl+0x125/0x5e0 [ 2433.862148] ? ioctl_preallocate+0x210/0x210 [ 2433.866568] ? selinux_file_mprotect+0x620/0x620 [ 2433.871345] ? iterate_fd+0x360/0x360 [ 2433.875169] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2433.880719] ? security_file_ioctl+0x93/0xc0 [ 2433.885147] ksys_ioctl+0xab/0xd0 [ 2433.888612] __x64_sys_ioctl+0x73/0xb0 [ 2433.892514] do_syscall_64+0x103/0x610 [ 2433.896415] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2433.901608] RIP: 0033:0x457e39 [ 2433.904808] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2433.923715] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 19:47:44 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x1000040, 0x0, 0x0, 0x0) 19:47:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0), 0xc) getsockname$packet(r0, 0x0, 0x0) [ 2433.931440] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2433.938718] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2433.945999] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2433.953275] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2433.960549] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:45 executing program 0 (fault-call:7 fault-nth:37): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:45 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) fstat(r0, &(0x7f0000000080)) 19:47:45 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0), 0xc) getsockname$packet(r0, 0x0, 0x0) 19:47:45 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x7) [ 2434.175555] FAULT_INJECTION: forcing a failure. [ 2434.175555] name failslab, interval 1, probability 0, space 0, times 0 [ 2434.215891] CPU: 0 PID: 17531 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2434.223186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2434.232551] Call Trace: [ 2434.235176] dump_stack+0x172/0x1f0 [ 2434.238835] should_fail.cold+0xa/0x1b [ 2434.242742] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2434.247857] ? lock_downgrade+0x810/0x810 [ 2434.252017] ? ___might_sleep+0x163/0x280 [ 2434.256187] __should_failslab+0x121/0x190 [ 2434.260436] should_failslab+0x9/0x14 [ 2434.264248] kmem_cache_alloc_node_trace+0x270/0x720 [ 2434.269359] ? __lock_is_held+0xb6/0x140 [ 2434.273426] ? should_fail+0x14d/0x85c [ 2434.277334] __kmalloc_node+0x3d/0x70 [ 2434.281187] sbitmap_init_node+0x29e/0x510 [ 2434.285469] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2434.290939] sbitmap_queue_init_node+0x40/0x710 [ 2434.295621] ? find_next_bit+0x107/0x130 [ 2434.299697] blk_mq_init_tags+0x119/0x2c0 [ 2434.303864] blk_mq_alloc_rq_map+0x88/0x200 [ 2434.308201] blk_mq_init_sched+0x20c/0x750 [ 2434.312456] elevator_init_mq+0xcd/0x160 [ 2434.316527] blk_mq_init_allocated_queue+0x1136/0x1570 [ 2434.321841] blk_mq_init_queue+0x62/0xb0 [ 2434.325916] loop_add+0x2dd/0x8d0 [ 2434.329384] ? idr_find+0x47/0x60 [ 2434.332876] loop_control_ioctl+0x165/0x360 [ 2434.337209] ? loop_add+0x8d0/0x8d0 [ 2434.340850] ? __might_sleep+0x95/0x190 [ 2434.344842] ? loop_add+0x8d0/0x8d0 [ 2434.348489] do_vfs_ioctl+0xd6e/0x1390 [ 2434.352397] ? selinux_file_ioctl+0x46f/0x5e0 [ 2434.357042] ? selinux_file_ioctl+0x125/0x5e0 [ 2434.361547] ? ioctl_preallocate+0x210/0x210 [ 2434.365968] ? selinux_file_mprotect+0x620/0x620 [ 2434.370742] ? iterate_fd+0x360/0x360 [ 2434.374554] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2434.380096] ? fput+0x128/0x1a0 [ 2434.383389] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2434.388939] ? security_file_ioctl+0x93/0xc0 [ 2434.393357] ksys_ioctl+0xab/0xd0 [ 2434.396825] __x64_sys_ioctl+0x73/0xb0 [ 2434.400739] do_syscall_64+0x103/0x610 [ 2434.404652] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2434.409854] RIP: 0033:0x457e39 [ 2434.413056] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2434.431963] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2434.439676] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2434.446952] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2434.454236] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2434.461526] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2434.468800] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:47 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}, 0xfffffea9) 19:47:47 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x1000080, 0x0, 0x0, 0x0) 19:47:47 executing program 0 (fault-call:7 fault-nth:38): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:47 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) r0 = dup(0xffffffffffffff9c) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/168) r1 = getpgrp(0x0) getpgid(r1) r2 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000140)) lsetxattr$security_smack_transmute(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x3) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:47:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0), 0xc) getsockname$packet(r0, 0x0, 0x0) 19:47:47 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x80000, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x80000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaac, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, r0, 0x1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x301002, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x101, 0x0, "07408f2572bd9e28083e61303ae33be85593ac13d97a73e1c3f7cf58233c1917ed9d649a4f44dce61f32cac80c24f96e7d825ddccca7aebf8f115f365e7ec78bfd0a0f0a3c8532a5a0a4035663dd7c9a"}, 0xd8) r3 = dup3(r1, r1, 0x80000) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000080)) shmget(0x3, 0x2000, 0x78000404, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) shmget(0x2, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) shmget(0x1, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) r4 = shmget(0x2, 0x1000, 0x204, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_INFO(r4, 0xe, 0x0) 19:47:47 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x500000000000000]}}, 0xfffffea9) 19:47:47 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d00000013159d0ba740ee8153f029aa88f826d38eb1ae0c4d79008df5ce66e890a4ded5c4c7a6880a597004ebbe9af52ef0776f07034550fd13e9b10a2b423ad55a049bc45787"]) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000000)={0x5, 0x6, 0x0, 0x8001, '\x00', 0x2}) [ 2436.753181] FAULT_INJECTION: forcing a failure. [ 2436.753181] name failslab, interval 1, probability 0, space 0, times 0 [ 2436.781671] CPU: 0 PID: 17552 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2436.788978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2436.798355] Call Trace: [ 2436.800963] dump_stack+0x172/0x1f0 [ 2436.804621] should_fail.cold+0xa/0x1b [ 2436.808521] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2436.813634] ? lock_downgrade+0x810/0x810 [ 2436.813652] ? ___might_sleep+0x163/0x280 [ 2436.813673] __should_failslab+0x121/0x190 [ 2436.826195] should_failslab+0x9/0x14 [ 2436.830006] kmem_cache_alloc_node_trace+0x270/0x720 [ 2436.835130] sbitmap_queue_init_node+0x29e/0x710 [ 2436.839903] blk_mq_init_tags+0x119/0x2c0 [ 2436.839922] blk_mq_alloc_rq_map+0x88/0x200 [ 2436.839945] blk_mq_init_sched+0x20c/0x750 [ 2436.852645] elevator_init_mq+0xcd/0x160 [ 2436.856719] blk_mq_init_allocated_queue+0x1136/0x1570 [ 2436.862034] blk_mq_init_queue+0x62/0xb0 [ 2436.866103] loop_add+0x2dd/0x8d0 [ 2436.869561] ? idr_find+0x47/0x60 [ 2436.873023] loop_control_ioctl+0x165/0x360 [ 2436.877368] ? loop_add+0x8d0/0x8d0 [ 2436.880999] ? __might_sleep+0x95/0x190 [ 2436.884977] ? loop_add+0x8d0/0x8d0 [ 2436.888608] do_vfs_ioctl+0xd6e/0x1390 [ 2436.892502] ? selinux_file_ioctl+0x46f/0x5e0 [ 2436.897004] ? selinux_file_ioctl+0x125/0x5e0 [ 2436.901502] ? ioctl_preallocate+0x210/0x210 [ 2436.905918] ? selinux_file_mprotect+0x620/0x620 [ 2436.910682] ? iterate_fd+0x360/0x360 [ 2436.914488] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2436.920030] ? fput+0x128/0x1a0 [ 2436.923316] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2436.928859] ? security_file_ioctl+0x93/0xc0 [ 2436.933273] ksys_ioctl+0xab/0xd0 [ 2436.936728] __x64_sys_ioctl+0x73/0xb0 [ 2436.940640] do_syscall_64+0x103/0x610 [ 2436.944547] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2436.949778] RIP: 0033:0x457e39 [ 2436.952973] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2436.971875] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2436.979582] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2436.986852] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2436.994117] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 19:47:47 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5]}}, 0xfffffea9) 19:47:47 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x400) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000040)={0x7, 0x2}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f00000001c0)={r2, 0x3}) r3 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) mq_unlink(&(0x7f0000000100)='cgroupposix_acl_access\x00') shmctl$SHM_INFO(r3, 0xe, 0x0) [ 2437.001387] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2437.008660] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:48 executing program 0 (fault-call:7 fault-nth:39): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:48 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)=ANY=[@ANYBLOB="0d00000013"]) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000340)=0x80) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000280)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000100)={{0x1, 0x3, 0xff, 0x8, '\x00', 0x1}, 0x0, 0x20, 0x0, r2, 0x5, 0xc5, 'syz0\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00'], 0x5f, [], [0x1, 0x7, 0x9]}) [ 2437.229501] FAULT_INJECTION: forcing a failure. [ 2437.229501] name failslab, interval 1, probability 0, space 0, times 0 [ 2437.254119] CPU: 1 PID: 17575 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2437.261418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2437.270808] Call Trace: [ 2437.273451] dump_stack+0x172/0x1f0 [ 2437.277120] should_fail.cold+0xa/0x1b [ 2437.281036] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2437.286153] ? ___might_sleep+0x163/0x280 [ 2437.290334] __should_failslab+0x121/0x190 [ 2437.294586] should_failslab+0x9/0x14 [ 2437.298424] kmem_cache_alloc_node_trace+0x270/0x720 [ 2437.303556] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2437.309120] ? sbitmap_init_node+0x149/0x510 [ 2437.313552] sbitmap_queue_init_node+0x29e/0x710 [ 2437.318337] blk_mq_init_tags+0x17b/0x2c0 [ 2437.322500] blk_mq_alloc_rq_map+0x88/0x200 [ 2437.326843] blk_mq_init_sched+0x20c/0x750 [ 2437.331114] elevator_init_mq+0xcd/0x160 [ 2437.335220] blk_mq_init_allocated_queue+0x1136/0x1570 [ 2437.340531] blk_mq_init_queue+0x62/0xb0 [ 2437.344604] loop_add+0x2dd/0x8d0 [ 2437.348072] ? idr_find+0x47/0x60 [ 2437.351571] loop_control_ioctl+0x165/0x360 [ 2437.355922] ? loop_add+0x8d0/0x8d0 [ 2437.359588] ? __might_sleep+0x95/0x190 [ 2437.363583] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2437.368360] ? loop_add+0x8d0/0x8d0 [ 2437.371999] do_vfs_ioctl+0xd6e/0x1390 [ 2437.375899] ? ioctl_preallocate+0x210/0x210 [ 2437.380327] ? retint_kernel+0x2d/0x2d [ 2437.384250] ? security_file_ioctl+0x3d/0xc0 [ 2437.388678] ? security_file_ioctl+0x4e/0xc0 [ 2437.393098] ? security_file_ioctl+0x93/0xc0 [ 2437.397527] ksys_ioctl+0xab/0xd0 [ 2437.400993] __x64_sys_ioctl+0x73/0xb0 [ 2437.404898] do_syscall_64+0x103/0x610 [ 2437.408797] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2437.413993] RIP: 0033:0x457e39 [ 2437.417226] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2437.436132] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2437.443846] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2437.451119] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2437.458393] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2437.465668] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2437.472944] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:48 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind(r1, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0x80) 19:47:48 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x10000c0, 0x0, 0x0, 0x0) 19:47:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/connector\x00') setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000000c0)={0xb7, @dev={0xac, 0x14, 0x14, 0xf}, 0x4e21, 0x1, 'none\x00', 0x17, 0x2, 0x47}, 0x2c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x500, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x800, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x3, r3, 0x8022, r1}, 0x10) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 19:47:48 executing program 0 (fault-call:7 fault-nth:40): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2437.481951] net_ratelimit: 24 callbacks suppressed [ 2437.482017] protocol 88fb is buggy, dev hsr_slave_0 [ 2437.492948] protocol 88fb is buggy, dev hsr_slave_1 19:47:48 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) sync() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0xffffffffffffffff, 0x0, 0x6, 0x1, 0x7fffffff}, 0x9, 0xc8f}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) setsockopt$inet_dccp_int(r2, 0x21, 0xa, &(0x7f0000000080)=0x6, 0x4) 19:47:48 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x400) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) renameat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) [ 2437.697806] FAULT_INJECTION: forcing a failure. [ 2437.697806] name failslab, interval 1, probability 0, space 0, times 0 [ 2437.729653] CPU: 0 PID: 17591 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2437.736963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2437.746318] Call Trace: [ 2437.748927] dump_stack+0x172/0x1f0 [ 2437.752574] should_fail.cold+0xa/0x1b [ 2437.756478] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2437.761596] ? ___might_sleep+0x163/0x280 [ 2437.765766] __should_failslab+0x121/0x190 [ 2437.770020] should_failslab+0x9/0x14 [ 2437.773835] kmem_cache_alloc_node_trace+0x270/0x720 [ 2437.778961] __kmalloc_node+0x3d/0x70 [ 2437.782778] blk_mq_alloc_rq_map+0xb9/0x200 [ 2437.787114] blk_mq_init_sched+0x20c/0x750 [ 2437.791370] elevator_init_mq+0xcd/0x160 [ 2437.795458] blk_mq_init_allocated_queue+0x1136/0x1570 [ 2437.800760] blk_mq_init_queue+0x62/0xb0 [ 2437.804836] loop_add+0x2dd/0x8d0 [ 2437.808300] ? idr_find+0x47/0x60 [ 2437.811764] loop_control_ioctl+0x165/0x360 [ 2437.816092] ? loop_add+0x8d0/0x8d0 [ 2437.819727] ? __might_sleep+0x95/0x190 [ 2437.823707] ? loop_add+0x8d0/0x8d0 [ 2437.827338] do_vfs_ioctl+0xd6e/0x1390 [ 2437.831234] ? selinux_file_ioctl+0x46f/0x5e0 [ 2437.835735] ? selinux_file_ioctl+0x125/0x5e0 [ 2437.840250] ? ioctl_preallocate+0x210/0x210 [ 2437.844667] ? selinux_file_mprotect+0x620/0x620 [ 2437.849435] ? iterate_fd+0x360/0x360 [ 2437.853242] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2437.858787] ? fput+0x128/0x1a0 [ 2437.862082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2437.867629] ? security_file_ioctl+0x93/0xc0 [ 2437.872044] ksys_ioctl+0xab/0xd0 [ 2437.875511] __x64_sys_ioctl+0x73/0xb0 [ 2437.879409] do_syscall_64+0x103/0x610 [ 2437.883307] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2437.888505] RIP: 0033:0x457e39 [ 2437.891705] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2437.910617] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2437.918341] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2437.925611] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2437.932895] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2437.940164] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2437.947451] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 [ 2438.314943] protocol 88fb is buggy, dev hsr_slave_0 [ 2438.320065] protocol 88fb is buggy, dev hsr_slave_1 [ 2438.325228] protocol 88fb is buggy, dev hsr_slave_0 [ 2438.330306] protocol 88fb is buggy, dev hsr_slave_1 [ 2438.714919] protocol 88fb is buggy, dev hsr_slave_0 [ 2438.720017] protocol 88fb is buggy, dev hsr_slave_1 [ 2438.725178] protocol 88fb is buggy, dev hsr_slave_0 [ 2438.730227] protocol 88fb is buggy, dev hsr_slave_1 19:47:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x25}}, 0x1c) 19:47:50 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x1010000, 0x0, 0x0, 0x0) 19:47:51 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6]}}, 0xfffffea9) 19:47:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40242, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:47:51 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000080)={0x14, 0x13, 0x2, {0x16, 0x4}}, 0x14) r1 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f00000000c0)=0x1) 19:47:51 executing program 0 (fault-call:7 fault-nth:41): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:47:51 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2000000, 0x0, 0x0, 0x0) 19:47:51 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 19:47:51 executing program 3: prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x5000)=nil, 0x5000, 0x0, 0x21011, r2, 0x0) bind$inet(r2, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r2, &(0x7f00000004c0)={0x2, 0x4e20, @empty}, 0x10) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000140)=""/50) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="001000000000000000000000000000000000000090308ab1ef8bbb4e3b4117b36a989d7006703fa81d8f883f81fc080f6114f454586e8b3dc547d7e73775717750013ea3544ebf217fc32d857974342636f219c1bba62825ab42d768306725c52179b6c9fd65e1761694c17f63c392b59dd3e20181f08a6967ed79a887b86eaa3e5f23b4741438c2f14c43afb77761c7bf5437448e5118f9f00850af0ee1373a0dd6aa97bd569932aeb88c467c82f4a3120f1d80da2639a89292cc1ff7a1fdf7e84dad45dc0e9be4aa562a88b9b0dc6c193721f3643cc0eb2cdb95d9660bace0a43ebff113e39861b90e2636eab734ab1f3e92d044465d78bcc63bbbadfddb11116188727a26d0cb9478ae08c39a88dae7370e09faca7ce1b853ec8cfc3f052e51380b8eb9d4e7bbee162c99533faa76adb4156d8c7a2db78dd829cd403a06a02f6d62c728c269089d00eb03c95c1e7be74ebd48e34f4b085e784bfb49a3d60d3f7962f36c992c54bb11228cb4769e55997ec5138ae19c756e849dc56c0f87163a1be5a6b0a3c787fbccfaf430bd48cf47f8ec0ca1252aaa2148974eeab7e9f554fe3320fa2559ab4d181624b84c05bd349653eca19d3160f0a03ebd30f5be9a0c23f6584bbda937ed9fc1e823da0c2acab9e14da8abae3247e46b1e5cfb030c98af477a5088784ab47eee5c20505024684a448fda31d55604189fcb2a3dc670e58478658f10557d3a70df54b91a12c47e23299d66d11271e093e38e9c083256cc841a28bd4896ec18d8e09512efb54b2b8c643e07b83be23cd82b43c20cb741f477be9f1abc79b6401883614cc09fd7a84822e12728015443cdc5a28230f1d77b5745d30c1d24f324f74b1ce0775f5dcdcc2a09ee36efcb83c989ba04f7c31fc2751ee92b2e703d143ce08dced2b4316aa23498d0859c405a6146aa6e4fce10c31edd20e86ec0eec6234a04ee2480468cdd122637ea605152821348f5b11fa280c2aa5c6dee247848d5271025674749a192844b89ee6d5561e16e9f7e8a932395bec3c260d0f3d6cb69816953042efd3d578b5dfa13e201e57364840f915f1b4d1ee0d9800304538bc8b8e80f0690d7f5b712fb122b6805ab02b6bcc80b1c9c3e78744b8ded777e657e34c3c8aeb147a1becf598aea7d78229f19f4f0630e15fbf6b7d780874703e57834357d7cd4315f27d1b038c77088d16caa19e69c706459312309183531fc1ebfaf7df56ebcee178086960c181c04e491130aacdec70cb339320d11b29d7843d7bd03a47b46b08117922dc5035ac9154e568df599007e447d8dbad67e8e881d1ce78ece7f90a569a523ba4a18b4992c1d994b622c88f378061510b135bd2b33aba5fcfeea32eff782cc92768cb108d9e4775394d51b105d23dd1f5b7806e961cb4376fa0e7a8c8b8fe816d87eda7fb417c094f0eefb2514cf826929e6494315bff44d00839f16d454244d4e8f100cb9ecfc775b501135ffa687d1efb3b101e1dcb4f37911b05934fda0332a789741850dfad567c707ddc9e841b60bd297f1e338a4ce7957a9f7f61d0d902e3953c2679d5bf9ecd6133bf56ea65dd08e4b71ec4fd36164d75ae3dd8badc92b0c6c8b87ef8e325eef44b5abc755d604ceddccccb1237156b39603efef115e51d3be55b9384e7ca2bf38bf67c130158f11c4f9a0544c6438917884ec33e52e797fc7b0694444e8e2114c5547ecd51591c570f96d383bbe3e8624d30f587d756e7f02e73421e294c881b4bca9fc7a8fb23901d0f20413e891a911fc9d2bf59151c61a3b813251e0b7556fc137fadeb7279b9db89f9c858082b711462902f403b0b6c45b694caa549f5306b35fca0644f0cf52bb6827db21efa4263845240dcf1a9045354c6bcb2148daf21ef9b3873456bf365a03e6ddedac333188471ced6fb44929224ede4c86d05fcb0e7c05ae6cac7c58339be7a0604c789ecc2305753635c5455d6cfe7b3c6710d9109fa597c9666a84e1d715dd06b1c36d78787376071da58dad26569ca1e97853aff7e05220744cca762d3abf967f88376cf5e53d0446ef3996a9d91cbced09fe229ed3cf5693d3b0eaba827a76e401d0fcd33d5a9203a946f6907950e79c0693d70d42668e280cf746bef12487100e3235d33c2a40930c02171f48910881912756792ae6cc0fdf4e385869c01f5f47fbd9675bb428d0db35c9d639e7e8ad0baa894c3f13a5386ee1f7070e49a93fd142fe362b5d7dd0a1d82ba0df7a6ff70bb4835b23446947217aa70190e2c630c3677eaee2c960b3313fea72c47acddca8584558c9861656fd8c3fe2422c4c096f75a062a053fdfcbd88111f985efcb15dae9d72abd665e9e6c7273a21f1f44e176a0d0d40d8c142feac0aefd1eb45ceb9a13661ba2a81d9b49771e6ca2516f993704acd05708159c70e32148933ac6c6026e57d3a819447ecdbad4c9dfb62005f38d948b5d96528b67cc429135f60e17613a8b4eaa79b330982c61ea0b862e662b17e0d6ec74748cd9af60351ba515805a26c6bacc99af91614895f59604bd78fb87d9d51a231ac9d43c53c7046ee40d5a20212f7266ed1debae2c9b582243b551519eaa3112bf38decfab1bb0fb6d172ca30b3c80c19090751af51b5952f615dfbd95270991ba0859f788c9af0fc50eade87f844fd85edee82484ccd37cd1b59f58c8d97cba00f22d46a69e543cd4e78f138faba4ea0d796f4c2807af1f62f1c139305433acf403664c095742f817859b0f0ccbf9878ff41e9534e2adecb03d7e54f3251f575c5a1ec4f7c721cfeb2faaa19b4e97f250b5fe83250d278d3d8f0cd2461baa2916d578b8144150365e7e2364eb64e679dd3a12ff03a313005ee8e9c694455d420efe30163193f15042c5d8feb3ea3ed507fb5c380340898aa8beeaf7b882899d2981bb5e759b5ec33fbc14a3bf81336a401a8718020cf74ef3536661b53fa942c02a8ecfc4958dd8e1b8114073d72b31f5d28612825f14f1bb8e89112c2bc499e4160817c951dc4757e9ab6659971d0e11679ecfb2cb56acc311ac0176ee0f10830763ac25cf105a5ae126104d536d69ce20d5900c8e6b5e4a57a18d1b36ab259545af21706e9c11370d61da475cb73fe37bee54689f52760c063cc746b9a9b40d04599b3d96580dc5743ba287c7f5b64ea65048da2796fda87c31a4378b09bddd3a8d29308b6bc5e9a002bef165608b9fc7a64cb5a05570211f1d10839fb1c203e0902e91bbc0be59c5f75678e5a4f679039b007d39b99dc135e72181eeb108014ac905fc3429b2b0ab1d42db609bce0bf74c901845418ed93349b92f1d1795e5b7e6c9b937f2f566548df1a06fb96c836856f0b9d01bac4f1cd00227505b9fcedf81e657ae042a7215b54fcbf8c5642b455e9e0d6f5699c05371753b63ca27c7f5a3f296c72a4aaa1d31dd20f944fc3e7ea590477de1641fac32b4ca8e761c92acf080abbd79c875770abcb99bf84bc60a50a43cc9c1923706cb06f150fe71384d73771