fffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet(0x2, 0x4000000805, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) r11 = dup3(r9, r10, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r11, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x7a, &(0x7f000059aff8)={r12}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000180)={r12, 0xf8d, 0x1, [0x0]}, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$bt_sco_SCO_CONNINFO(r6, 0x11, 0x2, &(0x7f0000000000)=""/45, &(0x7f0000000040)=0x2d) sendto$inet(r4, &(0x7f0000000100)="666c9712d6f726db315f0f3706b87b64e67142214a1c2c0ed16f1d55148358abf6cb708a9bc39dc9af4fe2f73f3dd3b6fffa8ba75e0a4b", 0x23d, 0x0, &(0x7f00006f7000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="e839c7541b9e26a4eb", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r13}, &(0x7f000034f000)=0x2059b000) 06:42:10 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0285628, &(0x7f0000000280)={0x0, 0xc}) 06:42:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:10 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r2, 0x9) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0xb7, 0x2, 0x7f, "04b6e9f19b242b0d4d0992088c64d009", "250e50ac5e35afec4160225ef8dcc484ad65e1e7dadc7bf4e684694f7e731c18cc7e71ee0f33e8f20cbaee00c6d382b0486122b7a56de0c1ba0779d3a5b5abe3bed26fc52f3e5fc5e379d989098a425f08baf0a1663a446a24f0f686e82bb3e5f8ea6d54f3f8c627ea0a30ba86eeb754dfea76882af53fd56aa5460a8d99b61efdcd4f849a35e31251a0ccea0817d8cc2d2f2b4733d922874eea821b1a0bcfbd8f60"}, 0xb7, 0x2) r3 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r4) [ 343.376157] FAULT_INJECTION: forcing a failure. [ 343.376157] name failslab, interval 1, probability 0, space 0, times 0 06:42:10 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0285629, &(0x7f0000000280)={0x0, 0xc}) [ 343.458036] CPU: 0 PID: 19358 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 343.465014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.474377] Call Trace: [ 343.476984] dump_stack+0x172/0x1f0 [ 343.480630] should_fail.cold+0xa/0x1b [ 343.484558] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 343.489676] ? lock_downgrade+0x880/0x880 [ 343.493834] __should_failslab+0x121/0x190 [ 343.498090] should_failslab+0x9/0x14 [ 343.501915] kmem_cache_alloc_node_trace+0x274/0x720 06:42:10 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x6) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) [ 343.507034] ? __alloc_skb+0xd5/0x5f0 [ 343.510856] __kmalloc_node_track_caller+0x3d/0x80 [ 343.515800] __kmalloc_reserve.isra.0+0x40/0xf0 [ 343.520483] __alloc_skb+0x10b/0x5f0 [ 343.524212] ? skb_scrub_packet+0x490/0x490 [ 343.528648] ? mark_held_locks+0x100/0x100 [ 343.532889] ? trace_hardirqs_on+0x67/0x220 [ 343.537227] alloc_skb_with_frags+0x93/0x590 [ 343.541642] ? mark_held_locks+0x100/0x100 [ 343.545882] ? avc_has_perm+0x379/0x610 [ 343.545900] ? find_held_lock+0x35/0x130 [ 343.545919] sock_alloc_send_pskb+0x72d/0x8a0 [ 343.554018] ? packet_cached_dev_get+0x148/0x260 [ 343.554038] ? sock_wmalloc+0x120/0x120 [ 343.554053] ? lock_downgrade+0x880/0x880 [ 343.554071] ? kasan_check_read+0x11/0x20 [ 343.554091] packet_sendmsg+0x1a16/0x6440 [ 343.572763] net_ratelimit: 20 callbacks suppressed [ 343.572771] protocol 88fb is buggy, dev hsr_slave_0 [ 343.575532] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 343.575551] ? rw_copy_check_uvector+0x2a6/0x330 [ 343.575573] ? sock_has_perm+0x209/0x2a0 06:42:10 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/d\x00\x00\x00\x00\x00\x00\x00\b\x00n ', 0x100, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = geteuid() setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000000)={{{@in=@rand_addr=0x9, @in6=@ipv4={[], [], @local}, 0x4e24, 0x7, 0x4e24, 0x7, 0x2, 0x40, 0x80, 0x2, 0x0, r6}, {0x8, 0x71a6, 0x6, 0x100, 0xfffffffffffffffc, 0x7, 0xbb, 0x2}, {0x5, 0x2, 0x3b, 0x9}, 0x8, 0x6e6bbc, 0x0, 0x1, 0x2, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0x26}, 0x4d3, 0x2b}, 0x2, @in=@multicast2, 0x3505, 0x2, 0x1, 0xc6, 0x8, 0x81, 0x8001}}, 0xe8) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) [ 343.580008] protocol 88fb is buggy, dev hsr_slave_1 [ 343.584887] ? packet_notifier+0x840/0x840 [ 343.584910] ? selinux_socket_sendmsg+0x36/0x40 [ 343.584925] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 343.589995] protocol 88fb is buggy, dev hsr_slave_0 [ 343.595439] ? security_socket_sendmsg+0x8d/0xc0 [ 343.595452] ? packet_notifier+0x840/0x840 [ 343.595472] sock_sendmsg+0xd7/0x130 [ 343.600234] protocol 88fb is buggy, dev hsr_slave_1 [ 343.604247] ___sys_sendmsg+0x3e2/0x920 [ 343.604264] ? copy_msghdr_from_user+0x430/0x430 [ 343.604285] ? mark_held_locks+0x100/0x100 [ 343.609341] protocol 88fb is buggy, dev hsr_slave_0 [ 343.613504] ? kasan_check_read+0x11/0x20 [ 343.613530] ? __might_fault+0x12b/0x1e0 [ 343.618200] protocol 88fb is buggy, dev hsr_slave_1 [ 343.623690] ? find_held_lock+0x35/0x130 [ 343.623716] ? __might_fault+0x12b/0x1e0 [ 343.623749] __sys_sendmmsg+0x1bf/0x4e0 [ 343.650365] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 343.659357] ? kasan_check_write+0x14/0x20 [ 343.659385] ? __sb_end_write+0xd9/0x110 [ 343.659402] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 343.659415] ? fput+0x128/0x1a0 [ 343.711023] ? ksys_write+0x1f1/0x2d0 [ 343.714833] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 343.719591] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 343.724372] ? do_syscall_64+0x26/0x620 [ 343.724385] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 343.724398] ? do_syscall_64+0x26/0x620 [ 343.733724] __x64_sys_sendmmsg+0x9d/0x100 [ 343.733740] do_syscall_64+0xfd/0x620 [ 343.733754] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 343.733766] RIP: 0033:0x459a59 [ 343.754053] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 343.772954] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 343.780667] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 343.787937] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 343.795206] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 343.802472] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 343.809739] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:10 executing program 4 (fault-call:6 fault-nth:26): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:10 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc02c5625, &(0x7f0000000280)={0x0, 0xc}) 06:42:10 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r5) 06:42:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f00000001c0)) semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) r4 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT(r4, 0x0, 0x12, &(0x7f0000019380)=""/102385) semop(r4, &(0x7f0000000000)=[{0x0, 0x8001}, {0x3, 0x9, 0x800}], 0x38e) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000180)={0xcc6b, 0x4, 0xca5, 0x6}, 0x8) r5 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT(r5, 0x0, 0x12, &(0x7f0000019380)=""/102385) semctl$GETVAL(r5, 0x6, 0xc, &(0x7f00000000c0)=""/141) [ 344.004429] FAULT_INJECTION: forcing a failure. [ 344.004429] name failslab, interval 1, probability 0, space 0, times 0 [ 344.015887] CPU: 0 PID: 19693 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 344.022820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.032269] Call Trace: [ 344.034870] dump_stack+0x172/0x1f0 [ 344.038517] should_fail.cold+0xa/0x1b [ 344.042420] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 344.047544] ? check_preemption_disabled+0x48/0x290 06:42:11 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305615, &(0x7f0000000280)={0x0, 0xc}) [ 344.052583] __should_failslab+0x121/0x190 [ 344.056835] should_failslab+0x9/0x14 [ 344.060649] kmem_cache_alloc+0x47/0x700 [ 344.064715] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.070263] ? check_preemption_disabled+0x48/0x290 [ 344.075283] ? lock_acquire+0x16f/0x3f0 [ 344.075303] skb_clone+0x156/0x3e0 [ 344.075321] dev_queue_xmit_nit+0x309/0xa10 [ 344.082809] ? validate_xmit_xfrm+0x1f7/0xda0 [ 344.082831] dev_hard_start_xmit+0xa7/0x980 [ 344.082854] __dev_queue_xmit+0x2704/0x2fe0 [ 344.082867] ? refcount_add_checked+0x33/0x70 [ 344.082893] ? netdev_pick_tx+0x300/0x300 [ 344.108922] ? packet_cached_dev_get+0x148/0x260 [ 344.113694] ? sock_wmalloc+0x120/0x120 [ 344.117677] ? lock_downgrade+0x880/0x880 [ 344.121832] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.127380] ? skb_copy_datagram_from_iter+0x441/0x660 [ 344.132664] ? kasan_check_read+0x11/0x20 [ 344.136826] dev_queue_xmit+0x18/0x20 [ 344.140636] ? dev_queue_xmit+0x18/0x20 [ 344.144618] packet_sendmsg+0x3bb0/0x6440 [ 344.148775] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 06:42:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) [ 344.154322] ? rw_copy_check_uvector+0x2a6/0x330 [ 344.159107] ? packet_notifier+0x840/0x840 [ 344.163363] ? selinux_socket_sendmsg+0x36/0x40 [ 344.168040] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.173586] ? security_socket_sendmsg+0x8d/0xc0 [ 344.178349] ? packet_notifier+0x840/0x840 [ 344.182592] sock_sendmsg+0xd7/0x130 [ 344.186317] ___sys_sendmsg+0x3e2/0x920 [ 344.190382] ? copy_msghdr_from_user+0x430/0x430 [ 344.195144] ? mark_held_locks+0x100/0x100 [ 344.199399] ? kasan_check_read+0x11/0x20 06:42:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r1, r5) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e21, 0x1c, @mcast2, 0x5}}, 0x0, 0x3a95, 0x0, "3ce8a1d38043db33bb660785192f48e6d49092e2735195f214d25c49ea3a07355e03c2b577ab38855dbe713dd9075143cd277a7c31aff76a051ae6471c79ec3dfa5226348e5d27116a3700a937325aa8"}, 0xd8) socketpair(0x4, 0x0, 0x80, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000180)={0xfffffffb, 0x7f, 0x7, 0xffff7fff, 0x7}, 0x14) r7 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x40400, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x10, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) 06:42:11 executing program 5: r0 = semget$private(0x0, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x1, 0x9, 0x800}], 0x11c) write$selinux_attr(r2, &(0x7f0000000000)='system_u:object_r:usb_device_t:s0\x00', 0x22) [ 344.203557] ? __might_fault+0x12b/0x1e0 [ 344.207626] ? find_held_lock+0x35/0x130 [ 344.211693] ? __might_fault+0x12b/0x1e0 [ 344.215782] __sys_sendmmsg+0x1bf/0x4e0 [ 344.219770] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 344.224105] ? kasan_check_write+0x14/0x20 [ 344.228356] ? __sb_end_write+0xd9/0x110 [ 344.232429] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 344.237972] ? fput+0x128/0x1a0 [ 344.241254] ? ksys_write+0x1f1/0x2d0 [ 344.245051] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 344.245066] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 344.245085] ? do_syscall_64+0x26/0x620 [ 344.245099] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.245114] ? do_syscall_64+0x26/0x620 [ 344.267878] __x64_sys_sendmmsg+0x9d/0x100 [ 344.272124] do_syscall_64+0xfd/0x620 [ 344.275940] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.281134] RIP: 0033:0x459a59 [ 344.284332] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:42:11 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305616, &(0x7f0000000280)={0x0, 0xc}) 06:42:11 