e07af1784b9eeac4b8681f892f538de68010329b364dcf48bf471f6a87bfd06d72e547be5278fc15fdc7517273c76b520efaacec7aae933132512648f0603bfa408987d05bc1e29dc7d1741c62285c5113fa870fbd82afa7b884cf14087d892d79f0994bd7be7826029e111be0fddee1313c15741bd8d536e7589b29384af60e1788baffcfc98251e1586e4c008a6ea7ccc4841ee502b12370da1b85ab37e8894ab205e72281b83ec6635538b1b178536d138ace96d1d6dd24595fef5e6a3d4396c329655d4f720f67ece1a425f0da5ff8e162d9e108ef71cca3c1516bd3e7a25d556d31c30fca69be5c07bff18bf72efb0bf35570e9836d87e25dc51ce1229f61911197be26d14ae1e5f1fe8d70d264274a4622930bb659a4aa714f006915e9d786b5e1ae9852a57f95e40278e0c0985327caed386b49b080af20a5cd65df713cd00d1cc2975208fda6505e07d5a7c4f068ea473427364d3763124461fcdb36b794d7df5277aa2b2613e8ba7a0c0a2ca7e8ca200ff101f1d79d7be4c4b291e797ed9aaf7447c7ec8cef1298a39c1650146e8accf1a0d1bc4dfe79ad5603748a64d8a9217e5a69407ebf41abbf5c3ebb24e38e19469499d72ad6e369e441103b95093e957f6afe8de7e13a1e64286bc197aeb0bc99f8e263e1e14b3c23918b6edf2837c721c022f56c626cf7d7dbde84a317195effc331406e7858f5b710f1710f3eb314b0c5e642f9de25121b06c2f895cb2d17cfd57a878783617058cc9a3ed7cbf5e8f6b1dec5eef46d5839596e8dc7edc7b0a4dae4fa8de15e0ed181eb7c70efaf225de336e26f046c814bd7a9ab0d55f47e8973076718e4b9d4353f47873fe2e035e61feceeb557ec4198eee25b46ea300d2c21bf6a73467e707a4b797c11eea61d990b07feb82910efac2f059fe144d9155d0778f93db33803f8de9756da9b3fe68dd43d998dc11bdcd5b2558884ebe766a32e0122c44ed34a284989b8acbd2f65d7bfbb9c753bf1c467c3234177aa7d5a6e55a1e6e6830a72695a36824952ae7f851c4ac4bc4f2d4cc79139583364471cc9d3e493cf87e8172fbf642936a9ff3bdfb702f7a3c4b009a630635f849a0c49e687a20b9c58ce837c584958bbbe308a6641e5e17468288761332c931f39a4d6f0e522ab69af46d92c21ebcbe2351f8abf6f44a35694a0509ac8b0e68763451f0be051bec5cdca88636d770b3c1eedb2a45abde84d09e3474507a36ed2850474419c78919926a6ecabadd8bae1fccbdea67ec73f005748f7513ae3cda4dcdbdf88e2bb87aed9cedd548ba04170ee619cadb010759f8d1140d99fa387bfc4e2730ec32175fda0067cd8b0e80c1c5bca39de4e592836ad084d57337531a177de3e57d8b0933af120b576f8aaba2f125af1a135412dd6f81bae0f7fab4af1d41e9f1f57d897c336fc834f3b1b9d30dd85c577331363521133a8746e7b890dc5c246cf798f2cce872e954bb66cf968c32f8bb4e51489ecd77633abe81ae0076b7aca8349a5c6c2c0a44b19eca20cbb5601c69713da8e0ed6a71db40ba59ee3fb931e4df1b0b31bae8a58608b3abf253b78f5e4f1234a9deae0e68e25660cd66a35bc881fe2446caf793b14df467b3ac76dfb2520626685077fe046193aa0a8a9ad70b98a7854205f6619793cb654bd53fe38c3bfc52b8b1a5a19b5fe37ae97646cea0fb518285a596246802027e3699ffac993fab2d7cdeae19e6bbb0c2ff74d68f75b9eb9cc6fb51d8298d1b0871f4894774a5ed769bc4ae0cce57c988bff0928b8f9192f7fe00ffc148ca6d685e630baab745df16659de12d236a4c3a088174429f37855d8b1265c5cf1fe2727473c2b9a058a150467bf4b95596ef8e3a3e61d9ee055cbfa0cf649df8de26a6432b5ea00e6cd0d6215f00c6cdd5244d5700373ca997ca6aa16f7eed6dc1934dc48e33673d650e95377ccb83189c4eabf5931855e7c86fcbfa26c6e5c3ed87e21ca06f59cfe6d0057ac9436da6f407266b5de9e5ee047cbcc16cbe0ab0141e51cd5c7346de0fd2dcfe8c1af00e229233eb702720a19147e8bf956a3bd872c0974cc85161145cd9d65313da1a74e248ff9686e143b660b8c4cfe73d78d4c4376ee2cc22c0e7522ddb924b7ac6fbd7c9e5463fb281d5a06e585428a28355885bd087a60a5d669098fcf0df150d5b3302d954ac8a4c96f95d3ee06605aeb821fb1e0fb535122774da18c86b974b38f672fc89f257b000000000000000000000000000000000000000000"], 0x1000}}, 0x4000080) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000077000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) [ 2440.241913] FAULT_INJECTION: forcing a failure. [ 2440.241913] name failslab, interval 1, probability 0, space 0, times 0 [ 2440.285965] CPU: 0 PID: 17617 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2440.293274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2440.302631] Call Trace: [ 2440.305234] dump_stack+0x172/0x1f0 [ 2440.308878] should_fail.cold+0xa/0x1b [ 2440.312775] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2440.317906] ? ___might_sleep+0x163/0x280 [ 2440.322066] __should_failslab+0x121/0x190 [ 2440.326315] should_failslab+0x9/0x14 [ 2440.330124] kmem_cache_alloc_node_trace+0x270/0x720 [ 2440.335230] ? kasan_unpoison_shadow+0x35/0x50 [ 2440.339845] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2440.344956] __kmalloc_node+0x3d/0x70 [ 2440.348762] blk_mq_alloc_rq_map+0xfa/0x200 [ 2440.353213] blk_mq_init_sched+0x20c/0x750 [ 2440.357456] elevator_init_mq+0xcd/0x160 [ 2440.361521] blk_mq_init_allocated_queue+0x1136/0x1570 [ 2440.366819] blk_mq_init_queue+0x62/0xb0 [ 2440.370895] loop_add+0x2dd/0x8d0 [ 2440.374351] ? idr_find+0x47/0x60 [ 2440.377810] loop_control_ioctl+0x165/0x360 [ 2440.382142] ? loop_add+0x8d0/0x8d0 [ 2440.385778] ? __inode_security_revalidate+0x71/0x120 [ 2440.390971] ? __inode_security_revalidate+0x9d/0x120 [ 2440.396184] ? loop_add+0x8d0/0x8d0 [ 2440.399855] do_vfs_ioctl+0xd6e/0x1390 [ 2440.403751] ? selinux_file_ioctl+0x46f/0x5e0 [ 2440.408256] ? selinux_file_ioctl+0x125/0x5e0 [ 2440.412779] ? ioctl_preallocate+0x210/0x210 [ 2440.417194] ? selinux_file_mprotect+0x620/0x620 [ 2440.421981] ? iterate_fd+0x360/0x360 [ 2440.425809] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2440.430579] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2440.436116] ? security_file_ioctl+0x93/0xc0 [ 2440.440541] ksys_ioctl+0xab/0xd0 [ 2440.443996] __x64_sys_ioctl+0x73/0xb0 [ 2440.447885] ? do_syscall_64+0xed/0x610 [ 2440.451863] do_syscall_64+0x103/0x610 [ 2440.455755] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2440.460947] RIP: 0033:0x457e39 [ 2440.464140] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2440.483044] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2440.490754] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2440.498028] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2440.505297] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2440.512581] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2440.519847] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:51 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x4000000, 0x0, 0x0, 0x0) 19:47:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x2c, "eb381ea1f806d839d5abf1d02d08fc86025345c325fc842a7dac68b448bdd9cf63b24efa7aea72ee9a124f2c"}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto(r1, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) 19:47:51 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d000000135a36f1b5df3dfc1113cfd448870c20a4d60d79d5cc34fb9ed4b3aa13efa86dd18dc9d644f3d98a257ac73d34c14b4a657a706ca0afb9c46bc9993f7e2a971efd485d489b9d7a8cba8b054548fd1fb1de78b8bae805f25ed51573e97e200fd698d5e894a0fd98ec6027eeead95079595c0e"]) [ 2440.637183] audit: type=1400 audit(1549655271.602:86): avc: denied { map } for pid=17626 comm="syz-executor.3" path="socket:[343972]" dev="sockfs" ino=343972 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tcp_socket permissive=1 19:47:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x600000, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)={0x8000, 0xaf, "f95788ac64f1fed526db8a44971251e99bdd270e4bc40019cfd8072b9d6f8f190a75934bdb4c9793b710c7ce25dd5ff5e3d2bcb60ae2fbe631387c11dd4437ef0a736360817b3b3ec2d519e98a84e1e69171c11c9eb4beb364403dff3139ef4d09eeef55e72dbb7959e3a66488db6c4e8eeef6bc54653df376a5b86dbb6f285e436de6c98fc50f135fdd8c866e90f14351d8440dcde35c3edb21d766c387ac7831ab78a284d442e930bd62dbe1759e"}) [ 2442.554992] net_ratelimit: 16 callbacks suppressed [ 2442.555002] protocol 88fb is buggy, dev hsr_slave_0 [ 2442.565132] protocol 88fb is buggy, dev hsr_slave_1 [ 2442.570309] protocol 88fb is buggy, dev hsr_slave_0 [ 2442.575434] protocol 88fb is buggy, dev hsr_slave_1 [ 2442.874929] protocol 88fb is buggy, dev hsr_slave_0 [ 2442.880047] protocol 88fb is buggy, dev hsr_slave_1 [ 2442.885263] protocol 88fb is buggy, dev hsr_slave_0 [ 2442.890308] protocol 88fb is buggy, dev hsr_slave_1 [ 2442.895484] protocol 88fb is buggy, dev hsr_slave_0 [ 2442.900534] protocol 88fb is buggy, dev hsr_slave_1 19:47:54 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x24]}}, 0xfffffea9) 19:47:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x67, @local, 0x101}, 0x1c) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000000)=ANY=[@ANYBLOB="0d13afd027881b387a1d8eaf0056000000"]) 19:47:54 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) pipe2(&(0x7f0000000380), 0x0) write(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8}) 19:47:54 executing program 0 (fault-call:7 fault-nth:42): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:54 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x5000000, 0x0, 0x0, 0x0) 19:47:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmget(0x2, 0x3000, 0x202, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_INFO(r0, 0xe, 0x0) 19:47:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg(r1, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@ethernet={0x307, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000000100)="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", 0xfa}, {&(0x7f0000000200)="8731028119948b546a8e14858c082c90a86bf7b258a996c74f036d8b36e7ae6576c82090ceb305573239a6b3c5019c30c15af3b7f9e44c04404dff652b05cd4eb840a3939fee4ad4834031bac36c5f5dc704b3747037f5b31f569f72e49dcfac51fbaea989dc1a850bb38d47020c92439f983f76e5d566261b8ee15e9853dabd040cbd7889cdc7956c52577e60bcf60c0b7253", 0x93}, {&(0x7f00000002c0)="d34bb7baea7148a53474f353c975b053b11b98cfaf1f46752e37230f722971265f65a343d22e5d185d8359e664b2ae648a4c97f4e88acbf19700a02c4d657c8d587dc1a73783e1", 0x47}, {&(0x7f0000000340)="7a9d5f69eb29a4be3a63c7db17e47f67b4162576c8d6a4f221dd0712985414ac3d707586606f42d3e8210a160f26ecfec9a7e1dbc1ef29d5afa14c7a86d9f07da4c950b0a80b3e917e3567ed208f3c2e6ce287b615951e8182675af79089719b82fc277d46485d152682539ec680d63201ca6672", 0x74}, {&(0x7f0000000000)="7f0c30461cb41c8f7d53c1bc00d3ee91", 0x10}, {&(0x7f00000003c0)="b6064b387ab43205f380a73b965fb50174b1bf358318b179d43896355b8e7e00f8c90b23fb9722dadbb386542b85999fca0435732714d4604b607de9effe000f8e154e0f77ed47dd979a0a079985797f4435", 0x52}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000000440)="3ecf53dd3242bce3e79d957932151314c346f7b3d9255eb1f760b3c910fb1f1f86d2ad719ec2b3352a5fbf429154e7dcdc36dd47b0842edbf5055823f4b8617bbd2219df0596cf2f2f67a3f3d559bc9e353491d3932833f1f6237017902b898aa607297b13dd5851daac5e58bd23d819b34ad042e80e84489a18ca7b605e401595c94fc672ac401912b6a731", 0x8c}], 0x9, &(0x7f0000003040)=[{0x110, 0x104, 0xb7, "07b126af25aaad6fd7a0fd35ba1e4b3f9769883dca86d9921ee2430e41d9d69e9f1a51b81e424b17f45fa50ca2de06f123ba3b995538e1fc5d69ba05285a1cd489c6f24381fbf6bc137373947dab7d34d5dcc9d860ea546c493b23c1931cabbc8485f78f7f67d3e17030ce336c3dbc4f69ceedff932324e84f08ec3da566db839ad991716dc9c473f68a0db97a961fb7f575119c0cbdd251ec69c89ae882cafec9981355f9f50ee87d6f5a369935d9f150ae9144196cc75864026758e7df2826798795f3aaab9d4eb5b275419a95f618cbc9165259a2d766484fa6887f2a36de1237651e6f96c2fb19564360a241ac301604130a4f87ce9d05"}, {0xf8, 0x13f, 0x6, "49995cf876e759be7a201cb70013449c7e245d4d8cb904f04d0447e60ce6c990fb2cd267dd43162c5a4f6173650b9265fe898a1dc6f276ea84abcf12653d47359d74fa83e19a75aa2813ca2dae8afcedd92e3dc1fc61b3b6b6b329c3381bef98d2db02e5b94bfa8641f0ce990c83704822a6fbd73a27b3ff9a90ab73bc4581ae52b56f89f6ad3767d7c53866e6c6ef76bcbe27b43c877a2f79188638376b737fb22362fccc6eb4d79e7cefc5b9a801411b98b9deb27f1ac2f0bc1cd571ded1573b1b369745243cce7dbea0ac9da8076ef295018ed7d3f292f5a9e1dbc53571df7484d7e7"}, {0xf0, 0x10f, 0x6, "723c974705530abd75860daae77c0b64d872816c90e251c3574d0919db6df020a9d850e1ea37ace3899eeba4a7a0712be50bde9dac5c0509e4ff7ddacc6fba76618cb14424cac1d1a620282f4e50fcc9060c89a02bdc3923c4d138640593d267e8083ea430c4f1ddd434aa5db1ce3af7b680fef64e1db10103a2c82af0be45f3fb25d024e00a1f512bc6bb601706a1e3dd05baf1be4ae70d127d63aaaf1f2a8e1f07533b608b2baa67c2e533d0329b49ba33f8634ff54f109756c7ebfc5f86be608a5f932202e654380fd4238bc987121fbdd7125a8b0ad50402"}, {0x28, 0x0, 0x8, "521897311e0a71cce1e81f0f48526a1249eb1ff378d1f3"}, {0x68, 0x11f, 0x7, "8e35f9854208334a0f9d0073a7168998b3e54ed6e14d660eeae4634bb89ba8e61877456d02eb57ce8de231bb3ecf68adb44eff3c2c7551edf746f9ab0f42bdafe4c123787ac278f422b31b18a338e15b29decc"}, {0x30, 0x10f, 0x3, "0bf9781c9578e8f8a81bd1c1fd09b9c0a6825fc0e8c4052271b2"}, {0x1010, 0x116, 0x9c4, "98ca939df5fc589c890a287f208653702be491c545ea34cc935ac78965c0d1b02454481bd7a53301c403c93067068e3ab5a6559c1470912efcfc70eaab8d122d6b003028a3eee119d1b8e6cc5062bb0f6ac581327b1e6304afc51e5867bece484f57b354aaaf141acf0b5261dc8b7e7ef80d812e8b099d5c97c281e42acf23565eeb50a667935eba0e36d17a04981847ddfbc65da1ec29c21d1b3698d3a66e25c41f2d1d699ca630089f1a355a4892b5204ddcf480595d65b6234d34784a887a84701ba1fa29d409a0b7559938df53700e1dc34762bcbffc2558b0eb3e3565e653532dd8d642408133b39c788a5b6e59cf3601c2f63fb11eb29210886d976dcb4ea30e155a702c2a4000da437a5f433d0e97476e6964b7cefe16bc6da4ea4725174b0dc01396e7fed29fe468b542faf574f68cad206a789ae9cd426e612cf86c0ee951b24de2ab89e47cfb6638c83f13300ec95a196234d514f6890bad5a810d3a3080e14981bf46e1b4800f17b1a5db5acdba5d04cad9a239d75f8ec268b628e6baf3b4febda4e616cabae5331f1f34eeb5b33ca2c7191c1a9996659d067e6d80edd0e9e96a743be1dbf249f35eb04429c6146da88cbe7a1b93b76d4ef279b0c0921abddda068a5b72035971f983d004c77b44c02e7c956037c3ffeecc6144df55026f7917159c070cc6e3a83f21ab4bd34a193e7c127a3cdeb4f445ea2d2b4c6d22159918421e3daf162793521e66c087a195f0352b625d54f4297f35e2166b68959c0628b17d3e7a24e9dc8cdc81446453ad3f530f02719de995d854abae2ed1d125e6e1d73325b8f4fa12f49f1fd8e809c216d4c3da0848b4afea36df2d7dec4abbe5771febddf3d76a99101cbacf2ccf5c6cb7e4d53a1a93ee5d0e961ca30a2e8920338cb9da50308c69450a26bcf3c57072590eba1e387b56673464d8b341ede562a84e0ebd50166e6c75915e932011f4b084c6e240000345907c1a6009bdc1bbf1cbda78d856ef594f8cc7072be41c0a5c77bfcff683904606743ef9cec9c1d1bdf60a1d78cd4f64396040df148bbaec7e4ba3477dba66541e0f117ded3ea510a308df12f43e721aa8cf058f301a3c7a1b2eeead7062825dac3bd9b6add241b1388d75b57dc2ae87a7646ce30847ad0bb7c21883d2b988d8dd32db41b67741d111536b123dbb55623b8f3a38a19efdf089d203c26c56c17bd399c153fa09d96f7919a767da05ecfc45ee7ab006f253214230e40fcd49baa1a93d926e3f8ff8c095cb27d20f38611f428cadfd5c0bc4f09fc7bd2b46ae87169f38dbcb15521efa4ead019d01ddeedee2fb2597e99fd79f7b85f59f5e25e0c134148665019b3e268cdc79350d981104b0aac9d01cd563a1f89f55fe065e5fdb7fcaff5572db2f6bf626c6113ca231e387f8777dd519fd9c0e3f97dbc712339944a15728dde19a5973259f51652cdef589f903541a5e858fa97ee080dc2fb556f9c06a118851b61a5411b94a1f83cbf457300bee7e191701efb512d5fd41b28d4418b94c381ab71622dd5e1f80a99d2107feee27150090805d23cda7e0f2bfab4c68ba76a5d3a48708dbf03161727e54cde1f091ebab9fc994948bf4bcce3f6c223804d618ac8e694a03be1279e223972e85ced6d2832d282394dda96ff8ce3963fe3adcdf2d21bbe2670ad2e44ba8aa1b3e48a4b31f2425df127719e5c68dd915b218a384245bcd068b61d393258089e140df5591c0f79aee71b1b34f91866e0356c77cda3b6e83d57559305e46dab92079f1bc59384b91b4f4e0d449a8089917ecd12acfc30f50444c3e453bdd70a01ed5ffea48efe64aee3a17df6178626f61a4691d11dc0a774b73e7c8d7cb78f4e3c0d785f5a46c128203e1bfcdbfd9c2689629caa84ffad507f9d29ba34cb5fbed94e7cdd7f2f72561d614cbc9e6fdbb20297cdb55ca2133892c46c1d6630d586a51f7ea90e24dcfb5f7797093e3c02a80a7a89e642d5cd8570a59f9c75b55e6d09f1b1d2db5a8462b629780dbf2bb00da09c7855e14643e8b8ea71b54c56b09b8ae36ec6bcd2dbb9de6396739b5b77c33dc9232be8c8e9d3f767a511fd2b2c3b780621fa5e745adfdfa8b3f1d4dd729c773bf0ee58a919d660643b0eba0b0c8fab1441378af3bfe4b92a0afeed55d79f1fc35071e68228a4ec691f2b22876eb844d84baca97627ae639db9c7b2caea4b4954b018577167327576f1567727d231a3b7475f2758df316a171fe173796e8bfe3264a511500524948151e61ff9361cad003fee4a5ebf904afc599bdd6e5fa9d44bdb5bf625c7a4af13789f8a8ec77b4338d8729eb59daa279ad22f18bb9f718d463803c56fc91d16f3198f46fd8275a9c9626b78b3f3c8d79d0473b89e8a9ff89db5327d4dbdb138982182a7923c30fb820ec95eea4b1625926880e1460b7726324ecb0105426978e179ad9a80a856e347e7dee5e561331bb6b372f5f3ee50bcc667abc34409fa1ac1d052140e4f5bf865a919202b2b52233afb3b9a9ea14b7258e1340aa5b2e65566594eb977f78a83a90f826329df19cc5d077b93ff19cad9cf108df16547906580d7ec1fba68ff593fadcc28d11f4e4d91abeb6ede08079d1a84eb1510953787fd1c034f1e0b762a19f7f82acb6c5472a2c6eb66a98bb4e9c0ad3c1e3f6304542e501772e76f4c09d2f06a5a5bd3ab462d098f25b184e2c1d509f632462954e8a3284ee7a70adb7e06a692498797ea5b31f0f48de2240bd74573e76a250473650158383e175d63ed757a3462f0a3da138455c0f282453ec7c8386b6b7122deda91b0cfb0b6cdb196a5db5cf0dd00a2e00febb7ea9c29b3d16c2d2ab3b26ad1d8bb5329275361f7416d99430647a6bf2493ce907ec41bf0f871ba8a5f6413e33d94f047924a3a2c2ee11f9d06e65e9049ebdaf4aa303b3454a7d5f74a4dfcd681716f04a7c03b91d0fbc96e014b4526391872acc99256e03b492d067641a77fb3899f66f67b6eb31cdf520edfd5f54e6291fc0a5926bd2a3a7b8ade7b537059be92cde972d461cf8c346d57b245eec6a20df602e15d33b9a0b9eb47dbc18d4921378381b6f7e228990934314e1278946b07859bc75633080ee3acb8e34fab2c6bad1710edc3fed20c1733be452ab64e70bf9c36a69ec131afc9d1705a2a9553ed8c24df4ebafd8977a03ad620081c4978acc1c88a50275af7cea9a1cbbafb1696f99f31b56d11d27c33d8a6dea77a416fdc2f0bc7b2f25994f79f1690c4f9de5845157523bbf41772073a1975ab7b3876a615d18e9dc1615e7dac20a3494fd772c399747552871e7c3b85baddab80188d34e464f89510f75838a78cb20b465fe8096b86ba19ed4f45e4624e31a194cbbaafc4390498c6e10cfd145db491bc4ab5bbdfb58250b041d449fdee075b6d3cb7c50e60e88c9e3b9e9dc25fbdf9d6534779fa15bc4a5c8df84e861419fb0fdadacd23f260bfff80431ef44a42e44aff92880bd5bad3cc5e2105dcd68450a41ece31987eb97977e893b95352fea82e0a7dc0d70e1e16eaca049f342bcb2dd5db80f71b4990d39cbf5e81976d1d4a5d05eda1fba870952ca6609e61f32862a4574886ee2c14da78e818f01a42cbe21be043c8156d232515e0ce0f2b0207339e0d63ad0508f768f9bcdfab72a68b978956ca2675c6885b4e580639d99dfda3eb30e75e7b84109f05588ba966396c477d58d3e15d0cb8598c5164f17caed459cb6af2b69ae94ad609e5c1006fc2b34485d15fabf656843fc4f5c22b9b1b43132205368fb089e6be8505e8aa41483b0332eead26cab520241d6f37680cc3aa02200f6cb925c3a8132b97d72554fc55c07bc3637933196dce721b60952dd41f3733ac908e9364fb78fe07d9ace45829f4a962b09c1a0b521b48041c00110697ec6fd01873c2b86c51cf8b84f0e610ec5877f7130479d24173fc35c892b2e67f95dfc90d733cc3fea49d3a8a0d574442d38f10046097dcef12ac85004cae606d82318ba0dffebc0ce456c4aa9f7f862c9c868b99878d54c2f5f1715d1a8293afa7e102038bef0016b0b64626afdba457f8ba812a868f30f12271828c635044e1e789ed3502ec25beabb2214804080c72cd3723b0082cbda53fee7cecfb19e46e2e7cfc77757d85f446a022726f4b3e6493eb95c9d00425dc6ddc01406e641ef4bc1cc022928bc34a311c76a8def4becff1620819d73fdfdc9663707c3a74859eea8b367228b338b134b07e1974f2e165db81e968704415b4acb9d350d79bebb396306028befc0397f157e7a2de5fceff6e3fb74a12887f03c8dfc7d90b04ff0bfc3251c436f6da9141f33f53bddcf5cbc99471511848f796cb02bf4067e3db95e6f15d429cde515567fb3f3f539eac099c8cae4b77ee1cd2f6af5b63decb4bb401770783b4d11d275eb54ff2f5879fde0cadcfa3fe346095435617e587a20307fb4f020818b2a40a6a0b8a72a7a61b27fcc8ccb54a70104ad38c813074060f4010da9bd0b51024269ffccd275fa1a47cf7844622ec3b05e1429ea65c4b0c48e250c4d2f3445415c4e2c668aba7a8d0667215efa1809e441cd7828067248dc8189a5c55bfb3c18ab6e67b2471ebfc27c924bbebe1697e3877762972aab58f36f588e1b87818f92ad339b1a27d921fd7efe684de87f3741d28b5618e4faea20ad0207dac716fd631922e60b6ed2d085ac086bf96cbf85064a9035c53d48191fc2cfe762500e47c436f94d2dc6c24bf0cd03e48a2f95da8316c9d6c173f50593698786da5210d305a6ea182344b4aefb7a42bf88b0bfc87129023947de2a5db0734bdd5ba42e0c13204337ee1243ccce4d7960b53639ff4a2b6b7f00bd62007149e588768acb4067cf5a0983621b0fb32abc79c74225d0ad219171059e8a9f3514c5df987d212ed52b59789c45637f063419cd2ee5883744637366452cbfbec89b8ef604af28da55cefcff8cb856f31ff964fbd0c5deb7166caa46268208ad06a55462033605fee737e18989ce1f5f4f4c9e01daa887c3ed698b03af211e1b014930ba6a77013b6bf4e442b0a6d446d71fb32299684b14eb2c7f69fddf061b3a6444bbd31be7f310298598276c7c762f7d7aee7de9544fa31f0296723b3070f72a2019f7161f6603f23c3850ef69f1e59a4d82fb7b8aa8c33234d695b3f504afab3d77dbcc102d618548462e83bbe9aa6d1c92f27d38ad757fe07f3be48071861cbc9f44df042f0490ab1f62f5f74cc10b02b06d3e09bd0d873a4fcfc15ecfbaf3423ce2029f37b3131ce67024e7048d25df92c9d86067282960caf6e4cf83bf75f909fdb060b277fb143c0d6f97216148680bc1594639eef307b5129408b7f711071ea8ec26e0f9705c67289c8c22f4c62da8d43209c65cfb61dbef5e8ee3dd6458db210eedc9202b85e18e599b9b21686a8fb47280f57d296d1c5932efa0d850c5787e84a453b0599431a10c8ec897ccaff379e9a3db7a878c2cb2c2b57fd587fb96660f78f6fce6aa1cbe4b5d3deff5927df2764d51489f58552d4bc99a9ee7a2184a1268edb1f618403578947aa0a81736d49b51266801cb0d73769ccbac6a447ee300c50ce46ecd1e35fe30814e8a0136ceeaa98735de776c9367fb8aa65891ed028e010f53e7af5d8484604a49fdb2caed91db0060c55c54c4aa72a787d8f33b46f7d473977b514eed3ab18dd138d6be4027bfbaede36a14e97f70086b56c0de968ca9bdf9390c9b272d93bbe2a38ade50deccc4129af16205b33bb137baa5c625f550dee1a673fe2142dd8517e"}], 0x13c8}, 0x2}, {{&(0x7f00000005c0)=@in={0x2, 0x4, @loopback}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)="6b46a28e9d4a0360faa3d5c964e5d4bbac05a9fbac3a9b9857dfc2eb3398fe89b036c0105fad221f4bc7389c63eedd3565077ea493dcc666e7720affcf503a1a9462cd208fbf19290ba521a3b808527541a3150161f3b93cedee563ea42bc8e614fed99e279ffecbc392758c2684750681be6f54f49767f37bb7e94085cde40bd897216c84c0d69d124f3eb8d588d26d44198ce351189890ff587758e970dbf4c85a90b8ad880941d04946bf5b88f9549f387ea9d337dbc37aa8dd81b9d5446c45b8902dd0ad0bc41137e073e0", 0xcd}, {&(0x7f0000000740)="7353388dc5c75fd4ebf24d06cd0f0167fd72f816186fcb7c8d7074d6f9e866c88f842716ae2e0d69d0b10f11f38316bbe3d40cfaf3aa57f79ac8ebc3fc875173bd9cc2f3b7ded582d10a15bf582654e353b2cc1c8574fccae5bab9502e5334635966537f06479b5ff59155ebad52cb6f381d65978a2d96787d6e1b0646f75f91ed2b3492b4beba26ae17fda98c034e8e7adae630112ae042b9b8", 0x9a}, {&(0x7f0000000800)="3f68808f8cc1a5cb52f7fc24434bdbec1e13e4d5eb603b38aa6a46f2d4dec967e9a3f895cd1c74414159808c8c71c25afc17ae8da69e8f3ada5f439b81cbe4a29e824174e50b68ef1654c308759135ef67d8c89a8b096209b63fefac1abc4970646db8c92c2f59644f66b6299a55b09cc1daf9d8ee4810d50bcc0474c61efce0eabf087453384561c09943f91da42945762f9f3f459915e95947ea7c5d1cf4146e7ec5991a765b91eaaaddac07d6d42cc62230064e657466911993ac0ab7fbcd44f2950d02c8ec77b8300f468f161baf8360227ec0a635943320edde68", 0xdd}, {&(0x7f0000000900)="40b5ef39713a167c6ab4d8e284540df41cc5cbd88fbad1dcb71eb4ca84e1618f60bffb9324d6926bacc338217ca42126dcc819b6509d2052ed7242c35ddfafcaca5378eb5490f418ff1152b9fdd3ae19a103385b62eeab335b6a6525ae3029cbac715851a3a70083f3164d32f2c070106a8596404d843308eee218567d02b8b9646e5a870adffef970a9baa6965a4117546f464feb99b31a3aed780668532a396f2f1f1364d299286d9ccb5ceb1e086cbcde8863050be5cd6a016a8d40ddffb13fcbcfd7beee6c4dc51dc1935adfd5c958dac47d294746089daebc148c7ab79e306096843fdb2a3cc6660485fa11850aceacf0080519e1", 0xf7}, {&(0x7f0000000a00)="be80ba650f04154cf0a7a6d65463a19cf09eee7a9c550dfc99c4456b2dc0d3614ea1cd475195459083679b8372afb239f0bedf4339", 