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x401, {0x8, 0x9a, 0x4, 0xe4, 0xd, 0x7f}, 0x3, 0x92}, 0xe) socket$can_bcm(0x1d, 0x2, 0x2) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) [ 344.303348] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 344.311073] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 344.318347] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 344.325625] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 344.332903] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 344.340184] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 [ 344.452763] protocol 88fb is buggy, dev hsr_slave_0 [ 344.457872] protocol 88fb is buggy, dev hsr_slave_1 06:42:11 executing program 4 (fault-call:6 fault-nth:27): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x46000, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000000000)={0x52, 0x4, 0x4, {0x9, 0x7}, {0x401, 0x6c}, @const={0x7, {0x9a6c, 0xb3, 0x4, 0x1000}}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000000)) r2 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT(r5, 0x0, 0x12, &(0x7f0000019380)=""/102385) semop(r5, &(0x7f0000000080), 0x0) semop(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) 06:42:11 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305667, &(0x7f0000000280)={0x0, 0xc}) 06:42:11 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x802, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) 06:42:11 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc038563b, &(0x7f0000000280)={0x0, 0xc}) 06:42:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) [ 344.711419] FAULT_INJECTION: forcing a failure. [ 344.711419] name failslab, interval 1, probability 0, space 0, times 0 [ 344.727844] CPU: 0 PID: 20138 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 344.734820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.744175] Call Trace: [ 344.746776] dump_stack+0x172/0x1f0 [ 344.750421] should_fail.cold+0xa/0x1b [ 344.754324] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 344.759436] ? lock_downgrade+0x880/0x880 [ 344.763610] __should_failslab+0x121/0x190 [ 344.767858] should_failslab+0x9/0x14 [ 344.771673] kmem_cache_alloc_node+0x26c/0x710 [ 344.772749] protocol 88fb is buggy, dev hsr_slave_0 [ 344.776259] ? __lock_acquire+0x6ee/0x49c0 [ 344.776275] ? __dev_queue_xmit+0x1757/0x2fe0 [ 344.776291] ? find_held_lock+0x35/0x130 [ 344.776311] __alloc_skb+0xd5/0x5f0 [ 344.781353] protocol 88fb is buggy, dev hsr_slave_1 [ 344.785536] ? skb_scrub_packet+0x490/0x490 [ 344.785551] ? mark_held_locks+0x100/0x100 06:42:11 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x5cdb, 0x6, [0x2, 0x100, 0x4, 0x8, 0x1ff, 0x7039]}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000080)={r6, 0x4b, 0x1}, 0x8) [ 344.785563] ? trace_hardirqs_on+0x67/0x220 [ 344.785581] alloc_skb_with_frags+0x93/0x590 [ 344.819975] ? mark_held_locks+0x100/0x100 [ 344.824221] ? avc_has_perm+0x379/0x610 [ 344.828207] ? find_held_lock+0x35/0x130 [ 344.832277] sock_alloc_send_pskb+0x72d/0x8a0 [ 344.836788] ? packet_cached_dev_get+0x148/0x260 [ 344.841551] ? sock_wmalloc+0x120/0x120 [ 344.845533] ? lock_downgrade+0x880/0x880 [ 344.849688] ? kasan_check_read+0x11/0x20 [ 344.853852] packet_sendmsg+0x1a16/0x6440 06:42:11 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc038563c, &(0x7f0000000280)={0x0, 0xc}) [ 344.858007] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 344.863551] ? rw_copy_check_uvector+0x2a6/0x330 [ 344.868327] ? sock_has_perm+0x209/0x2a0 [ 344.872411] ? packet_notifier+0x840/0x840 [ 344.876664] ? selinux_socket_sendmsg+0x36/0x40 [ 344.881341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.886890] ? security_socket_sendmsg+0x8d/0xc0 [ 344.891655] ? packet_notifier+0x840/0x840 [ 344.895901] sock_sendmsg+0xd7/0x130 [ 344.899631] ___sys_sendmsg+0x3e2/0x920 [ 344.903616] ? copy_msghdr_from_user+0x430/0x430 [ 344.908498] ? mark_held_locks+0x100/0x100 [ 344.912745] ? kasan_check_read+0x11/0x20 [ 344.916907] ? __might_fault+0x12b/0x1e0 [ 344.920983] ? find_held_lock+0x35/0x130 [ 344.925143] ? __might_fault+0x12b/0x1e0 [ 344.929236] __sys_sendmmsg+0x1bf/0x4e0 [ 344.933223] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 344.937556] ? kasan_check_write+0x14/0x20 [ 344.941807] ? __sb_end_write+0xd9/0x110 [ 344.945884] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 344.951429] ? fput+0x128/0x1a0 [ 344.954719] ? ksys_write+0x1f1/0x2d0 06:42:12 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000040)={r9, 0x7f, 0x5, 0x5}, &(0x7f0000000080)=0x10) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x200000) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) [ 344.958530] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 344.963293] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 344.968058] ? do_syscall_64+0x26/0x620 [ 344.972041] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.977412] ? do_syscall_64+0x26/0x620 [ 344.981407] __x64_sys_sendmmsg+0x9d/0x100 [ 344.985654] do_syscall_64+0xfd/0x620 [ 344.989465] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.994656] RIP: 0033:0x459a59 06:42:12 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0405602, &(0x7f0000000280)={0x0, 0xc}) [ 344.997856] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 345.016768] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 345.024497] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 345.031777] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 345.039057] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 345.046335] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 345.053622] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:12 executing program 4 (fault-call:6 fault-nth:28): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) r7 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_INTERRUPT(r9, 0x4004ae86, &(0x7f00000001c0)=0x100) r10 = socket$inet(0x2, 0x4000000805, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) r12 = dup3(r10, r11, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r12, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r11, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x7a, &(0x7f000059aff8)={r13}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000012c0)={r13, 0x81, 0x1, [0x0]}, &(0x7f0000001300)=0xa) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000001340)={r14, @in6={{0xa, 0x4e23, 0x8, @rand_addr="137f8ab7184f747f1e3fd02e8c073602", 0x7}}}, 0x84) sendto$inet(r4, &(0x7f0000000000)="0909b9b3369bf948827d9af84b715f3a5f99cf6688d4077fdaee2e83a18bcd07c41d9451f1ac5e6f", 0xfffffffffffffe2e, 0x0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="e02503d68900010000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r15}, &(0x7f000034f000)=0x2059b000) 06:42:12 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5f07e3a9d608ccf, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000000100)={0x1, 0xd, 0xa, 0x1c, 0x9, 0x26ed, 0x1, 0x7b, 0xffffffffffffffff}) semop(r0, &(0x7f0000000000)=[{0x2, 0x937, 0x800}, {0x3, 0x4, 0x1000}, {0x0, 0x4, 0xc00}, {0xb, 0x2, 0x800}, {0x1, 0x0, 0x1d5b5aed287bc051}, {0xd, 0x40, 0x800}], 0x6) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) 06:42:12 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x80000, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40200040}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x660, 0x2c, 0x800, 0x70bd28, 0x25dfdbfb, {0x1d}, [@nested={0x38, 0x93, [@typed={0xc, 0x3f, @str='user,%\x00'}, @generic="873cdcf5813b87af4b2a2878a11145104211f55c8297eb875df198386e17c81e2dcda9a1bf1fea"]}, @nested={0x2d4, 0xd, [@typed={0x10, 0x5a, @str='vboxnet0\x00'}, @typed={0xc, 0x5e, @str='keyring\x00'}, @generic="f7453e9bacf1ca3a302b345eef8d7ee7e59c7f2863ea77716ad8cc1498f76c7b6529cccdece19093028aeb8735dfbf351998dda5bc44d3a66cf4580f279af586fb991ff589b8299e881a61e5e9cece4dcc6590", @generic="ba16bb128db6d4f2f0e76c39e34476d8d393342bd2932e547e60a179dc52c78be09c834608e684673e996af7c5b442d238cddecea2a7329ef02c6ca5304410170c", @generic="d19839ac034ca4c9c9146e734c477e8f109d0b5d9f409d3da020ddc00d63025043ea813977410122c58f19e8d7f10e55172a11465a49015d60c2517de31c1fc71c053efdc424af55992c196aa7e9f58e87d4a22b625ce2808ce47436387e30a88bec054622a1467c3e541197e65803dfded2123fbd9bb43e6ae4597d4bbffd25c86afd2c2232933a1ae894bbf1b0285e65540ae0", @generic="4f6acd156b02bcf0d363be57114b20052f8ca502de5e6a3ffef06d760ec669feeb09beafe36ba0e3741d705c80f1e53608d12b71d21abb01f6ab9ca405b54953aeee1e0fc66551e5b2ac1963378f46e5d0c054b25bcc3b9690862ebe34d85e9e366fc048882e2ca90a5bd94a9cbcb0b1042656edcc80484f1c363d080231fb46822f9980cf9e51c0c2e76a928594f961c3b0081c84a500d4efe5a0c6fc83c62bd92dbbd00e1d38ac61072d86967eb2ba35f66ca07cefdb7dc76238d6d8023a095c0a7bd6207ffeb90fdf0adaae10cb5f2f559b62c54a9f5ce40a354aa43638502e47007b98d4c34d851a66825e69e5145550b0f49b8e", @generic="bcb4f25b1ebb6a0252e206c1889a51e77e4f8b1152cc815c9b9d98e8331e87dc7554b2069aa357a3558e2f7c8d17db85c5f1a0a862beaf3d87b5b0791d9ccc18d30cfdda68d781b5303416e8438493cd0a439411811a721f7bdb00a05967dcd03ae1f9236ca8dec3767d988601382fefa0aec8b4bad4f8be2cf8787227b6470a", @typed={0x14, 0x78, @ipv6=@dev={0xfe, 0x80, [], 0xc}}]}, @nested={0x2f8, 0x4b, [@generic="935616bf11e535723d167894fd212947ddd56a070495eebdf18e708d09dbfc064f0839cb76c2ea58ea7a0784ac269a6f4e609be4da25a604d27079ee2368fe8ecaacea687aeeae08ff4f335c6f284defa0cf8c6ec1e5375a15bd61e9538ae21864af2caddca76a427418a12ed8b8ae073885fab1b67fce10042e6c4c", @generic="29d8bb207bed6e354c0e410fd3d16764c613c97a9ad4a7e11f96f7662616d491f6ba58d8305d4317fd1a21e033fb381bc29482d038200dfc129b9ec4f007986ce3f92215247ca7786added9147025c4a3b408e92f3444371d86a69795bf7f04037205c16bd8f1db9c0017ddbdce4120a2a647b4bc599fe2091e76d5056b2", @typed={0x8, 0x2a, @u32=0x3e}, @generic="478528adb94d4e57cb063391c8d36039b8b9cd0b939fe06334252db2d6f9bb368506612853d6882774ef7e4167d404f476b6a58b699e16d56b29346bf1498d7429c175343f6ffc735071b9086cb70270fd3cd5409588f187111188d08e6f068b36431f9235c22b8e62a039e0b81e1db336766a705cd3b3f1882a1b80058dccac658e08e396cf8cb8cd64a2aaa4d41e71c448d048131ed10df70f669673fffad921161120da", @generic="586c4eca157cc23c549b7f48752b57db78fe647ea48679a2ea536249ad27774929d5057a857a7a20e327b09440988ee79b142df998f5e90eccc6fd11fcbf1f4dccf6", @typed={0x14, 0x14, @str='/selinuxself\x00'}, @generic="0d8892ffb45ec7ff4776c63f8118bf0aa6dcbaf7368e7db02a4ed59968a7597cd3475ab55bf251252b4920717d90f5a6d06cc0113db6ce02da0eb73f505488b0bb6189b30a95f1dadd45", @typed={0x10, 0x61, @str='/dev/amidi#\x00'}, @generic="6ad82bb7da113f479a1ee045039ff95e984b0392854b595eac8515e64d1a40656445b72285d6065536f95af65a9b956f29f5cb3a2f3af34b10be3ac1cdb4d50614fd6b6164185db6d40309680dcdc87fc689ddf286c63dcdb7de0485cc84f0f9ee3470448c2179fa2bab25eb7c2dd0cb5232f7cbc30f82c49a95ac963717144e57e1dfe7f7f02b2f153f6f07320c9420afca7b05861fd6425903364b"]}, @generic="eb2a8e154373a5cea9993429821c74850c8bd1061bf0d4526e8a300a69924b59464ad2117bc1a751", @generic="2bcfa1f8f60c213f16d18803703a636513765d702c010f5b2b9ce10b416b696b"]}, 0x660}, 0x1, 0x0, 0x0, 0x24}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCGISO7816(r5, 0x80285442, &(0x7f0000000080)) r6 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x906e, 0x1300) dup2(0xffffffffffffffff, r6) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r7 