0x35}], 0x5}, 0x4}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ac0)="a8f2dbccd2755a3f227f09cfa368ee4d68d418488c0295398c9651ec1a22ae778ec0d4031aa67833f0638ff5a36aed81197c2357bc2d1a3aec3238d3b82a6436d00620809daf78eb142301f24f85ffea065ba259efd6cd494345e74618a864b79c8f8560c22aba4d05146b5fdbf574ba7a05772aad2650", 0x77}, {&(0x7f0000000b40)="b1f40d7488b1384c27d0c1a7effe526d6f6dfbfc222e0ae01e76cd678907665be021f7238cb4cadc50a34f393711a4f1ac83ab966f54d856693d177979293984cd4fb03608cadacba4f6f16fcad72043404b7aa1f5862edc25e4ab8633b58b3541bbc0aeaa8c194ebae28e0bd4d295b33aa0fc176bb10e5578a27317b77697d1cd10e903c946e6fa76da117d7a785115774db8143877bd3708f77b56d57dbee2253e64d688dc2cd07dea3fcdb78572fdd0676885d6875a1315e1f7376b430c801d61d25a88", 0xc5}, {&(0x7f0000000c40)="5d85e61cec15ce1108cb3f65ed9d584caa42a67a7891a164c022453df842ad633b5223b92a453497d6db5e18bab77099623479632ef3a9670217933660d9e02835a0f65998a96f606db178018bd5e32a0c97e02b2c863ea0f1a275e9de3a8487e2d62f32d5e38e703bdf1a68cd475b613691baa4a97d60908a609de684e85a40a9947786a8983d9e5767781ed3d326c6e9ac63ad4e523a254f2618e4a3", 0x9d}, {&(0x7f0000000d00)="ba2495eb52038c4a24ae0885cc6c20732e90abe7e59850bffa81a99ac627c59ad02f41a3784dfad6acf74caf69cecce00cfbe5e0296b80572e58a9fb49f6f8789d18fb91a2c52464b97aa20673787b1a4b193f4dc95149b869fd273ce62429285a66773cc7efaba8048f1184947960", 0x6f}, {&(0x7f0000000d80)="0dc960ffc32e5264d2a7dc968f33187db700b99a11aa34638a348b6016c6acc754b9f3b6dc8583f1fe0c8f4878449c7ddaf2971f57395da68281b87a55037ff2ce109384dca83426dcdd375bdb03abaa47591740a94092412874d3e59627e0d1adfc7b192976b653877f1f69d6e1c1f8bc75f2ae91ccef655511a0feedd16b56bbc7a4665eef9364db00cf0b204e97aa5352aba1c0a993", 0x97}, {&(0x7f0000000e40)="12ad4032e5878c1ff3b85e6d6b1cd1953a964870167ec9e2f88a89fd42a61818ee9e7d2fd8e7a8bacdb2d2c7265d2e547a449970d7fe6aafb74a", 0x3a}], 0x6}}], 0x3, 0x0) r2 = syz_open_dev$media(&(0x7f00000044c0)='/dev/media#\x00', 0x100000001, 0x200000) accept$inet(r2, &(0x7f0000004500)={0x2, 0x0, @initdev}, &(0x7f0000004540)=0x10) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000004480)='/dev/vfio/vfio\x00', 0x10000, 0x0) ioctl$TIOCNOTTY(r3, 0x5422) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000fc0)='/proc/capi/capi20\x00', 0x2800, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000004440)=0x9) 19:47:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x240080, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000240)={0x0, r1}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="000800000000000002004e20ac1e000100000000000000000000000000001fcb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002004e222c1414180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000051e532a666aa62d11e86422cd8b90745e7b06df6bbe4b3564cc96786b85e0ace0075f2262ecb1f05f92885f2318f07a5218fbbf57dbaa0c13a0b1bd529285db125f57c53ca02f9e83b8a96bda448abf058cc1b1dcd34a09297514f18de4c8cb7b0f53e3daa1d312851622b22e452995d9a8c30b1ad8823310d0466f7d5aa01341b07d7cb1a014a7b6fe371eb0c04ee6b9cd9afb7ea8f849156eaa15a1210d4ef2b6f6ac83de3294a59c392279638d97421a44968f0ebc2ca50b87438239d5371b554b23e46588c1dc9514852b18db95e47bfecb646dcaf02147154c39d77839c2edac4cfec4435a64776053d637f468f4f47be57a93b764985dcde8a68ca"], 0x110) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000500)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, r0}) munlockall() fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) sched_setparam(r3, &(0x7f0000000200)=0xe3) write$P9_RMKDIR(r0, &(0x7f0000000100)={0x7, 0x49, 0x1, {0x4f, 0x4, 0x2}}, 0x258) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000140)=0x4113) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={r2, 0x80000, r0}) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x14}, @empty}, 0x8) shmget(0x2, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) r4 = shmget(0x1, 0x3000, 0x54000080, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r4, 0xe, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0xa0) [ 2443.352518] FAULT_INJECTION: forcing a failure. [ 2443.352518] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2443.374656] CPU: 1 PID: 17653 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2443.381959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2443.391316] Call Trace: [ 2443.393931] dump_stack+0x172/0x1f0 [ 2443.397577] should_fail.cold+0xa/0x1b [ 2443.401487] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2443.406598] ? ___might_sleep+0x163/0x280 [ 2443.410766] should_fail_alloc_page+0x50/0x60 [ 2443.415273] __alloc_pages_nodemask+0x1a1/0x710 [ 2443.419947] ? __lock_is_held+0xb6/0x140 [ 2443.424017] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2443.429036] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2443.434580] ? find_next_bit+0x107/0x130 [ 2443.438652] ? __cpu_to_node+0x7e/0xa0 [ 2443.442556] ? blk_mq_hw_queue_to_node+0xf1/0x140 [ 2443.447409] blk_mq_alloc_rqs+0x223/0x7f0 [ 2443.451570] ? __kmalloc_node+0x4e/0x70 [ 2443.455559] blk_mq_init_sched+0x266/0x750 [ 2443.459836] elevator_init_mq+0xcd/0x160 [ 2443.464180] blk_mq_init_allocated_queue+0x1136/0x1570 [ 2443.469495] blk_mq_init_queue+0x62/0xb0 [ 2443.473566] loop_add+0x2dd/0x8d0 [ 2443.477027] ? idr_find+0x47/0x60 [ 2443.480488] loop_control_ioctl+0x165/0x360 [ 2443.484813] ? loop_add+0x8d0/0x8d0 [ 2443.488451] ? __might_sleep+0x95/0x190 [ 2443.492430] ? loop_add+0x8d0/0x8d0 [ 2443.496068] do_vfs_ioctl+0xd6e/0x1390 [ 2443.499964] ? selinux_file_ioctl+0x46f/0x5e0 [ 2443.504462] ? selinux_file_ioctl+0x125/0x5e0 [ 2443.508989] ? ioctl_preallocate+0x210/0x210 [ 2443.513402] ? selinux_file_mprotect+0x620/0x620 [ 2443.518167] ? iterate_fd+0x360/0x360 [ 2443.521972] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2443.527515] ? fput+0x128/0x1a0 [ 2443.530801] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2443.536357] ? security_file_ioctl+0x93/0xc0 [ 2443.540771] ksys_ioctl+0xab/0xd0 [ 2443.544232] __x64_sys_ioctl+0x73/0xb0 [ 2443.548128] do_syscall_64+0x103/0x610 [ 2443.552027] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2443.557221] RIP: 0033:0x457e39 [ 2443.560447] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2443.579350] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2443.587060] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2443.594335] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2443.601603] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2443.608869] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2443.616137] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:54 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x6000000, 0x0, 0x0, 0x0) 19:47:54 executing program 0 (fault-call:7 fault-nth:43): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:47:54 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x7000000, 0x0, 0x0, 0x0) [ 2444.211347] FAULT_INJECTION: forcing a failure. [ 2444.211347] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2444.225631] CPU: 0 PID: 17678 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2444.232944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2444.242301] Call Trace: [ 2444.244907] dump_stack+0x172/0x1f0 [ 2444.248957] should_fail.cold+0xa/0x1b [ 2444.252866] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2444.257993] ? ___might_sleep+0x163/0x280 [ 2444.262168] should_fail_alloc_page+0x50/0x60 [ 2444.266671] __alloc_pages_nodemask+0x1a1/0x710 [ 2444.271353] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2444.276382] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2444.281931] ? find_next_bit+0x107/0x130 [ 2444.286008] ? __cpu_to_node+0x7e/0xa0 [ 2444.289909] ? memset+0x32/0x40 [ 2444.293208] blk_mq_alloc_rqs+0x223/0x7f0 [ 2444.297384] blk_mq_init_sched+0x266/0x750 [ 2444.301644] elevator_init_mq+0xcd/0x160 [ 2444.305721] blk_mq_init_allocated_queue+0x1136/0x1570 [ 2444.311026] blk_mq_init_queue+0x62/0xb0 [ 2444.315103] loop_add+0x2dd/0x8d0 [ 2444.318571] ? idr_find+0x47/0x60 [ 2444.322035] loop_control_ioctl+0x165/0x360 [ 2444.326370] ? loop_add+0x8d0/0x8d0 [ 2444.330012] ? __might_sleep+0x95/0x190 [ 2444.333996] ? loop_add+0x8d0/0x8d0 [ 2444.337639] do_vfs_ioctl+0xd6e/0x1390 [ 2444.341541] ? selinux_file_ioctl+0x46f/0x5e0 [ 2444.346050] ? selinux_file_ioctl+0x125/0x5e0 [ 2444.350553] ? ioctl_preallocate+0x210/0x210 [ 2444.355126] ? selinux_file_mprotect+0x620/0x620 [ 2444.359900] ? iterate_fd+0x360/0x360 [ 2444.363710] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2444.369260] ? fput+0x128/0x1a0 [ 2444.372558] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2444.378106] ? security_file_ioctl+0x93/0xc0 [ 2444.382526] ksys_ioctl+0xab/0xd0 [ 2444.385998] __x64_sys_ioctl+0x73/0xb0 [ 2444.389899] do_syscall_64+0x103/0x610 [ 2444.393803] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2444.399009] RIP: 0033:0x457e39 [ 2444.402209] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2444.421119] RSP: 002b:00007fc45d3b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2444.428842] RAX: ffffffffffffffda RBX: 00007fc45d3b7c90 RCX: 0000000000457e39 [ 2444.436115] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2444.443393] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 2444.450668] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3b86d4 [ 2444.457941] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:57 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x30c]}}, 0xfffffea9) 19:47:57 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='/dev/snd/controlC#\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0x7f}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23}, 0x1c) linkat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x0, 0x400) listen(r1, 0x18) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setxattr$security_smack_transmute(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2) r3 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:47:57 executing program 3: syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x200, 0x12180) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fchmod(r0, 0x40) shmctl$SHM_INFO(0x0, 0xe, 0x0) 19:47:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) socket$can_raw(0x1d, 0x3, 0x1) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0}]) 19:47:57 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x7000080, 0x0, 0x0, 0x0) 19:47:57 executing program 0 (fault-call:7 fault-nth:44): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:47:57 executing program 2: pipe(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000040), 0x3a3728, 0x0, 0x0, 0xffffffffffffffbf) 19:47:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) 19:47:57 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x8000080, 0x0, 0x0, 0x0) [ 2446.644544] FAULT_INJECTION: forcing a failure. [ 2446.644544] name failslab, interval 1, probability 0, space 0, times 0 [ 2446.725808] CPU: 1 PID: 17699 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2446.733161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2446.742560] Call Trace: [ 2446.745185] dump_stack+0x172/0x1f0 [ 2446.748837] should_fail.cold+0xa/0x1b [ 2446.752747] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2446.757878] ? lock_downgrade+0x810/0x810 [ 2446.762044] ? ___might_sleep+0x163/0x280 [ 2446.766212] __should_failslab+0x121/0x190 [ 2446.770467] should_failslab+0x9/0x14 [ 2446.774279] kmem_cache_alloc_node_trace+0x270/0x720 [ 2446.779391] ? memset+0x32/0x40 [ 2446.782692] ? loop_init_request+0x25/0xb0 [ 2446.786948] elevator_alloc+0x7d/0x170 [ 2446.790866] dd_init_queue+0x25/0x440 [ 2446.794684] blk_mq_init_sched+0x3a2/0x750 [ 2446.798943] elevator_init_mq+0xcd/0x160 [ 2446.803025] blk_mq_init_allocated_queue+0x1136/0x1570 [ 2446.808331] blk_mq_init_queue+0x62/0xb0 [ 2446.812423] loop_add+0x2dd/0x8d0 [ 2446.815900] ? idr_find+0x47/0x60 [ 2446.819369] loop_control_ioctl+0x165/0x360 [ 2446.823728] ? loop_add+0x8d0/0x8d0 [ 2446.827406] ? __might_sleep+0x95/0x190 [ 2446.831401] ? loop_add+0x8d0/0x8d0 [ 2446.835059] do_vfs_ioctl+0xd6e/0x1390 [ 2446.838965] ? selinux_file_ioctl+0x46f/0x5e0 [ 2446.843514] ? selinux_file_ioctl+0x125/0x5e0 [ 2446.848023] ? ioctl_preallocate+0x210/0x210 [ 2446.852456] ? selinux_file_mprotect+0x620/0x620 [ 2446.857234] ? iterate_fd+0x360/0x360 [ 2446.861050] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2446.866600] ? fput+0x128/0x1a0 [ 2446.869908] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2446.875459] ? security_file_ioctl+0x93/0xc0 [ 2446.879884] ksys_ioctl+0xab/0xd0 [ 2446.883361] __x64_sys_ioctl+0x73/0xb0 [ 2446.887267] do_syscall_64+0x103/0x610 [ 2446.891176] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2446.896376] RIP: 0033:0x457e39 [ 2446.899579] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2446.918486] RSP: 002b:00007fc45d3b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2446.926227] RAX: ffffffffffffffda RBX: 00007fc45d3b7c90 RCX: 0000000000457e39 [ 2446.933502] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2446.940805] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 2446.948079] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3b86d4 [ 2446.955359] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:47:58 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xffffffff, 0x2) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000080)=""/52) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = fcntl$getown(r1, 0x9) ptrace$setopts(0x4200, r2, 0x4, 0x11) shmctl$SHM_INFO(0x0, 0xe, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) 19:47:58 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x9000000, 0x0, 0x0, 0x0) 19:47:58 executing program 0 (fault-call:7 fault-nth:45): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2447.611182] FAULT_INJECTION: forcing a failure. [ 2447.611182] name failslab, interval 1, probability 0, space 0, times 0 [ 2447.623154] CPU: 0 PID: 17724 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2447.630445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2447.639806] Call Trace: [ 2447.642428] dump_stack+0x172/0x1f0 [ 2447.646075] should_fail.cold+0xa/0x1b [ 2447.649971] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2447.655084] ? lock_downgrade+0x810/0x810 [ 2447.659240] ? ___might_sleep+0x163/0x280 [ 2447.663405] __should_failslab+0x121/0x190 [ 2447.667651] should_failslab+0x9/0x14 [ 2447.671463] kmem_cache_alloc_node_trace+0x270/0x720 [ 2447.676580] ? __mutex_init+0xef/0x130 [ 2447.680486] dd_init_queue+0x9c/0x440 [ 2447.684299] blk_mq_init_sched+0x3a2/0x750 [ 2447.688553] elevator_init_mq+0xcd/0x160 [ 2447.692637] blk_mq_init_allocated_queue+0x1136/0x1570 [ 2447.697939] blk_mq_init_queue+0x62/0xb0 [ 2447.702014] loop_add+0x2dd/0x8d0 [ 2447.705481] ? idr_find+0x47/0x60 [ 2447.708943] loop_control_ioctl+0x165/0x360 [ 2447.713446] ? loop_add+0x8d0/0x8d0 [ 2447.717086] ? __might_sleep+0x95/0x190 [ 2447.721073] ? loop_add+0x8d0/0x8d0 [ 2447.724710] do_vfs_ioctl+0xd6e/0x1390 [ 2447.728623] ? selinux_file_ioctl+0x46f/0x5e0 [ 2447.733129] ? selinux_file_ioctl+0x125/0x5e0 [ 2447.737637] ? ioctl_preallocate+0x210/0x210 [ 2447.742059] ? selinux_file_mprotect+0x620/0x620 [ 2447.746835] ? iterate_fd+0x360/0x360 [ 2447.750645] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2447.756222] ? fput+0x128/0x1a0 [ 2447.759526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2447.765073] ? security_file_ioctl+0x93/0xc0 [ 2447.769493] ksys_ioctl+0xab/0xd0 [ 2447.772960] __x64_sys_ioctl+0x73/0xb0 [ 2447.776871] do_syscall_64+0x103/0x610 [ 2447.780778] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2447.785977] RIP: 0033:0x457e39 [ 2447.789179] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2447.808087] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2447.815804] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2447.823080] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2447.830358] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2447.834913] net_ratelimit: 24 callbacks suppressed [ 2447.834921] protocol 88fb is buggy, dev hsr_slave_0 [ 2447.837637] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2447.837648] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 [ 2447.842642] protocol 88fb is buggy, dev hsr_slave_1 [ 2448.794890] protocol 88fb is buggy, dev hsr_slave_0 [ 2448.799982] protocol 88fb is buggy, dev hsr_slave_1 [ 2448.805138] protocol 88fb is buggy, dev hsr_slave_0 [ 2448.810218] protocol 88fb is buggy, dev hsr_slave_1 [ 2449.114967] protocol 88fb is buggy, dev hsr_slave_0 [ 2449.120161] protocol 88fb is buggy, dev hsr_slave_1 [ 2449.125355] protocol 88fb is buggy, dev hsr_slave_0 [ 2449.130413] protocol 88fb is buggy, dev hsr_slave_1 19:48:00 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x500]}}, 0xfffffea9) 19:48:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x60) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x1, 0x10001, 0x2}) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000100)={0x200, {{0xa, 0x4e20, 0x2, @empty, 0xfffffffffffffffb}}}, 0x88) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:48:00 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000200)=""/178, 0xb2}, {0x0}], 0x3, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 19:48:00 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmget(0x1, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) shmget(0x3, 0x3000, 0x44, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffc000/0x1000)=nil) shmget$private(0x0, 0x4000, 0x80a, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0xff, 0x401, 0x769ced67, 0xaa2, 0x0, 0x3f, 0x2000, 0x8, 0x2, 0x2, 0x6, 0x67a782d, 0x0, 0x2, 0x3, 0x2, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0x2, 0x2, 0x1, 0x5, 0x1, 0x4, 0x10000, 0x8, 0x3, 0x3, 0x1, 0x1, 0x0, 0x800, 0x0, 0x1000, 0x1, @perf_config_ext={0x20, 0x80}, 0x2006, 0x3, 0x7ff, 0x2, 0x3, 0x1, 0xba4}, r2, 0xe, r0, 0xa) shmctl$SHM_INFO(r1, 0xe, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80000, 0x0) shmget$private(0x0, 0x3000, 0x78000008, &(0x7f0000ffb000/0x3000)=nil) mq_timedreceive(r3, &(0x7f0000000040)=""/137, 0x89, 0x100000000, &(0x7f0000000100)={0x77359400}) 19:48:00 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xa000000, 0x0, 0x0, 0x0) 19:48:00 executing program 0 (fault-call:7 fault-nth:46): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:48:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80001, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000100)={0x5, 0x7ba, 0x40, 0x0, 0x100000000, 0x1, 0x2, 0x6, 0x3f, 0x10800, 0x1000, 0x5, 0x0, 0x9, 0x1, 0x20, 0x1, 0x3}) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000001040)={'filter\x00', 0x1000, "0200dbb9b3904ad00c71f67cad346d70049dfca9975b80d2ecd33ef3c30a43932507c20117126bb125257653a2dc36b18c9ead8b8cd27cacef395f5d871d1daa14285df9bd12b6f59dd17b35e24ca304acb495848431f94b95306fbae991e849461a68600ac3bf02fe51df5afc63dacded0c0a81cd47f598cdbd7e8e1e3534f15022fb8aafd49fb6f02ef40ac0d4743a660453304084a616407244d74cbcfbf17de89cc2b1b6e1d82dd0edc0812bd4f3737d08e60bbf15f5b712347a2cf8e0edd406a508b378b978be471521f1260a7ab3f22d9bee194a7d7f1712b8b2f9e48d099f4c0d48eea22e718d575ac29b024909f6a14a40cacd14ce1127aa9041e43ce6be3a8b02241673908bb995356e61a61d1bee7a37e3683279c63ea84e745acb9e5918404208337e3c9c8a89a284aded8dc48a3ad5356fb551546ba54e08fcb0dad9313952c2cf56d1025abf620b7783c0a71552735ede8473cb84daf65a049197877f0ff85a39ed601d7222cf240df4c15139022fa3ed53d68bcf57d7334d7208ff1dc2b360f7e12edafce441cb23216724b6e6e73efb336b366498a9356fa33b71275848f40c0c24fb98a66e31306f7d47632c6937fd32fdedbba666eb8ead729435892fdc3819808f55e42b2d4af559163d350bec8df4d4a9b0b038860a8d1669ddaec1128bac2ed287267f7e9af0f37076ff4375d51905f166429c75e60b7d0a6c387f63d3e3ce3014a9d3298e6ac2859bd1838126e89503eb13b049cb4233b91c36595ea7b7a0cb1a49f978a3f947a081b84bc5256e2af69e7cf8a16b687b2ac42122627861e942863f1e6f1d26b0cf93e53947887817dcaecbdd610f79839b61c9e2be2feaf56a48310e64ca092f9430166b792c26c09f11352c12b732fb835251159a5413784ddf71330ee5d911b58baa942f0de71b8e3784025f763849c41d73f99d339805e76b46e44d391c58d0f5ab8a423fa23d94b58237577b768ae6a86def283afb84dc47b80940b97bba7d1502d0247506d7ff1d731a601e9a1754a1ed0aaaa37e23c9b47085acc170926a991e336828cb1e72aad4e37b6f18d9903227b5244e02eaf3b2e76d70685a8985f077f894588bf503ab41a1b3166370678e4e493df9e52faa24dd39bbc47f3461540b50a3dc26ceb283cc43dd06ad9993adcaa7eef497fc82506117fbea755f1c7504ebf077477311ec168002ac03e4eb5b950950ba1804d171e33a3f072c95721698ac4af1a9b0341296a66930696247d4721f9ff869c24b28b3b9d90044f785be27878550a568e4f32e7a30bec0b343efdd6c6486dfea764d998f79e236df5f1791d2d721a66489c162a1e9dfd1a3d8e0ee06c32f9fc0afb685a6444b3dc7c4e9d710dd7c118753331feb57b3c17ad83fc962c805a3e1d4e35e3f3e8186bfce3a882b05de0fb487615ea6f54ffce2b9c3e11240754dc6b718180613eaed5f3cbc9c5fb3574bf0a59919d3fb1edbefbe0f1f5430aed91a4ae8d76eeba96f79ad9c993bd731ce8fe05b5c644348dae81210161ddb4f0af956d9024adecdf91e0f92f0407c07f98962c5edd6fe07687fcb55f467bfd3457788bac0400e6d6e8980bcde172f38501cefe4222d06813be6b2a96ff753029174ca7e0c0f4a637709e4002038450d236061c8215425427b6fbba6e08affe639e8ee23119d97566f9047282925f5dd9dbb98412afb9ff366d24128f95001c11711adbbd0c76cf20f65d3ef4b6833e9f03ed1e5e3975d7747c01a16fe7265f0f45f66c5672dd130c4770582d4f970b021311858e5beb576cb4bdc4234265e9ee3f620ce45abdf11a8ccd8654d2351e2b2e27c39506f818975d307aaacc599afdc27375da3598c76d85805c0e044c93786d937be02378d86c0c41b9ba744de5555974351e10825b4da458230437e46a76e7ca32bbc7dbaf6a68a513748158e7ff1ec3c4a325e3f5990ee70434d89c04ac94823c95c735671ddd517ce051b101568fb40cd1dddf285b69c3bbdf912d37ad144f897c1ea15f7fc0bb6afa80e2cdc09a5b0c2df1c3f9aa197e4c091d00146594bd505a314499b3b5aebdd3279df0ee16f2d7c7c6903cc88d8e8dad54441ab724b2444613af7d555563a460eeb619dab3b66849fbc98a26ecc7f429d83c20b58d852954098ec92e40867e3ee387f4f9a977eb2e75ea0eb552a626e140b4805036cb882702f8bb1b480acc76c1052f0a2629801df94bbbe513abcdfba8941ab372f5a5749fa0c4ef1b098ce23a8496d185abc96fd40b913458fffa4c6ad22ed09dcf8a1f7d65821969408634283f3936e2595bc31cf68a756e346ed96fc6dd96f9785551d2e7c1a484ffd90977e389a641431fa38481cc5eb8b72b109dd4ddea448579d316126cc6ec8ac51dbd562dd73271efbe1a0b80f150c9ea7ef241625666c6a9e99de23a71a6dedd82850a447bee2069545b182b724bb17caf461b1302ad1534faa82eb3eb23a8157d12847d21f3dc93053ab9d6fdf3a575a7e53f984fd0c0388d9c4ff13112a735fcc9c6afcf347fc6432d8ef5b222b309108e4151d0b33d9a9ad865106bd97535cbe16cc5f16b128894adc219a168870f82f9ff9422