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128}) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r7) 06:42:12 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc040563d, &(0x7f0000000280)={0x0, 0xc}) 06:42:12 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc040563e, &(0x7f0000000280)={0x0, 0xc}) 06:42:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:12 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x100, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000280)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r4, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x7, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x8, 0x5}, 0x0, 0x0, &(0x7f00000000c0)={0x5, 0x8, 0x1f, 0xfffffbff}, &(0x7f0000000100)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}}, 0x10) prctl$PR_SET_KEEPCAPS(0x8, 0x1) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) [ 345.364523] FAULT_INJECTION: forcing a failure. [ 345.364523] name failslab, interval 1, probability 0, space 0, times 0 [ 345.419048] CPU: 1 PID: 20388 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 345.426046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.435414] Call Trace: [ 345.438027] dump_stack+0x172/0x1f0 [ 345.441667] should_fail.cold+0xa/0x1b [ 345.445575] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 345.450691] ? lock_downgrade+0x880/0x880 [ 345.454857] __should_failslab+0x121/0x190 [ 345.459109] should_failslab+0x9/0x14 [ 345.462921] kmem_cache_alloc_node_trace+0x274/0x720 [ 345.468032] ? __alloc_skb+0xd5/0x5f0 [ 345.471844] __kmalloc_node_track_caller+0x3d/0x80 [ 345.476805] __kmalloc_reserve.isra.0+0x40/0xf0 [ 345.481489] __alloc_skb+0x10b/0x5f0 [ 345.485214] ? skb_scrub_packet+0x490/0x490 [ 345.489544] ? mark_held_locks+0x100/0x100 [ 345.493792] ? trace_hardirqs_on+0x67/0x220 [ 345.498140] alloc_skb_with_frags+0x93/0x590 [ 345.502571] ? mark_held_locks+0x100/0x100 [ 345.506938] ? avc_has_perm+0x379/0x610 [ 345.510915] ? find_held_lock+0x35/0x130 [ 345.514983] sock_alloc_send_pskb+0x72d/0x8a0 [ 345.519490] ? packet_cached_dev_get+0x148/0x260 [ 345.524253] ? sock_wmalloc+0x120/0x120 [ 345.528248] ? lock_downgrade+0x880/0x880 [ 345.532491] ? kasan_check_read+0x11/0x20 [ 345.536683] packet_sendmsg+0x1a16/0x6440 [ 345.540841] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 345.546384] ? rw_copy_check_uvector+0x2a6/0x330 [ 345.551146] ? sock_has_perm+0x209/0x2a0 [ 345.555237] ? packet_notifier+0x840/0x840 [ 345.559487] ? selinux_socket_sendmsg+0x36/0x40 [ 345.564160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.569701] ? security_socket_sendmsg+0x8d/0xc0 [ 345.574458] ? packet_notifier+0x840/0x840 [ 345.578701] sock_sendmsg+0xd7/0x130 [ 345.582419] ___sys_sendmsg+0x3e2/0x920 [ 345.586414] ? copy_msghdr_from_user+0x430/0x430 [ 345.591191] ? mark_held_locks+0x100/0x100 [ 345.595432] ? kasan_check_read+0x11/0x20 [ 345.599588] ? __might_fault+0x12b/0x1e0 [ 345.603752] ? find_held_lock+0x35/0x130 [ 345.607820] ? __might_fault+0x12b/0x1e0 [ 345.611935] __sys_sendmmsg+0x1bf/0x4e0 [ 345.615913] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 345.620240] ? kasan_check_write+0x14/0x20 [ 345.624489] ? __sb_end_write+0xd9/0x110 [ 345.628550] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 345.634093] ? fput+0x128/0x1a0 [ 345.637379] ? ksys_write+0x1f1/0x2d0 [ 345.641206] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 345.645968] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 345.650726] ? do_syscall_64+0x26/0x620 [ 345.654707] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.660069] ? do_syscall_64+0x26/0x620 [ 345.664048] __x64_sys_sendmmsg+0x9d/0x100 06:42:12 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x10080, 0x0) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01070000000000000000130000f00c0009000500a63602000000"], 0x20}}, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000000)=0x5) 06:42:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:12 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r2, &(0x7f0000002680)={&(0x7f0000000040)=@generic={0x10, "f9a4180eec8fe521b118ae47e40845695b60a085faf2f96cc4cbd1218e5d478b5c28f188507cb45b344f3a49e77c15b358e320790b4b7293cf679fb0f5ba5b7f9c757fd99ff1234ab8156bd5bd57e8208fecebae2ee69b4720d151ed0d42f64435ccc952cd6ccf999841055986d57b9e0b53963b54a7c0d8a6364d655b5b"}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000380)="aea11a17e5be2b78edee9f5d29586e32de7d41cfbdcca88e7fee60bf346e5d90551774374cf3159a7e1a4f8f4bc3dd1c612810a77c259901d1ababecd80af935f12804c633d9023e2538851e8a7d891f04bc3bdac2d56168595b246a23552c2e20e1cf874dca0f022a7bfe5fcb39799d9c4301f9502b60e7fbefe40a61ecb06bf89e4be2bf8ccec65e4ff68dc27ee66ae0673556810508ccc2b3561adc5ec23a26da0eca95abe8dc16423d8bd8471c690132ea61f93f081e04d97217f7a6b218c014", 0xc2}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f00000000c0)="beb4cfdb7d5327f9afa8463b1c7cdad32a2eeaadf16db5d2a19380e05d60e031298e5b6d3ad76b2a497b2b6ecf9f84bea75d8f830c3f587fab1242c66b", 0x3d}, {&(0x7f0000000100)="cbea076f1563d1924376ccdaf7f4b6a45cc3930c7e03a499f842bdbd5ec0e66039f31e12de4a", 0x26}, {&(0x7f0000000240)="946aba09e8bec18e636b3a4401916a5c46e1fb30080fa7fd79e45338288913f65f43b19b0956901e8480fe58101cd271b2cb096545a10fec7c89aad542177ff3caf53cf82f15834efe490ead5694c8", 0x4f}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000000180)="46b9d31e29f3af5fdcc6a75d5e0919f514d09f8efed4498d97b1", 0x1a}], 0x7, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x148}, 0x4000041) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r5) [ 345.664066] do_syscall_64+0xfd/0x620 [ 345.664082] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.664096] RIP: 0033:0x459a59 [ 345.680474] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 345.699382] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 345.707104] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 345.714383] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 345.721657] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 345.728942] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 345.736212] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:12 executing program 4 (fault-call:6 fault-nth:29): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:12 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'\x00', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) 06:42:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:12 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0x81, 0x7, 0x5, 0x7ff}) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) 06:42:12 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc040564a, &(0x7f0000000280)={0x0, 0xc}) 06:42:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bind$isdn(r7, &(0x7f0000000000)={0x22, 0x1, 0x81, 0x94, 0x7f}, 0x6) [ 345.949758] FAULT_INJECTION: forcing a failure. [ 345.949758] name failslab, interval 1, probability 0, space 0, times 0 [ 345.961072] CPU: 1 PID: 20706 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 345.968003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.977361] Call Trace: [ 345.979971] dump_stack+0x172/0x1f0 [ 345.983633] should_fail.cold+0xa/0x1b [ 345.987546] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 345.992662] ? check_preemption_disabled+0x48/0x290 [ 345.997692] __should_failslab+0x121/0x190 [ 346.001930] should_failslab+0x9/0x14 [ 346.005739] kmem_cache_alloc+0x47/0x700 [ 346.009807] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.015348] ? check_preemption_disabled+0x48/0x290 [ 346.020363] ? lock_acquire+0x16f/0x3f0 [ 346.024340] skb_clone+0x156/0x3e0 [ 346.027884] dev_queue_xmit_nit+0x309/0xa10 [ 346.032211] ? validate_xmit_xfrm+0x1f7/0xda0 [ 346.036713] dev_hard_start_xmit+0xa7/0x980 [ 346.041044] __dev_queue_xmit+0x2704/0x2fe0 [ 346.045366] ? refcount_add_checked+0x33/0x70 [ 346.049871] ? netdev_pick_tx+0x300/0x300 [ 346.054027] ? packet_cached_dev_get+0x148/0x260 [ 346.058794] ? sock_wmalloc+0x120/0x120 [ 346.062774] ? lock_downgrade+0x880/0x880 [ 346.066927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.072471] ? skb_copy_datagram_from_iter+0x441/0x660 [ 346.077754] ? kasan_check_read+0x11/0x20 [ 346.081911] dev_queue_xmit+0x18/0x20 [ 346.085721] ? dev_queue_xmit+0x18/0x20 [ 346.089705] packet_sendmsg+0x3bb0/0x6440 [ 346.093856] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 346.099397] ? rw_copy_check_uvector+0x2a6/0x330 [ 346.104182] ? packet_notifier+0x840/0x840 [ 346.108433] ? selinux_socket_sendmsg+0x36/0x40 [ 346.113104] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.118646] ? security_socket_sendmsg+0x8d/0xc0 [ 346.123404] ? packet_notifier+0x840/0x840 [ 346.127650] sock_sendmsg+0xd7/0x130 [ 346.131368] ___sys_sendmsg+0x3e2/0x920 [ 346.135344] ? copy_msghdr_from_user+0x430/0x430 [ 346.140112] ? mark_held_locks+0x100/0x100 [ 346.144351] ? kasan_check_read+0x11/0x20 [ 346.148505] ? __might_fault+0x12b/0x1e0 [ 346.152570] ? find_held_lock+0x35/0x130 [ 346.156635] ? __might_fault+0x12b/0x1e0 [ 346.160718] __sys_sendmmsg+0x1bf/0x4e0 [ 346.164697] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 346.169028] ? kasan_check_write+0x14/0x20 [ 346.173273] ? __sb_end_write+0xd9/0x110 [ 346.177341] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 346.182877] ? fput+0x128/0x1a0 [ 346.186158] ? ksys_write+0x1f1/0x2d0 [ 346.189965] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 346.194724] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 346.199482] ? do_syscall_64+0x26/0x620 [ 346.203465] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.208827] ? do_syscall_64+0x26/0x620 [ 346.212809] __x64_sys_sendmmsg+0x9d/0x100 [ 346.217050] do_syscall_64+0xfd/0x620 [ 346.220854] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.226040] RIP: 0033:0x459a59 [ 346.229234] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:42:13 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc040564b, &(0x7f0000000280)={0x0, 0xc}) [ 346.248135] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 346.255848] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 346.263117] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 346.270393] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 346.279671] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 346.286945] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:13 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0445624, &(0x7f0000000280)={0x0, 0xc}) 06:42:13 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x272e679d84385e5b, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0xf64, @dev={0xfe, 0x80, [], 0x27}, 0x7}, {0xa, 0x4e23, 0x8, @mcast1, 0x1}, 0x4, [0x0, 0x9bde, 0x1, 0x4, 0x1, 0xfffffffe, 0xf, 0x3]}, 0x5c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) r6 = socket(0x10, 0x400000000080803, 0x0) write(r6, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r7) recvmmsg(r7, &(0x7f0000004040)=[{{0x0, 0xd1, &(0x7f00000011c0), 0x2}}], 0x3fffffffffffe54, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @initdev}}}, 0x0) r9 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, r9) keyctl$get_persistent(0x16, r8, r9) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @initdev}}}, 0x0) r11 