f74477c993c0c027f6b50bb51207a360a9df5c2841b2bd1c6f7326cc794596a9f31b3a254b3b7845e22d133cb254c06e42aab3e4dd7e801ee6efa55879466a676ea5ee52cb359de7b5e8df3b230ab4900a7f529afaaa554734e10ddd460b6be739cd33332c5cfdd89072619f5e832a276e89a38a657150112f0f8f0d0227cd05a1653da799b965f996643e7bc7ea40812a3b69dfcd837b4968ab03a62e89b6d90e2ab62099c235f8d3c8a1de604771a2b6b9e712d9c07a1daedf87a69a4a3181718d48b1a68a39a7a95e9ff69ab30022aaecfe3a4185fa1abf6ea0530cee3c447c94d9f797c732ab60d09630ae8f2f78c38b05513b152dadfa67128a1ffc13fab3bf589c341b277f150ce7ee4903da57e96f8e63931df7bcfffaded3e132bd30e5d32365a70ad0fda2ddb21a546e3f3021ee49a00f59e0caec090e63e132b50739cad1c6dd8889c819b356665da8508080eec3d7ae772aa18383d487df4dce2795bfe3f23bcf996040c1c34861ececf193032d174ebd8146c88acedc718d63c7f6e8a920efe78ac951a533b73c3b6ebf5efd285aae143ed42e054dae32a58139f98f9d3cb78f38003931b47b99a830082c1dce4ab26610eebffed93fa33e31b638208d0d253697569873fd34fcc8216403513b52bd278b9a6193cd9247fd1966f954c68c1c8c0790e98cf1256d416a2a64d5e9351fb3398e6cdd7fdc4bc181dc8e0885bd7feef051560fd4251e8d2e17c756b483561b091b248ab4cd2dd153ab2821ed2ab3844f0a5425e7a89a9101f1b0ac2650e49cbd03b0bbfe305ba64ef27dbc8922152fb5ca4011d4ffc0b7342019b25f7f98f739e25f29465065f1cb47c4f8b857a87e9f21668f38f68f72ae6806f1d825a4e8ebf8e3778e4c8df896d01ccd286842b6f37373ebb7713131eba662badd769f7ff671a906fdbcfd96a2cd654d5fe3804c0bf4bd0d3060b8f7358bb95c1a87e71cd66ce1471efa86f59f69c55f50fa97a03eb161219e37c2dd65904fdbbae27e8547b6662780ff6cc9cdc2d93108c51c232111fea00f958c887e33925324840f97d5604bfd331fbf142a78452b0672f755bc1d470eabe023bd644886752b6f8dfa0caf30ddb67e7f400eaf9500186b1d8fb2b279b4715f802df3fe88165c3eb0bd9f0e790478f496d6d57e868aa3be1827381dd446ec9cbf8b2f028d730db43742dda03152abe4fbe4a1e7df625e838ab0764eff37078f643049b4b7536c4b75a02b9f1c45532a293ca3944b3a577f3085e68ed69591d2bacd38b8be567d27b23381ef7c724fa8b3e63925714471bb0f294810350f7d5b555e2723ac29250e6abafd8f7881850fae771ecb4b9d4e5657708d272eb48f80e763e7326ce266afa828e7074c2ffe0fb526956c88e90caada094ea96b99debd3acb792cc0018bb6e95af74f173c5e423b0dc277b33f8fec1347981ea1f078ccc7ef1c56861365b8d918346c1c204e4f1e55739c7913724096254095232e12a336a0a401f0d062c592991a24564756b95c9994fd435ea268bab84e888b6a39e645f0f13a546fcfc37151b5a4fb5413286e4167ad1b13207da3279423b00577ba621a0c694e83e5a4ae93db9ac9b4042550b7eb61d6947e2fcfc4ba7fb503fdfdbb3b2e5430618b4c1bfd89a73ac4d5fd88f9bfa66547888257780dc2014172105fe80652d7c0b40ab2491b97397b5fd34d1095fc2c6480dd7d09dc540ea17804825cef25bd23c2e34f3369609ebcf10d897e33f3ff855ab9669b9c5af303912f41a0dd0827666f9c1ad08af7a05956dc53dd88de7a2ff51bf2e54fa44c57ad173970997bc3ddb776f8f9a48955b0eaffb25758d1a5e70e0d6917d9a59daa58012c83f5b37823f5f0d5edeba6bca41d7f7d04737d3309a58ef8b3ab18d455ecd331cacd374077e2b20080289a75be79e8fa706936655ae2c7192d6f0ca3973446e5d289fe123672ae67afd6c5016683f6fa60b9917956ff03345146455f4b03844354b6638822c33edd6ec323843df884c490a9b4eee42fa373441b6dee17619588a7fc3d2962fbbfc535283f24ad266df501dfd5b536544ecb28880ace40fab41396d54d5f98a0067d9898f8a961dba14135e13a501492f37935b23006309fabcab226f25a7cbd0cecf88b18dd32ac55158ac64e5c99116eb552e0b0072da4ac2a8b0135079f2e5fc6e074b835d1675b9e583bd50902240ee77610d33dd541c2539989c5c41c96a636502f15c59bba0d37c1e08eac74cec00a248747409b61583af621338eceb08ed9f002c25532a817d104428066d053f5f998aeca8aee7b31d816c6ff49cb13cbef4d997b3cf1e652ac696f0301948718d3b844f9e32419ba97ae72ba71ec2c819c5e85ac8cb5f4501de841f9b23a9b8de72be75e8dbe244e85c5db0e14bea790f528f906c2014fcfe6e055074059e0aee76958d834ac579887f17b1e69aaeaf2e296c351cec2765b7bff08abe1ddc86fcb38185dfc976f86dc7f9a219beb50aee0f2dcfd04ec2e18957a689c39d2ff1484eaca8c6a5f530c3d1bddae0f00a3c3a7d0ea2a2b6700f1bcc0872d99987c9b59a3347369bde5e9a88d7df8f8cbf5734250e6bf903ee2cb40879d895b1ec5fd41d2bb121966bafbbe04ca07e50c10d990852c37909777c525c3d49b6373daa37419944f1a0249d1886a70065e2e474cffae21f48b75ee3d9930f87ce657d87ce3b8e3272584f302e6922ce726f7955cf6bf6f019e00a386bf1b1bb5c4176b1545477759f26989362aeb1f8261a4ec9c1e1fc66d1d07a72ebefefc30690775b0be64359cae0648359270de674dc308584ebe3e6a3eb89341f94192e46558ae1f5438ec129cd256c9a0226290dea50ca5de9e5b9c8bf52c341786248905bb8ec3f30c60cb046671a6c091b7920f3592c449ad29ef2990bd580e0cf192d4635f7eec3fdba87b262b1488921dd6c6399efa33f2abede5356f272f89b7ce0d9bcf6ea90490ece02feaad8d7789e7f6182bb2f5cceb9854c5bbd086744326a0f66ad62c813523654543924036f8dc3a81c3a183e8d1da20815de829c44f7918823d2ec300816fd9cd4831d72306bc897cfe0edd02deb8b2df923ac4d720c96bf5c79f818df6bfacff68ee7ce05e9a74749635054809dc8caa816a3a7d6b7652c59ad634bcea415"}, &(0x7f00000000c0)=0x1024) 19:48:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) clock_adjtime(0x7, &(0x7f0000000000)={0x4, 0x8, 0x9, 0x6, 0x2, 0x89, 0x200, 0x1000, 0x1, 0x8000, 0x6, 0x1, 0xfffffffffffffffc, 0x6000000000000000, 0x1f, 0x7, 0x7fff, 0x1, 0x8, 0x2, 0x8, 0xfffffffffffffe00, 0x4, 0xdd4c, 0x76a, 0x400}) r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x5, 0x408000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, r0, 0xd, 0x3}, 0x14) accept4(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000340)=0x80, 0x80800) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000180)=0xf8, &(0x7f00000001c0)=0x4) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @bcast, @rose={'rose', 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) shmctl$SHM_INFO(0x0, 0xe, 0x0) write$P9_RWRITE(r0, &(0x7f0000000400)={0xb, 0x77, 0x2, 0xfffffffffffffff7}, 0xb) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000200)={0x8, 0x9c}) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000380)=0xfff, 0x4) socket$packet(0x11, 0x0, 0x300) syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x800, 0x181000) [ 2449.577410] FAULT_INJECTION: forcing a failure. [ 2449.577410] name failslab, interval 1, probability 0, space 0, times 0 [ 2449.636229] CPU: 1 PID: 17735 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2449.643540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2449.652909] Call Trace: [ 2449.655517] dump_stack+0x172/0x1f0 [ 2449.659175] should_fail.cold+0xa/0x1b [ 2449.663077] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2449.668184] ? lock_downgrade+0x810/0x810 [ 2449.672347] ? ___might_sleep+0x163/0x280 [ 2449.676554] __should_failslab+0x121/0x190 [ 2449.680821] should_failslab+0x9/0x14 [ 2449.684632] kmem_cache_alloc_node_trace+0x270/0x720 [ 2449.689755] __alloc_disk_node+0x70/0x420 [ 2449.693916] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2449.699463] loop_add+0x3aa/0x8d0 [ 2449.702940] ? idr_find+0x47/0x60 [ 2449.706411] loop_control_ioctl+0x165/0x360 [ 2449.710747] ? loop_add+0x8d0/0x8d0 [ 2449.714382] ? do_vfs_ioctl+0xca/0x1390 [ 2449.718363] ? __sanitizer_cov_trace_switch+0x4f/0x80 [ 2449.723564] ? loop_add+0x8d0/0x8d0 [ 2449.727224] do_vfs_ioctl+0xd6e/0x1390 [ 2449.731120] ? selinux_file_ioctl+0x46f/0x5e0 [ 2449.735619] ? selinux_file_ioctl+0x125/0x5e0 [ 2449.740116] ? ioctl_preallocate+0x210/0x210 [ 2449.744528] ? selinux_file_mprotect+0x620/0x620 [ 2449.749296] ? iterate_fd+0x360/0x360 [ 2449.753112] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2449.758651] ? fput+0x128/0x1a0 [ 2449.761940] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2449.767482] ? security_file_ioctl+0x93/0xc0 [ 2449.771896] ksys_ioctl+0xab/0xd0 [ 2449.775376] __x64_sys_ioctl+0x73/0xb0 [ 2449.779273] do_syscall_64+0x103/0x610 [ 2449.783174] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2449.788377] RIP: 0033:0x457e39 [ 2449.791565] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2449.810462] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2449.818179] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2449.825452] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2449.832723] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2449.839994] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2449.847261] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:48:00 executing program 0 (fault-call:7 fault-nth:47): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:48:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x26, "4a1f22c24cb6a32f3d1b5fce95aa033a1f9e2844937bd5c83fcfc0322cc5426588715a907ebf"}, &(0x7f0000000080)=0x2e) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r2, 0x4}, 0x8) 19:48:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmget(0x2, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmget(0x1, 0x2000, 0x100, &(0x7f0000ffd000/0x2000)=nil) shmget(0x0, 0x4000, 0x400080000000200, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget(0x0, 0x2000, 0x28, &(0x7f0000ffb000/0x2000)=nil) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0xc100, 0x0) shmctl$SHM_INFO(r0, 0xe, 0x0) 19:48:01 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xb000000, 0x0, 0x0, 0x0) [ 2450.123202] FAULT_INJECTION: forcing a failure. [ 2450.123202] name failslab, interval 1, probability 0, space 0, times 0 [ 2450.145448] CPU: 1 PID: 17761 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2450.152740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2450.162106] Call Trace: [ 2450.164713] dump_stack+0x172/0x1f0 [ 2450.168365] should_fail.cold+0xa/0x1b [ 2450.172268] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2450.177379] ? lock_downgrade+0x810/0x810 [ 2450.181540] ? ___might_sleep+0x163/0x280 [ 2450.185710] __should_failslab+0x121/0x190 [ 2450.189959] should_failslab+0x9/0x14 [ 2450.193780] kmem_cache_alloc_node_trace+0x270/0x720 [ 2450.198903] __kmalloc_node+0x3d/0x70 [ 2450.202719] disk_expand_part_tbl+0x1cf/0x3b0 [ 2450.207235] __alloc_disk_node+0x11f/0x420 [ 2450.211481] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2450.217032] loop_add+0x3aa/0x8d0 [ 2450.220497] ? idr_find+0x47/0x60 [ 2450.223963] loop_control_ioctl+0x165/0x360 [ 2450.228297] ? loop_add+0x8d0/0x8d0 [ 2450.231947] ? __might_sleep+0x95/0x190 [ 2450.235945] ? loop_add+0x8d0/0x8d0 [ 2450.239584] do_vfs_ioctl+0xd6e/0x1390 [ 2450.243483] ? selinux_file_ioctl+0x46f/0x5e0 [ 2450.247991] ? selinux_file_ioctl+0x125/0x5e0 [ 2450.252500] ? ioctl_preallocate+0x210/0x210 [ 2450.256922] ? selinux_file_mprotect+0x620/0x620 [ 2450.261714] ? iterate_fd+0x360/0x360 [ 2450.265530] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2450.271079] ? fput+0x128/0x1a0 [ 2450.274373] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2450.279923] ? security_file_ioctl+0x93/0xc0 [ 2450.284349] ksys_ioctl+0xab/0xd0 [ 2450.287818] __x64_sys_ioctl+0x73/0xb0 [ 2450.291720] do_syscall_64+0x103/0x610 [ 2450.295633] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2450.300830] RIP: 0033:0x457e39 [ 2450.304031] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2450.322942] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2450.330662] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2450.337938] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2450.345216] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2450.352490] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2450.360252] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 19:48:03 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x600]}}, 0xfffffea9) 19:48:03 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000013"]) 19:48:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x77, 0x0, [0xc0000102], [0xc1]}) 19:48:03 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000200)=@v1={0x1000000, [{0xfff, 0x4}]}, 0xc, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x7, 0x70, 0x101, 0x20, 0x8, 0xa49, 0x0, 0x4, 0x30194, 0x2, 0x1, 0x8, 0x7fffffff, 0x2, 0x20, 0x8, 0x7, 0xa, 0x3, 0x5, 0x3, 0x34a3, 0x1c7000000000, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xc6, 0x1, 0x401, 0x3, 0xb, 0x1, 0x3, 0xff, 0x4886, 0x9, 0x1, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0x110, 0x9, 0x6, 0x5, 0x28, 0x6, 0x80}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000100)='syz0\x00') ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000140)={0x8001}) 19:48:03 executing program 0 (fault-call:7 fault-nth:48): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 19:48:03 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xd000000, 0x0, 0x0, 0x0) 19:48:03 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x10001, 0xfffffffffffffbfb) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) 19:48:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = shmget(0x1, 0x3000, 0x54000010, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/28) [ 2452.687051] FAULT_INJECTION: forcing a failure. [ 2452.687051] name failslab, interval 1, probability 0, space 0, times 0 [ 2452.724989] CPU: 0 PID: 17775 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2452.732295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2452.741653] Call Trace: [ 2452.744269] dump_stack+0x172/0x1f0 [ 2452.747913] should_fail.cold+0xa/0x1b [ 2452.751823] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2452.756948] ? lock_downgrade+0x810/0x810 [ 2452.761108] ? ___might_sleep+0x163/0x280 [ 2452.765275] __should_failslab+0x121/0x190 [ 2452.769572] should_failslab+0x9/0x14 [ 2452.773397] kmem_cache_alloc_trace+0x2d1/0x760 [ 2452.778098] ? part_uevent+0x120/0x120 [ 2452.782106] rand_initialize_disk+0x40/0xc0 [ 2452.786448] __alloc_disk_node+0x23f/0x420 [ 2452.790691] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2452.796244] loop_add+0x3aa/0x8d0 [ 2452.799719] ? idr_find+0x47/0x60 [ 2452.803186] loop_control_ioctl+0x165/0x360 [ 2452.807521] ? loop_add+0x8d0/0x8d0 [ 2452.811160] ? __might_sleep+0x95/0x190 [ 2452.815168] ? loop_add+0x8d0/0x8d0 [ 2452.818808] do_vfs_ioctl+0xd6e/0x1390 [ 2452.822773] ? selinux_file_ioctl+0x46f/0x5e0 [ 2452.827301] ? selinux_file_ioctl+0x125/0x5e0 [ 2452.831810] ? ioctl_preallocate+0x210/0x210 [ 2452.836235] ? selinux_file_mprotect+0x620/0x620 [ 2452.841007] ? iterate_fd+0x360/0x360 [ 2452.844837] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2452.849611] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2452.855162] ? security_file_ioctl+0x93/0xc0 [ 2452.859582] ksys_ioctl+0xab/0xd0 [ 2452.863047] __x64_sys_ioctl+0x73/0xb0 [ 2452.866952] ? do_syscall_64+0x5b/0x610 [ 2452.870937] do_syscall_64+0x103/0x610 [ 2452.874853] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2452.880051] RIP: 0033:0x457e39 [ 2452.883268] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2452.902193] RSP: 002b:00007fc45d3f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2452.909918] RAX: ffffffffffffffda RBX: 00007fc45d3f9c90 RCX: 0000000000457e39 [ 2452.917190] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2452.924460] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2452.931733] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3fa6d4 [ 2452.939007] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 [ 2452.955687] net_ratelimit: 16 callbacks suppressed [ 2452.955712] protocol 88fb is buggy, dev hsr_slave_0 [ 2452.967294] protocol 88fb is buggy, dev hsr_slave_1 [ 2452.973562] protocol 88fb is buggy, dev hsr_slave_0 [ 2452.979334] protocol 88fb is buggy, dev hsr_slave_1 19:48:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={[{@iocharset={'iocharset', 0x3d, 'cp437'}}]}) 19:48:04 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x14000000, 0x0, 0x0, 0x0) 19:48:04 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x3fffe) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)=ANY=[]) 19:48:04 executing program 0 (fault-call:7 fault-nth:49): socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) [ 2453.184070] FAT-fs (loop2): bogus number of reserved sectors [ 2453.229557] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2453.274903] protocol 88fb is buggy, dev hsr_slave_0 [ 2453.280044] protocol 88fb is buggy, dev hsr_slave_1 [ 2453.285225] protocol 88fb is buggy, dev hsr_slave_0 [ 2453.285274] protocol 88fb is buggy, dev hsr_slave_1 [ 2453.295427] protocol 88fb is buggy, dev hsr_slave_0 [ 2453.300502] protocol 88fb is buggy, dev hsr_slave_1 [ 2453.469087] FAULT_INJECTION: forcing a failure. [ 2453.469087] name failslab, interval 1, probability 0, space 0, times 0 [ 2453.487239] CPU: 0 PID: 17801 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2453.494535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2453.503895] Call Trace: [ 2453.506503] dump_stack+0x172/0x1f0 [ 2453.510147] should_fail.cold+0xa/0x1b [ 2453.514047] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2453.519159] ? lock_downgrade+0x810/0x810 [ 2453.523321] ? ___might_sleep+0x163/0x280 [ 2453.527490] __should_failslab+0x121/0x190 [ 2453.531736] should_failslab+0x9/0x14 [ 2453.535564] kmem_cache_alloc_trace+0x2d1/0x760 [ 2453.540246] ? mark_held_locks+0x100/0x100 [ 2453.544552] device_create_groups_vargs+0x8e/0x270 [ 2453.549497] device_create_vargs+0x45/0x60 [ 2453.553744] bdi_register_va.part.0+0x38/0x740 [ 2453.558347] bdi_register+0x12a/0x140 [ 2453.562158] ? bdi_register_va+0x80/0x80 [ 2453.566251] ? enable_ptr_key_workfn+0x30/0x30 [ 2453.570897] ? trace_hardirqs_on+0x67/0x230 [ 2453.575235] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2453.580794] bdi_register_owner+0x61/0x110 [ 2453.585064] __device_add_disk+0xd68/0x1160 [ 2453.589405] ? blk_alloc_devt+0x2e0/0x2e0 [ 2453.593564] ? sprintf+0xc0/0x100 [ 2453.597028] ? scnprintf+0x140/0x140 [ 2453.600753] ? __init_waitqueue_head+0x36/0x90 [ 2453.605409] ? pm_runtime_init+0x364/0x420 [ 2453.609663] device_add_disk+0x2b/0x40 [ 2453.613565] loop_add+0x635/0x8d0 [ 2453.617035] loop_control_ioctl+0x165/0x360 [ 2453.621363] ? loop_add+0x8d0/0x8d0 [ 2453.625005] ? __might_sleep+0x95/0x190 [ 2453.628990] ? loop_add+0x8d0/0x8d0 [ 2453.632624] do_vfs_ioctl+0xd6e/0x1390 [ 2453.636523] ? selinux_file_ioctl+0x46f/0x5e0 [ 2453.641029] ? selinux_file_ioctl+0x125/0x5e0 [ 2453.645535] ? ioctl_preallocate+0x210/0x210 [ 2453.649951] ? selinux_file_mprotect+0x620/0x620 [ 2453.654721] ? iterate_fd+0x360/0x360 [ 2453.658535] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2453.664082] ? fput+0x128/0x1a0 [ 2453.667373] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2453.672919] ? security_file_ioctl+0x93/0xc0 [ 2453.677342] ksys_ioctl+0xab/0xd0 [ 2453.680808] __x64_sys_ioctl+0x73/0xb0 [ 2453.684724] do_syscall_64+0x103/0x610 [ 2453.688639] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2453.693871] RIP: 0033:0x457e39 [ 2453.697075] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2453.715986] RSP: 002b:00007fc45d3b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2453.723704] RAX: ffffffffffffffda RBX: 00007fc45d3b7c90 RCX: 0000000000457e39 [ 2453.730978] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2453.738249] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 2453.745520] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3b86d4 [ 2453.752794] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 [ 2453.768880] WARNING: CPU: 0 PID: 17801 at block/genhd.c:717 __device_add_disk+0xef6/0x1160 [ 2453.777301] Kernel panic - not syncing: panic_on_warn set ... [ 2453.783194] CPU: 0 PID: 17801 Comm: syz-executor.0 Not tainted 5.0.0-rc5+ #63 [ 2453.790461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2453.799810] Call Trace: [ 2453.802421] dump_stack+0x172/0x1f0 [ 2453.806089] ? __device_add_disk+0xe30/0x1160 [ 2453.810684] panic+0x2cb/0x65c [ 2453.813889] ? __warn_printk+0xf3/0xf3 [ 2453.817798] ? __device_add_disk+0xef6/0x1160 [ 2453.822308] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2453.827872] ? __warn.cold+0x5/0x45 [ 2453.831512] ? __device_add_disk+0xef6/0x1160 [ 2453.836016] __warn.cold+0x20/0x45 [ 2453.839570] ? __device_add_disk+0xef6/0x1160 [ 2453.844085] report_bug+0x263/0x2b0 [ 2453.847808] do_error_trap+0x11b/0x200 [ 2453.851725] do_invalid_op+0x37/0x50 [ 2453.855468] ? __device_add_disk+0xef6/0x1160 [ 2453.859975] invalid_op+0x14/0x20 [ 2453.863439] RIP: 0010:__device_add_disk+0xef6/0x1160 [ 2453.868549] Code: 80 2b 53 fe 0f 0b e9 98 fb ff ff 48 89 bd 18 ff ff ff e8 6d 2b 53 fe 0f 0b 48 8b bd 18 ff ff ff e9 bf f7 ff ff e8 5a 2b 53 fe <0f> 0b e9 80 fe ff ff e8 5e 75 26 fe 4c 89 e7 e8 46 27 8a fe e9 45 [ 2453.887462] RSP: 0018:ffff888071177af8 EFLAGS: 00010246 [ 2453.893006] RAX: 0000000000040000 RBX: ffff888071177be8 RCX: ffffc90006271000 [ 2453.900278] RDX: 0000000000040000 RSI: ffffffff831cafc6 RDI: 0000000000000005 [ 2453.907553] RBP: ffff888071177c10 R08: ffff8880406ee100 R09: ffffed1015d05bd0 [ 2453.914837] R10: ffffed1015d05bcf R11: ffff8880ae82de7b R12: ffff88805cf2cd00 [ 2453.922111] R13: ffff88805cf2cd90 R14: 00000000fffffff4 R15: 0000000000000000 [ 2453.929412] ? __device_add_disk+0xef6/0x1160 [ 2453.933921] ? __device_add_disk+0xef6/0x1160 [ 2453.938434] ? blk_alloc_devt+0x2e0/0x2e0 [ 2453.942595] ? sprintf+0xc0/0x100 [ 2453.946062] ? scnprintf+0x140/0x140 [ 2453.949803] ? __init_waitqueue_head+0x36/0x90 [ 2453.954401] ? pm_runtime_init+0x364/0x420 [ 2453.958651] device_add_disk+0x2b/0x40 [ 2453.962552] loop_add+0x635/0x8d0 [ 2453.966110] loop_control_ioctl+0x165/0x360 [ 2453.970438] ? loop_add+0x8d0/0x8d0 [ 2453.974097] ? __might_sleep+0x95/0x190 [ 2453.978084] ? loop_add+0x8d0/0x8d0 [ 2453.981722] do_vfs_ioctl+0xd6e/0x1390 [ 2453.985625] ? selinux_file_ioctl+0x46f/0x5e0 [ 2453.990129] ? selinux_file_ioctl+0x125/0x5e0 [ 2453.994633] ? ioctl_preallocate+0x210/0x210 [ 2453.999054] ? selinux_file_mprotect+0x620/0x620 [ 2454.003824] ? iterate_fd+0x360/0x360 [ 2454.007644] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2454.013194] ? fput+0x128/0x1a0 [ 2454.016493] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2454.022043] ? security_file_ioctl+0x93/0xc0 [ 2454.026463] ksys_ioctl+0xab/0xd0 [ 2454.029933] __x64_sys_ioctl+0x73/0xb0 [ 2454.033838] do_syscall_64+0x103/0x610 [ 2454.037748] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2454.042948] RIP: 0033:0x457e39 [ 2454.046166] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2454.065073] RSP: 002b:00007fc45d3b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2454.072791] RAX: ffffffffffffffda RBX: 00007fc45d3b7c90 RCX: 0000000000457e39 [ 2454.080060] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2454.087344] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 2454.094617] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc45d3b86d4 [ 2454.101892] R13: 00000000004c10ef R14: 00000000004d2f38 R15: 0000000000000005 [ 2454.110453] Kernel Offset: disabled [ 2454.114242] Rebooting in 86400 seconds..