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, r11) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x2000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0xf10b}, &(0x7f0000000240)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r14, 0x84, 0x18, &(0x7f0000000280)={r12, 0x8}, 0x8) keyctl$get_persistent(0x16, r10, r11) keyctl$unlink(0x9, r9, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 06:42:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:13 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT(r3, 0x0, 0x12, &(0x7f0000019380)=""/102385) r4 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT(r4, 0x0, 0x12, &(0x7f0000019380)=""/102385) r5 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT(r5, 0x0, 0x12, &(0x7f0000019380)=""/102385) semop(r5, &(0x7f0000000040), 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) 06:42:13 executing program 4 (fault-call:6 fault-nth:30): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:13 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0485619, &(0x7f0000000280)={0x0, 0xc}) 06:42:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="bd5cff7fdf35fc2d4a56e002000000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x5016, 0x4, 0x2, 0x9, 0x1000, 0x9, 0x80000000, 0x9, r9}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:13 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x8000, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) bind$x25(r2, &(0x7f0000000000)={0x9, @remote={[], 0x2}}, 0x12) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r5, 0x9) dup2(r4, r5) 06:42:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:13 executing program 5: semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = semget(0x1, 0x6083b9290d6b7832, 0x10) semop(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x2aaaaaaaaaaaa9ff) semop(r2, &(0x7f0000000000), 0x0) 06:42:13 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0585604, &(0x7f0000000280)={0x0, 0xc}) 06:42:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:13 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0xa, 0x6, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, r3}}) quotactl(0x7fff, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000040)="17b90ece70208ef2a5bb4a7882348a4ed9f79ba1454b3ef831848531d1b671f184eddd568eb1079deccbde852c035f") r4 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @initdev}}}, 0x0) r6 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, r6) keyctl$get_persistent(0x16, r5, r6) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f00000003c0)="520d13aaadc63662a31e261dd2eeb70c29a7e5ac56b80a8d550e9bf9cf2e9a5ceb4cc83e2490044cff74685927a9ad5c3774e3b85685fd4f296c310ee4abc69fb7a07dde054d126e4935b53568253458bc558f5793fefdd960a6e81143522d7aaa2f0cbf3a1cc9b8d606ee629081e42912005311070e7d2e4b11e044d5eee64b1d", 0x39d598a99a9f7c96, r6) [ 346.805255] FAULT_INJECTION: forcing a failure. [ 346.805255] name failslab, interval 1, probability 0, space 0, times 0 06:42:13 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0585605, &(0x7f0000000280)={0x0, 0xc}) [ 346.931807] CPU: 0 PID: 21043 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 346.938912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.948278] Call Trace: [ 346.950878] dump_stack+0x172/0x1f0 [ 346.954518] should_fail.cold+0xa/0x1b [ 346.958424] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 346.963538] ? lock_downgrade+0x880/0x880 [ 346.967705] __should_failslab+0x121/0x190 [ 346.971944] should_failslab+0x9/0x14 [ 346.975740] kmem_cache_alloc_node+0x26c/0x710 [ 346.975754] ? __lock_acquire+0x6ee/0x49c0 [ 346.975770] ? __dev_queue_xmit+0x1757/0x2fe0 [ 346.975784] ? find_held_lock+0x35/0x130 [ 346.975804] __alloc_skb+0xd5/0x5f0 [ 346.975822] ? skb_scrub_packet+0x490/0x490 [ 347.001158] ? mark_held_locks+0x100/0x100 [ 347.005403] ? trace_hardirqs_on+0x67/0x220 [ 347.009737] alloc_skb_with_frags+0x93/0x590 [ 347.014154] ? mark_held_locks+0x100/0x100 [ 347.018402] ? avc_has_perm+0x379/0x610 [ 347.022388] ? find_held_lock+0x35/0x130 [ 347.026565] sock_alloc_send_pskb+0x72d/0x8a0 06:42:14 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4401fc) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8001, {0x6, 0x58, 0x1, 0x1, 0x6, 0x81}, 0x0, 0x3}, 0xe) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) 06:42:14 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0585609, &(0x7f0000000280)={0x0, 0xc}) [ 347.031083] ? packet_cached_dev_get+0x148/0x260 [ 347.035854] ? sock_wmalloc+0x120/0x120 [ 347.039838] ? lock_downgrade+0x880/0x880 [ 347.044005] ? kasan_check_read+0x11/0x20 [ 347.048166] packet_sendmsg+0x1a16/0x6440 [ 347.052319] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 347.057861] ? rw_copy_check_uvector+0x2a6/0x330 [ 347.062628] ? sock_has_perm+0x209/0x2a0 [ 347.062656] ? packet_notifier+0x840/0x840 [ 347.070940] ? selinux_socket_sendmsg+0x36/0x40 [ 347.075615] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.081161] ? security_socket_sendmsg+0x8d/0xc0 [ 347.085927] ? packet_notifier+0x840/0x840 [ 347.090184] sock_sendmsg+0xd7/0x130 [ 347.093903] ___sys_sendmsg+0x3e2/0x920 [ 347.097890] ? copy_msghdr_from_user+0x430/0x430 [ 347.102657] ? mark_held_locks+0x100/0x100 [ 347.106902] ? kasan_check_read+0x11/0x20 [ 347.111062] ? __might_fault+0x12b/0x1e0 [ 347.115130] ? find_held_lock+0x35/0x130 [ 347.119200] ? __might_fault+0x12b/0x1e0 [ 347.123303] __sys_sendmmsg+0x1bf/0x4e0 [ 347.127291] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 347.131638] ? kasan_check_write+0x14/0x20 [ 347.135894] ? __sb_end_write+0xd9/0x110 [ 347.139968] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 347.145519] ? fput+0x128/0x1a0 [ 347.148807] ? ksys_write+0x1f1/0x2d0 [ 347.152624] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 347.157390] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 347.162267] ? do_syscall_64+0x26/0x620 [ 347.166353] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.171825] ? do_syscall_64+0x26/0x620 [ 347.175794] __x64_sys_sendmmsg+0x9d/0x100 [ 347.180021] do_syscall_64+0xfd/0x620 [ 347.183810] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.188987] RIP: 0033:0x459a59 [ 347.192166] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 347.211055] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 347.218793] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 347.226047] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 347.233302] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 347.240555] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 347.247805] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:14 executing program 4 (fault-call:6 fault-nth:31): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:14 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc058560f, &(0x7f0000000280)={0x0, 0xc}) 06:42:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r2, 0x9) fcntl$setlease(r2, 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x10, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) 06:42:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001880)='\x00\x00\x00\x00\xfa\xff\x00') sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x20, r5, 0x701, 0x0, 0x0, {0x13, 0x0, 0xfffffffffffff000}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x5}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000500)={&(0x7f0000001600)=ANY=[@ANYBLOB="9c010000", @ANYRES16=r5, @ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x4}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000000280)={0x20, 0x865, &(0x7f0000000380)="6a73c2ca2eaf0bb36c6ed9071a5f4837de8c83da1bb3eca0fe8e3bcb08404935305dd61e423a69c32178cf4d8bf237afc7f60d81972eb87afa38a26c567b6bbe4fc3825162b7c3f41bc357cccd6ab04892d46c432dc3c1da23f39300abfbb19a385695e84a5d8c990010a8218814cd50cf332a0db5685db376488466829e829f2473243f3b2349f6c9091771f585dca69415d2d2d3cd051efc46afe4d6857dfc3b36d539fbedf9e3db43ec399eb7fcb9b60d512fd709414967eed295887cdcead76e463300800ac2bf0f5c2b0705ae07e03ee396d1a449e9b47d3178ed84741732a60ac6be6f455e782b01712c43a6f624aa90", &(0x7f0000000600)="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", 0xf3, 0x1000}) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x14, r1, 0x701, 0x0, 0x0, {0x13, 0x0, 0xfffffffffffff000}}, 0x14}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r9, 0x1, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'gretap0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000810}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r9, 0x804, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4400008d}, 0x44024050) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001840)='/proc/self/attr/keycreate\x00', 0x2, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r11, 0x9) pwrite64(r11, &(0x7f0000000000)="f5b57223e012cced694428d08bc235c5b89255c1a3ad2592e5cff7ace22f29dd8b3e3dccbf8f4eb154db95e9945b50b3c750012211334a833b9dd67756d085651141cc5c85913cf88687471e18de4a610290be7d26035220c11a033e7008e4534dbe6eefe865a54be9b521c2", 0x6c, 0x0) r12 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000017c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RSYMLINK(r12, &(0x7f0000001800)={0x14, 0x11, 0x1, {0x0, 0x4, 0x5}}, 0x14) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r10, r13, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7f) r14 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000018c0)='.request_key_auth\x00', &(0x7f0000000200)={'\x00', 0x0}, &(0x7f0000000340)='z', 0x1, r14) 06:42:14 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) init_module(&(0x7f0000000080)='nodev\x00', 0x6, &(0x7f00000000c0)='(/\x00') semop(0x0, &(0x7f0000000080), 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xfffffff8, 0x7}, 0xc) semop(r0, &(0x7f0000000040)=[{0x3, 0x4beb, 0xc00}, {0x0, 0x0, 0x1000}, {0x1, 0x6, 0x800}, {0x2, 0xfff8, 0x1000}, {0x3, 0x5, 0x800}, {0x977a6747497826b9, 0x3}], 0x6) 06:42:14 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0585611, &(0x7f0000000280)={0x0, 0xc}) 06:42:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) [ 347.418842] Failed to obtain node identity [ 347.424487] Enabling of bearer rejected, failed to enable media 06:42:14 executing program 5: lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='com.apple.system.Security\x00') r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000180)) [ 347.462444] FAULT_INJECTION: forcing a failure. [ 347.462444] name failslab, interval 1, probability 0, space 0, times 0 [ 347.548582] CPU: 0 PID: 21327 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 347.555560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.564922] Call Trace: [ 347.567526] dump_stack+0x172/0x1f0 [ 347.571177] should_fail.cold+0xa/0x1b [ 347.575082] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 347.580334] ? lock_downgrade+0x880/0x880 [ 347.584501] __should_failslab+0x121/0x190 [ 347.588743] should_failslab+0x9/0x14 [ 347.592573] kmem_cache_alloc_node_trace+0x274/0x720 06:42:14 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc058565d, &(0x7f0000000280)={0x0, 0xc}) 06:42:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0xb) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) [ 347.597689] ? __alloc_skb+0xd5/0x5f0 [ 347.601504] __kmalloc_node_track_caller+0x3d/0x80 [ 347.606444] __kmalloc_reserve.isra.0+0x40/0xf0 [ 347.611119] __alloc_skb+0x10b/0x5f0 [ 347.614836] ? skb_scrub_packet+0x490/0x490 [ 347.619165] ? mark_held_locks+0x100/0x100 [ 347.623419] ? trace_hardirqs_on+0x67/0x220 [ 347.627752] alloc_skb_with_frags+0x93/0x590 [ 347.630068] Failed to obtain node identity [ 347.632157] ? mark_held_locks+0x100/0x100 [ 347.632171] ? avc_has_perm+0x379/0x610 [ 347.632186] ? find_held_lock+0x35/0x130 [ 347.648637] sock_alloc_send_pskb+0x72d/0x8a0 [ 347.653162] ? packet_cached_dev_get+0x148/0x260 [ 347.657930] ? sock_wmalloc+0x120/0x120 [ 347.661939] ? lock_downgrade+0x880/0x880 [ 347.666099] ? kasan_check_read+0x11/0x20 [ 347.670259] packet_sendmsg+0x1a16/0x6440 [ 347.672120] Enabling of bearer rejected, failed to enable media [ 347.674431] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 347.674444] ? rw_copy_check_uvector+0x2a6/0x330 [ 347.674467] ? sock_has_perm+0x209/0x2a0 [ 347.674492] ? packet_notifier+0x840/0x840 [ 347.674514] ? selinux_socket_sendmsg+0x36/0x40 [ 347.674525] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.674541] ? security_socket_sendmsg+0x8d/0xc0 [ 347.715523] ? packet_notifier+0x840/0x840 [ 347.719775] sock_sendmsg+0xd7/0x130 [ 347.723495] ___sys_sendmsg+0x3e2/0x920 [ 347.727494] ? copy_msghdr_from_user+0x430/0x430 [ 347.732269] ? mark_held_locks+0x100/0x100 [ 347.736506] ? kasan_check_read+0x11/0x20 [ 347.740663] ? __might_fault+0x12b/0x1e0 [ 347.744729] ? find_held_lock+0x35/0x130 06:42:14 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0845657, &(0x7f0000000280)={0x0, 0xc}) [ 347.748924] ? __might_fault+0x12b/0x1e0 [ 347.753013] __sys_sendmmsg+0x1bf/0x4e0 [ 347.757000] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 347.761334] ? kasan_check_write+0x14/0x20 [ 347.765585] ? __sb_end_write+0xd9/0x110 [ 347.769657] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 347.775198] ? fput+0x128/0x1a0 [ 347.778487] ? ksys_write+0x1f1/0x2d0 [ 347.782298] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 347.787055] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 347.791816] ? do_syscall_64+0x26/0x620 [ 347.795792] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.801157] ? do_syscall_64+0x26/0x620 [ 347.807491] __x64_sys_sendmmsg+0x9d/0x100 [ 347.811736] do_syscall_64+0xfd/0x620 [ 347.815541] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.820730] RIP: 0033:0x459a59 [ 347.823929] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 347.842834] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 347.850557] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 347.857819] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 347.857827] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 347.857835] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 347.857842] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:15 executing program 4 (fault-call:6 fault-nth:32): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:15 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) r4 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x4, 0x4) 06:42:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:15 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0845658, &(0x7f0000000280)={0x0, 0xc}) 06:42:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x10, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) 06:42:15 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x5, 0x7, 0x9}, 0x9, 0x1, 0x40}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) 06:42:15 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0905664, &(0x7f0000000280)={0x0, 0xc}) [ 348.087496] FAULT_INJECTION: forcing a failure. [ 348.087496] name failslab, interval 1, probability 0, space 0, times 0 [ 348.098845] CPU: 1 PID: 21745 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 348.105785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.115150] Call Trace: [ 348.117763] dump_stack+0x172/0x1f0 [ 348.121412] should_fail.cold+0xa/0x1b [ 348.125315] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 348.130425] ? check_preemption_disabled+0x48/0x290 [ 348.135461] __should_failslab+0x121/0x190 [ 348.139704] should_failslab+0x9/0x14 [ 348.143517] kmem_cache_alloc+0x47/0x700 [ 348.147589] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.153138] ? check_preemption_disabled+0x48/0x290 [ 348.158156] ? lock_acquire+0x16f/0x3f0 [ 348.162134] skb_clone+0x156/0x3e0 [ 348.165682] dev_queue_xmit_nit+0x309/0xa10 [ 348.170013] ? validate_xmit_xfrm+0x1f7/0xda0 [ 348.174616] dev_hard_start_xmit+0xa7/0x980 [ 348.178956] __dev_queue_xmit+0x2704/0x2fe0 [ 348.183284] ? refcount_add_checked+0x33/0x70 [ 348.187873] ? netdev_pick_tx+0x300/0x300 [ 348.192118] ? packet_cached_dev_get+0x148/0x260 [ 348.196888] ? sock_wmalloc+0x120/0x120 [ 348.200875] ? lock_downgrade+0x880/0x880 [ 348.205029] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.210567] ? skb_copy_datagram_from_iter+0x441/0x660 [ 348.215845] ? kasan_check_read+0x11/0x20 [ 348.220005] dev_queue_xmit+0x18/0x20 [ 348.223809] ? dev_queue_xmit+0x18/0x20 [ 348.227794] packet_sendmsg+0x3bb0/0x6440 [ 348.231948] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 348.237494] ? rw_copy_check_uvector+0x2a6/0x330 [ 348.242290] ? packet_notifier+0x840/0x840 [ 348.246543] ? selinux_socket_sendmsg+0x36/0x40 [ 348.251218] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.256767] ? security_socket_sendmsg+0x8d/0xc0 [ 348.261529] ? packet_notifier+0x840/0x840 [ 348.265779] sock_sendmsg+0xd7/0x130 [ 348.269498] ___sys_sendmsg+0x3e2/0x920 [ 348.273482] ? copy_msghdr_from_user+0x430/0x430 [ 348.278254] ? mark_held_locks+0x100/0x100 [ 348.282513] ? kasan_check_read+0x11/0x20 [ 348.286680] ? __might_fault+0x12b/0x1e0 [ 348.290754] ? find_held_lock+0x35/0x130 [ 348.294940] ? __might_fault+0x12b/0x1e0 [ 348.299031] __sys_sendmmsg+0x1bf/0x4e0 [ 348.303014] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 348.307347] ? kasan_check_write+0x14/0x20 [ 348.311594] ? __sb_end_write+0xd9/0x110 [ 348.315661] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 348.321201] ? fput+0x128/0x1a0 [ 348.324484] ? ksys_write+0x1f1/0x2d0 [ 348.328300] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 348.333065] ? trace_hardirqs_on_thunk+0x1a/0x1c 06:42:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:15 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0945662, &(0x7f0000000280)={0x0, 0xc}) 06:42:15 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0e85667, &(0x7f0000000280)={0x0, 0xc}) 06:42:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:15 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) [ 348.337814] ? do_syscall_64+0x26/0x620 [ 348.337828] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.337844] ? do_syscall_64+0x26/0x620 [ 348.347157] __x64_sys_sendmmsg+0x9d/0x100 [ 348.347174] do_syscall_64+0xfd/0x620 [ 348.347195] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.355375] RIP: 0033:0x459a59 [ 348.355389] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 348.355397] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 348.355412] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 348.355419] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 348.355430] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 348.364382] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 348.364390] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:15 executing program 4 (fault-call:6 fault-nth:33): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:15 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x2, 0xc}) 06:42:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040)={0x7, 0x5c8, 0x8000, 0x5}, 0x8) r4 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x3ff, 0xc0000) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f00000000c0)={0x81, 0x3, 0x80, 0xe0, &(0x7f0000000380)=[{}, {}, {}]}) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r2) 06:42:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r5, 0x9) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) 06:42:15 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r4, 0xf01, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x124, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x64, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x1c}}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x72}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x4}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x4}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x26}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3e6a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}]}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x977614afa5e7d71e) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) 06:42:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:15 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x1000000, 0xc}) [ 348.612775] net_ratelimit: 20 callbacks suppressed [ 348.612783] protocol 88fb is buggy, dev hsr_slave_0 [ 348.622904] protocol 88fb is buggy, dev hsr_slave_1 [ 348.639633] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 348.692863] FAULT_INJECTION: forcing a failure. [ 348.692863] name failslab, interval 1, probability 0, space 0, times 0 [ 348.706280] CPU: 1 PID: 21953 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 348.713233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.722607] Call Trace: [ 348.725212] dump_stack+0x172/0x1f0 [ 348.728850] should_fail.cold+0xa/0x1b [ 348.732764] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 348.737895] ? lock_downgrade+0x880/0x880 [ 348.742062] __should_failslab+0x121/0x190 [ 348.746308] should_failslab+0x9/0x14 [ 348.750118] kmem_cache_alloc_node+0x26c/0x710 [ 348.754701] ? __lock_acquire+0x6ee/0x49c0 [ 348.754722] ? __dev_queue_xmit+0x1757/0x2fe0 [ 348.754736] ? find_held_lock+0x35/0x130 [ 348.754755] __alloc_skb+0xd5/0x5f0 [ 348.754772] ? skb_scrub_packet+0x490/0x490 [ 348.775459] ? mark_held_locks+0x100/0x100 [ 348.779694] ? trace_hardirqs_on+0x67/0x220 [ 348.779721] alloc_skb_with_frags+0x93/0x590 [ 348.779735] ? mark_held_locks+0x100/0x100 [ 348.779750] ? avc_has_perm+0x379/0x610 [ 348.796674] ? find_held_lock+0x35/0x130 [ 348.800754] sock_alloc_send_pskb+0x72d/0x8a0 [ 348.805259] ? packet_cached_dev_get+0x148/0x260 [ 348.805281] ? sock_wmalloc+0x120/0x120 [ 348.805298] ? lock_downgrade+0x880/0x880 [ 348.805316] ? kasan_check_read+0x11/0x20 [ 348.805334] packet_sendmsg+0x1a16/0x6440 [ 348.826439] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 348.831979] ? rw_copy_check_uvector+0x2a6/0x330 [ 348.836749] ? sock_has_perm+0x209/0x2a0 [ 348.840823] ? packet_notifier+0x840/0x840 [ 348.845078] ? selinux_socket_sendmsg+0x36/0x40 [ 348.849754] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.855301] ? security_socket_sendmsg+0x8d/0xc0 [ 348.860070] ? packet_notifier+0x840/0x840 [ 348.864315] sock_sendmsg+0xd7/0x130 [ 348.868036] ___sys_sendmsg+0x3e2/0x920 [ 348.872021] ? copy_msghdr_from_user+0x430/0x430 [ 348.876799] ? mark_held_locks+0x100/0x100 [ 348.876818] ? kasan_check_read+0x11/0x20 [ 348.876838] ? __might_fault+0x12b/0x1e0 [ 348.885195] ? find_held_lock+0x35/0x130 [ 348.885212] ? __might_fault+0x12b/0x1e0 [ 348.885250] __sys_sendmmsg+0x1bf/0x4e0 [ 348.885267] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 348.885283] ? kasan_check_write+0x14/0x20 [ 348.909917] ? __sb_end_write+0xd9/0x110 [ 348.913994] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 348.919540] ? fput+0x128/0x1a0 [ 348.922826] ? ksys_write+0x1f1/0x2d0 [ 348.926645] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 348.931410] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 348.936176] ? do_syscall_64+0x26/0x620 [ 348.940160] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.945534] ? do_syscall_64+0x26/0x620 [ 348.949523] __x64_sys_sendmmsg+0x9d/0x100 [ 348.953773] do_syscall_64+0xfd/0x620 [ 348.957584] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.962771] RIP: 0033:0x459a59 [ 348.962787] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 348.962795] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 06:42:15 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x165001, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x50a, 0x22, &(0x7f00000000c0)={0x1, 0x16, 0x0, 0xfff, 0x8e}, 0x8, 0x0, 0xfff, 0x0, 0x53c, 0xfffff0f2, &(0x7f0000000380)="345cff4b45db21c1e07f8991cef5384502fe90b7b2f99ba7c69a23fe2a633507e2cca8192754d8ff6ec65461fa708cefdf6bd16583c43de9502c628cbc552ae27ebbbbbe2fdd5d8b320aaf3a681f533c3d7f4e56a3ab33babbcdad180028877b14d5df73c7a897904db022cc0fdcf529b76540a704e3f041518a95991c0951c3cabfa9e92f960780f033d402b6c94bbfdf2c614125faaec20689d1e9a1eda4961e8459fd982091a50c27cd144bc12e5c3e25c60d3e25edc099fa1eab6da7037e1636858fd42d600fba20ea8938fe7c973f927c6fd1b1da748a"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000000)={r8, 0x6, 0x30, 0x1, 0x6}, &(0x7f0000000040)=0x18) fcntl$getown(r2, 0x9) dup3(r2, r1, 0x80000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r10 = dup3(r1, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r11) 06:42:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x0, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0xfea3, 0x2, 0xffffffe0}}, ["", "", "", "", "", "", "", "", ""]}, 0xfffffffffffffec9}, 0x1, 0x0, 0x0, 0x40044044}, 0x82100) r7 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x10, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) 06:42:15 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x2000000, 0xc}) 06:42:15 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xb}) [ 348.962811] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 348.962819] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 348.962827] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 348.962836] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 348.962848] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 [ 348.985654] protocol 88fb is buggy, dev hsr_slave_0 [ 349.034711] protocol 88fb is buggy, dev hsr_slave_1 [ 349.039835] protocol 88fb is buggy, dev hsr_slave_0 [ 349.044952] protocol 88fb is buggy, dev hsr_slave_1 06:42:16 executing program 4 (fault-call:6 fault-nth:34): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:16 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r3, 0x9) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) 06:42:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000000)) 06:42:16 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) [ 349.210730] FAULT_INJECTION: forcing a failure. [ 349.210730] name failslab, interval 1, probability 0, space 0, times 0 [ 349.259376] CPU: 1 PID: 22278 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 349.266425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.275904] Call Trace: [ 349.278511] dump_stack+0x172/0x1f0 [ 349.282163] should_fail.cold+0xa/0x1b [ 349.286064] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 349.291178] ? lock_downgrade+0x880/0x880 [ 349.295356] __should_failslab+0x121/0x190 [ 349.299612] should_failslab+0x9/0x14 [ 349.303425] kmem_cache_alloc_node_trace+0x274/0x720 [ 349.308544] ? __alloc_skb+0xd5/0x5f0 [ 349.312370] __kmalloc_node_track_caller+0x3d/0x80 [ 349.317315] __kmalloc_reserve.isra.0+0x40/0xf0 [ 349.322001] __alloc_skb+0x10b/0x5f0 [ 349.325725] ? skb_scrub_packet+0x490/0x490 [ 349.330088] ? mark_held_locks+0x100/0x100 [ 349.334334] ? trace_hardirqs_on+0x67/0x220 [ 349.338797] alloc_skb_with_frags+0x93/0x590 [ 349.343227] ? mark_held_locks+0x100/0x100 [ 349.347469] ? avc_has_perm+0x379/0x610 [ 349.351447] ? find_held_lock+0x35/0x130 [ 349.355509] sock_alloc_send_pskb+0x72d/0x8a0 [ 349.355530] ? packet_cached_dev_get+0x148/0x260 [ 349.355551] ? sock_wmalloc+0x120/0x120 [ 349.368863] ? lock_downgrade+0x880/0x880 [ 349.373019] ? kasan_check_read+0x11/0x20 [ 349.377174] packet_sendmsg+0x1a16/0x6440 [ 349.381338] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 349.386881] ? rw_copy_check_uvector+0x2a6/0x330 [ 349.391655] ? sock_has_perm+0x209/0x2a0 [ 349.395829] ? packet_notifier+0x840/0x840 [ 349.400083] ? selinux_socket_sendmsg+0x36/0x40 [ 349.404760] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.410307] ? security_socket_sendmsg+0x8d/0xc0 [ 349.415072] ? packet_notifier+0x840/0x840 [ 349.419316] sock_sendmsg+0xd7/0x130 [ 349.423030] ___sys_sendmsg+0x3e2/0x920 [ 349.423048] ? copy_msghdr_from_user+0x430/0x430 [ 349.423068] ? mark_held_locks+0x100/0x100 [ 349.423084] ? kasan_check_read+0x11/0x20 [ 349.436119] ? __might_fault+0x12b/0x1e0 [ 349.436137] ? find_held_lock+0x35/0x130 [ 349.436153] ? __might_fault+0x12b/0x1e0 [ 349.436195] __sys_sendmmsg+0x1bf/0x4e0 [ 349.456442] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 349.460782] ? kasan_check_write+0x14/0x20 [ 349.465227] ? __sb_end_write+0xd9/0x110 [ 349.469307] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 349.474846] ? fput+0x128/0x1a0 [ 349.478134] ? ksys_write+0x1f1/0x2d0 [ 349.481942] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 349.486718] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 349.491476] ? do_syscall_64+0x26/0x620 [ 349.495451] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.500817] ? do_syscall_64+0x26/0x620 [ 349.504804] __x64_sys_sendmmsg+0x9d/0x100 [ 349.509051] do_syscall_64+0xfd/0x620 [ 349.512869] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.518058] RIP: 0033:0x459a59 [ 349.521256] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 349.540159] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 349.548827] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 06:42:16 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) 06:42:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:16 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fsync(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) 06:42:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCRSSCAUSE(r4, 0x89e1, &(0x7f0000000000)=0xbd) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r2, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x10, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) 06:42:16 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x80100, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r6, 0x111, 0x5, 0x4a98, 0x4) r7 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000180)={0xa5, 0x1, 0x4, 0x97fc, 0x3, 0x41, 0x8, 0x40, 0x57c5, 0x4}) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) add_key(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) 06:42:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:16 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc, 0x2}) [ 349.556089] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 349.556097] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 349.556105] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 349.556117] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:16 executing program 4 (fault-call:6 fault-nth:35): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 349.717953] FAULT_INJECTION: forcing a failure. [ 349.717953] name failslab, interval 1, probability 0, space 0, times 0 [ 349.729249] CPU: 1 PID: 22657 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 349.736179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.745533] Call Trace: [ 349.748132] dump_stack+0x172/0x1f0 [ 349.751771] should_fail.cold+0xa/0x1b [ 349.755755] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 349.760868] ? check_preemption_disabled+0x48/0x290 [ 349.765897] __should_failslab+0x121/0x190 [ 349.770135] should_failslab+0x9/0x14 [ 349.773938] kmem_cache_alloc+0x47/0x700 [ 349.778006] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.783550] ? check_preemption_disabled+0x48/0x290 [ 349.788574] ? lock_acquire+0x16f/0x3f0 [ 349.792671] skb_clone+0x156/0x3e0 [ 349.796240] dev_queue_xmit_nit+0x309/0xa10 [ 349.800565] ? validate_xmit_xfrm+0x1f7/0xda0 [ 349.805075] dev_hard_start_xmit+0xa7/0x980 [ 349.809417] __dev_queue_xmit+0x2704/0x2fe0 [ 349.813744] ? refcount_add_checked+0x33/0x70 [ 349.818254] ? netdev_pick_tx+0x300/0x300 [ 349.822418] ? packet_cached_dev_get+0x148/0x260 [ 349.827184] ? sock_wmalloc+0x120/0x120 [ 349.831173] ? lock_downgrade+0x880/0x880 [ 349.835328] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.840873] ? skb_copy_datagram_from_iter+0x441/0x660 [ 349.846158] ? kasan_check_read+0x11/0x20 [ 349.850324] dev_queue_xmit+0x18/0x20 [ 349.854133] ? dev_queue_xmit+0x18/0x20 [ 349.858114] packet_sendmsg+0x3bb0/0x6440 [ 349.862277] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 349.867826] ? rw_copy_check_uvector+0x2a6/0x330 [ 349.872616] ? packet_notifier+0x840/0x840 [ 349.876872] ? selinux_socket_sendmsg+0x36/0x40 [ 349.881548] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.887097] ? security_socket_sendmsg+0x8d/0xc0 [ 349.891966] ? packet_notifier+0x840/0x840 [ 349.896215] sock_sendmsg+0xd7/0x130 [ 349.899942] ___sys_sendmsg+0x3e2/0x920 [ 349.903926] ? copy_msghdr_from_user+0x430/0x430 [ 349.908698] ? mark_held_locks+0x100/0x100 [ 349.912939] ? kasan_check_read+0x11/0x20 [ 349.917103] ? __might_fault+0x12b/0x1e0 [ 349.921172] ? find_held_lock+0x35/0x130 [ 349.925240] ? __might_fault+0x12b/0x1e0 [ 349.929332] __sys_sendmmsg+0x1bf/0x4e0 [ 349.933321] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 349.937662] ? kasan_check_write+0x14/0x20 [ 349.941912] ? __sb_end_write+0xd9/0x110 [ 349.945982] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 349.951530] ? fput+0x128/0x1a0 [ 349.954821] ? ksys_write+0x1f1/0x2d0 [ 349.958635] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 349.963410] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 349.968169] ? do_syscall_64+0x26/0x620 [ 349.972149] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.977519] ? do_syscall_64+0x26/0x620 [ 349.981504] __x64_sys_sendmmsg+0x9d/0x100 [ 349.985752] do_syscall_64+0xfd/0x620 [ 349.989571] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.994762] RIP: 0033:0x459a59 [ 349.997962] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 350.016866] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 350.024584] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 350.031856] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 350.039129] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 350.046403] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 350.053673] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 [ 350.061243] protocol 88fb is buggy, dev hsr_slave_0 06:42:16 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc, 0x1000000}) 06:42:16 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) prctl$PR_SET_ENDIAN(0x14, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8848) 06:42:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r0, 0x9) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:16 executing program 5: semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) r2 = semget(0x1, 0x2, 0x4) semop(r2, &(0x7f00000000c0), 0x3c2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) memfd_create(&(0x7f00000000c0)='selinuxself%\x00', 0x2) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_udp_int(r4, 0x11, 0x64, &(0x7f0000000000), &(0x7f0000000040)=0x4) 06:42:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)="b2", 0x1, 0x4, &(0x7f0000618000)={0x2, 0x4e20, @remote}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000000)) r7 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x1a09c2, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r8, 0x4018ae51, &(0x7f0000000100)={0x186, 0xb83, 0xfffffffffffffff8}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 06:42:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) 06:42:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:17 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000740)='./file0\x00', 0xf904ad215532e98d, 0x84) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x96000}, 0xc, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB="540040f6e4dd883e", @ANYRES16=r4, @ANYBLOB="04002abd7000fddbdf250500000008000100000000000c000600010000000000000008000100000000000c00050004000000000000000c00080002000000000000000c0005002000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40910) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) [ 350.066366] protocol 88fb is buggy, dev hsr_slave_1 [ 350.071477] protocol 88fb is buggy, dev hsr_slave_0 [ 350.076593] protocol 88fb is buggy, dev hsr_slave_1 06:42:17 executing program 4 (fault-call:6 fault-nth:36): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:17 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc, 0x2000000}) 06:42:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000000)=""/122) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r2, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x10, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) 06:42:17 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x32]}, &(0x7f0000000040)=0x6) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) 06:42:17 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) getpeername$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000100)='lo\x00') r6 = semget$private(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$IPT_SO_GET_ENTRIES(r8, 0x0, 0x41, &(0x7f0000000240)={'mangle\x00', 0x1000, "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"}, &(0x7f0000001280)=0x1024) semctl$SEM_STAT(r6, 0x0, 0x12, &(0x7f0000019380)=""/102385) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000200)={0x1f}) semctl$GETZCNT(r6, 0x4, 0xf, &(0x7f00000001c0)=""/15) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) 06:42:17 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:17 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) [ 350.490130] FAULT_INJECTION: forcing a failure. [ 350.490130] name failslab, interval 1, probability 0, space 0, times 0 [ 350.583270] CPU: 1 PID: 23214 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 350.590350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.599712] Call Trace: [ 350.602320] dump_stack+0x172/0x1f0 [ 350.605970] should_fail.cold+0xa/0x1b [ 350.609875] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 350.614991] ? lock_downgrade+0x880/0x880 [ 350.619156] __should_failslab+0x121/0x190 [ 350.623400] should_failslab+0x9/0x14 [ 350.627209] kmem_cache_alloc_node+0x26c/0x710 [ 350.631799] ? __lock_acquire+0x6ee/0x49c0 [ 350.636045] ? __dev_queue_xmit+0x1757/0x2fe0 [ 350.640554] ? find_held_lock+0x35/0x130 [ 350.644632] __alloc_skb+0xd5/0x5f0 [ 350.648271] ? skb_scrub_packet+0x490/0x490 [ 350.652605] ? mark_held_locks+0x100/0x100 [ 350.656954] alloc_skb_with_frags+0x93/0x590 [ 350.661370] ? mark_held_locks+0x100/0x100 [ 350.665610] ? avc_has_perm+0x379/0x610 [ 350.669591] ? find_held_lock+0x35/0x130 [ 350.673663] sock_alloc_send_pskb+0x72d/0x8a0 [ 350.678172] ? packet_cached_dev_get+0x148/0x260 [ 350.682946] ? sock_wmalloc+0x120/0x120 [ 350.686933] ? lock_downgrade+0x880/0x880 [ 350.691098] ? kasan_check_read+0x11/0x20 [ 350.695261] packet_sendmsg+0x1a16/0x6440 [ 350.699416] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 350.704958] ? rw_copy_check_uvector+0x2a6/0x330 [ 350.709727] ? sock_has_perm+0x209/0x2a0 [ 350.713802] ? packet_notifier+0x840/0x840 [ 350.718073] ? selinux_socket_sendmsg+0x36/0x40 [ 350.722747] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.728292] ? security_socket_sendmsg+0x8d/0xc0 [ 350.733061] ? packet_notifier+0x840/0x840 [ 350.737313] sock_sendmsg+0xd7/0x130 [ 350.741050] ___sys_sendmsg+0x3e2/0x920 [ 350.745036] ? copy_msghdr_from_user+0x430/0x430 [ 350.749807] ? mark_held_locks+0x100/0x100 [ 350.754056] ? kasan_check_read+0x11/0x20 [ 350.758220] ? __might_fault+0x12b/0x1e0 [ 350.762288] ? find_held_lock+0x35/0x130 [ 350.766359] ? __might_fault+0x12b/0x1e0 [ 350.770448] __sys_sendmmsg+0x1bf/0x4e0 [ 350.774437] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 350.778768] ? kasan_check_write+0x14/0x20 06:42:17 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000040)=""/2) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="681b03326ee7273baadaba88f1c63a579e456b3037f964dedb39f56cb4b65c1596a759598f52adb7cc8dd81c0ab0e1612f780661b8ab88becd8671309bcb5afc21ad490dc4e7aa5a65f2109cd1f0871cd2daa0daa80332d99128f5cb0436312a14e4f4d67a0c5eb6096191818e611bee5bfbe8124577b1623aa87681664f020464a6223248c4567b74fb822a75ecafeed6a4c2", 0x93}], 0x1) r4 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT(r4, 0x0, 0x12, &(0x7f0000019380)=""/102385) semop(r4, &(0x7f0000000080), 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) 06:42:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200140001000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:17 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc, 0x0, [0x2]}) [ 350.783017] ? __sb_end_write+0xd9/0x110 [ 350.787095] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 350.792640] ? fput+0x128/0x1a0 [ 350.795924] ? ksys_write+0x1f1/0x2d0 [ 350.799736] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 350.804495] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 350.809266] ? do_syscall_64+0x26/0x620 [ 350.813247] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 350.818619] ? do_syscall_64+0x26/0x620 [ 350.822607] __x64_sys_sendmmsg+0x9d/0x100 [ 350.826850] do_syscall_64+0xfd/0x620 [ 350.830656] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 350.835838] RIP: 0033:0x459a59 [ 350.835853] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 350.835861] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 350.835875] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 350.835886] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 350.857962] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 350.857970] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 350.857978] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:17 executing program 4 (fault-call:6 fault-nth:37): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:17 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc, 0x0, [0x1000000]}) 06:42:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200140001000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:17 executing program 5: r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, r0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, r0) r1 = semget$private(0x0, 0x20000000101, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) semop(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) 06:42:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000000)=0x0) r8 = gettid() tkill(r8, 0x1c) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r10 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r11, 0x9) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r9, &(0x7f00000000c0)={r10, r11, 0x2}) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r12}, &(0x7f000034f000)=0x2059b000) 06:42:17 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x20400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) 06:42:18 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000180)=0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000280), &(0x7f0000000380)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$BLKFRASET(r8, 0x1264, &(0x7f0000000240)=0xffffffff) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000000)=""/220) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r6) 06:42:18 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc, 0x0, [0x2000000]}) 06:42:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200140001000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) [ 351.101629] FAULT_INJECTION: forcing a failure. [ 351.101629] name failslab, interval 1, probability 0, space 0, times 0 06:42:18 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x20, r3, 0x701, 0x0, 0x0, {0x13, 0x0, 0xfffffffffffff000}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x5}]}]}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x48, r4, 0x20c, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4800}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x29}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) [ 351.152789] CPU: 1 PID: 23528 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 351.159771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.169130] Call Trace: [ 351.171723] dump_stack+0x172/0x1f0 [ 351.175368] should_fail.cold+0xa/0x1b [ 351.179278] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 351.184395] ? lock_downgrade+0x880/0x880 [ 351.188563] __should_failslab+0x121/0x190 [ 351.192815] should_failslab+0x9/0x14 [ 351.196628] kmem_cache_alloc_node_trace+0x274/0x720 06:42:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) [ 351.201740] ? __alloc_skb+0xd5/0x5f0 [ 351.205559] __kmalloc_node_track_caller+0x3d/0x80 [ 351.210499] __kmalloc_reserve.isra.0+0x40/0xf0 [ 351.215181] __alloc_skb+0x10b/0x5f0 [ 351.218909] ? skb_scrub_packet+0x490/0x490 [ 351.222061] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 351.223234] ? mark_held_locks+0x100/0x100 [ 351.223249] ? trace_hardirqs_on+0x67/0x220 [ 351.223270] alloc_skb_with_frags+0x93/0x590 [ 351.223284] ? mark_held_locks+0x100/0x100 [ 351.223297] ? avc_has_perm+0x379/0x610 06:42:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) [ 351.223313] ? find_held_lock+0x35/0x130 [ 351.255929] sock_alloc_send_pskb+0x72d/0x8a0 [ 351.260455] ? packet_cached_dev_get+0x148/0x260 [ 351.265225] ? sock_wmalloc+0x120/0x120 [ 351.269213] ? lock_downgrade+0x880/0x880 [ 351.273374] ? kasan_check_read+0x11/0x20 [ 351.277535] packet_sendmsg+0x1a16/0x6440 [ 351.281693] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 351.287238] ? rw_copy_check_uvector+0x2a6/0x330 [ 351.292016] ? sock_has_perm+0x209/0x2a0 [ 351.296101] ? packet_notifier+0x840/0x840 [ 351.300361] ? selinux_socket_sendmsg+0x36/0x40 [ 351.305039] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.310581] ? security_socket_sendmsg+0x8d/0xc0 [ 351.315338] ? packet_notifier+0x840/0x840 [ 351.319574] sock_sendmsg+0xd7/0x130 [ 351.323291] ___sys_sendmsg+0x3e2/0x920 [ 351.327279] ? copy_msghdr_from_user+0x430/0x430 [ 351.332052] ? mark_held_locks+0x100/0x100 [ 351.336294] ? kasan_check_read+0x11/0x20 [ 351.340454] ? __might_fault+0x12b/0x1e0 [ 351.344533] ? find_held_lock+0x35/0x130 [ 351.348612] ? __might_fault+0x12b/0x1e0 [ 351.352700] __sys_sendmmsg+0x1bf/0x4e0 [ 351.356693] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 351.361032] ? kasan_check_write+0x14/0x20 [ 351.365288] ? __sb_end_write+0xd9/0x110 [ 351.369367] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 351.374915] ? fput+0x128/0x1a0 [ 351.378295] ? ksys_write+0x1f1/0x2d0 [ 351.382107] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 351.386868] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 351.391625] ? do_syscall_64+0x26/0x620 [ 351.395599] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.400962] ? do_syscall_64+0x26/0x620 [ 351.404944] __x64_sys_sendmmsg+0x9d/0x100 [ 351.409188] do_syscall_64+0xfd/0x620 [ 351.413004] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.418211] RIP: 0033:0x459a59 [ 351.421408] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 351.440326] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 06:42:18 executing program 4 (fault-call:6 fault-nth:38): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:18 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x102100, 0x65) ioctl$KDDISABIO(r1, 0x4b37) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) r4 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1000, 0x100) write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x3, 0x2, 0x40}, 0xa) 06:42:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r4) setfsgid(r4) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r5) setfsgid(r5) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r6) setfsgid(r6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x4}, [{0x2, 0x8, r2}, {0x2, 0x0, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x4, 0xee00}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x0, r8}], {0x10, 0x3}, {0x20, 0xc}}, 0x5c, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r9 = socket$inet(0x2, 0x4000000805, 0x0) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, r11}}) r12 = gettid() lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r13) setfsgid(r13) r14 = getegid() r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r15, 0x9) r16 = gettid() tkill(r16, 0x1c) r17 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, r18}}) r19 = gettid() tkill(r19, 0x1c) r20 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, r21}}) r22 = gettid() tkill(r22, 0x1c) r23 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, r24}}) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r25) setfsgid(r25) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r27 = dup(r26) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000440)={0x4, 0x8, 0x7fffffff, 0x0, r27}) r29 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, r30}, 0x7}) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r31) setfsgid(r31) r32 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, r33}}) sendmsg$netlink(r1, &(0x7f00000005c0)={&(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc, &(0x7f0000000400)=[{&(0x7f00000002c0)={0xcc, 0x3f, 0x200, 0x70bd2b, 0x25dfdbff, "", [@generic="0e330c19d624c537d2ccc9ba718f6f8314f3a4ddadc1eac106f5b12b53be6f6d4596c6343a2d53822556134636b23dd2fc2721e0314553193e61c342e8bcde748c34fab75a3a2df6fb442b63d3cb9c22b8a0c4ef03e15225cca436595140bf74140b7d0394ab7f48c5bf0f861b4803cbb08f45d787804b5b298919994b3a86e331877f2d30c5ee2bf21fdd3c18b2ccc4b54fd38a80f0b5ca7648508f8b8be0a75d8ecb760e5f8b73d70342e998153ab7bd", @typed={0x8, 0x37, @uid=r11}]}, 0xcc}, {&(0x7f00000003c0)={0x18, 0x3d, 0x400, 0x70bd27, 0x25dfdbfe, "", [@generic="a66c69e60f"]}, 0x18}], 0x2, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r12, 0xee01, r13}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, r14}}}, @rights={{0x14, 0x1, 0x1, [r15]}}, @cred={{0x1c, 0x1, 0x2, {r16, r18, r8}}}, @cred={{0x1c, 0x1, 0x2, {r19, r21, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r22, r24, r25}}}, @rights={{0x14, 0x1, 0x1, [r28]}}, @cred={{0x1c, 0x1, 0x2, {r7, r30, r31}}}, @cred={{0x1c, 0x1, 0x2, {r7, r33, 0xee01}}}], 0x110, 0x20000001}, 0xc4) r34 = socket$inet_sctp(0x2, 0x5, 0x84) r35 = dup3(r9, r34, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r34, 0x84, 0x64, 0x0, 0x0) sendto$inet(r35, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r34, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r34, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r35, 0x84, 0x10, &(0x7f000059aff8)={r36}, &(0x7f000034f000)=0x2059b000) 06:42:18 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:18 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @initdev}}}, 0x0) r4 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, r4) keyctl$get_persistent(0x16, r3, r4) keyctl$revoke(0x3, r4) r5 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r5) [ 351.448053] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 351.448062] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 351.448070] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 351.448077] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 351.448088] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 [ 351.607348] FAULT_INJECTION: forcing a failure. [ 351.607348] name failslab, interval 1, probability 0, space 0, times 0 [ 351.618657] CPU: 0 PID: 23722 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 351.625595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.634961] Call Trace: [ 351.637563] dump_stack+0x172/0x1f0 [ 351.641208] should_fail.cold+0xa/0x1b [ 351.645116] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 351.650236] ? check_preemption_disabled+0x48/0x290 [ 351.655271] __should_failslab+0x121/0x190 [ 351.659521] should_failslab+0x9/0x14 [ 351.663332] kmem_cache_alloc+0x47/0x700 [ 351.667401] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.672952] ? check_preemption_disabled+0x48/0x290 [ 351.677978] ? lock_acquire+0x16f/0x3f0 [ 351.681976] skb_clone+0x156/0x3e0 [ 351.685526] dev_queue_xmit_nit+0x309/0xa10 [ 351.689858] ? validate_xmit_xfrm+0x1f7/0xda0 [ 351.694374] dev_hard_start_xmit+0xa7/0x980 [ 351.698716] __dev_queue_xmit+0x2704/0x2fe0 [ 351.703049] ? refcount_add_checked+0x33/0x70 06:42:18 executing program 5: semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) r2 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT(r2, 0x0, 0x12, &(0x7f0000019380)=""/102385) semop(r2, &(0x7f00000000c0)=[{0x4, 0xa6, 0x800}], 0xad) 06:42:18 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc, 0x0, [0x0, 0x2]}) 06:42:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:18 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r1, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r2, 0x9) r3 = dup3(r0, r0, 0xb3fd23bbb5845cea) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r4) [ 351.707561] ? netdev_pick_tx+0x300/0x300 [ 351.711724] ? packet_cached_dev_get+0x148/0x260 [ 351.716495] ? sock_wmalloc+0x120/0x120 [ 351.720484] ? lock_downgrade+0x880/0x880 [ 351.724642] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.730184] ? skb_copy_datagram_from_iter+0x441/0x660 [ 351.735465] ? kasan_check_read+0x11/0x20 [ 351.739615] dev_queue_xmit+0x18/0x20 [ 351.743411] ? dev_queue_xmit+0x18/0x20 [ 351.743427] packet_sendmsg+0x3bb0/0x6440 [ 351.743443] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 351.743457] ? rw_copy_check_uvector+0x2a6/0x330 [ 351.743492] ? packet_notifier+0x840/0x840 [ 351.743515] ? selinux_socket_sendmsg+0x36/0x40 [ 351.770746] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.776287] ? security_socket_sendmsg+0x8d/0xc0 [ 351.776305] ? packet_notifier+0x840/0x840 [ 351.776324] sock_sendmsg+0xd7/0x130 [ 351.776340] ___sys_sendmsg+0x3e2/0x920 [ 351.776358] ? copy_msghdr_from_user+0x430/0x430 [ 351.776382] ? mark_held_locks+0x100/0x100 [ 351.776399] ? kasan_check_read+0x11/0x20 [ 351.776419] ? __might_fault+0x12b/0x1e0 [ 351.776433] ? find_held_lock+0x35/0x130 [ 351.776452] ? __might_fault+0x12b/0x1e0 [ 351.793098] __sys_sendmmsg+0x1bf/0x4e0 [ 351.802052] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 351.802071] ? kasan_check_write+0x14/0x20 [ 351.802098] ? __sb_end_write+0xd9/0x110 [ 351.802117] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 351.802129] ? fput+0x128/0x1a0 [ 351.802144] ? ksys_write+0x1f1/0x2d0 [ 351.834950] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 351.834966] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 351.834982] ? do_syscall_64+0x26/0x620 [ 351.834996] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.835009] ? do_syscall_64+0x26/0x620 [ 351.835029] __x64_sys_sendmmsg+0x9d/0x100 [ 351.835046] do_syscall_64+0xfd/0x620 [ 351.835064] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.835076] RIP: 0033:0x459a59 [ 351.835089] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:42:18 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000000)='./file0\x00', 0x2000, 0xa0) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000280)=@md5={0x1, "cb4b492c609793b719550ee50646149d"}, 0x11, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) fcntl$dupfd(0xffffffffffffffff, 0xc0a, 0xffffffffffffffff) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) request_key(0x0, &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)='syz', 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x8) exit_group(0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x1) fallocate(r4, 0x0, 0x0, 0x1000f4) rt_sigprocmask(0xfc1b454ed037b6cd, &(0x7f0000000180)={0xf313}, &(0x7f00000003c0), 0x8) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4001) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x90, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000040)="7a4c16b0821cea0d3848670a583f9b1579c8732ef6aaf108ef1901a35053f486eab7d276fcaba32d008b8c7b62a8d36aa34269aa202f83c258e111", 0x209, r3) 06:42:18 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc, 0x0, [0x0, 0x1000000]}) [ 351.835097] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 351.852455] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 351.852464] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 351.852473] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 351.852482] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 351.852491] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:19 executing program 4 (fault-call:6 fault-nth:39): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:19 executing program 0: ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x40108) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=r5, @ANYRES64], &(0x7f0000a8a000)=0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="4d000000ab8f2a4f93ee43c37cf5fa204c16687851bcf43482c0b0d6d50d2470eb552602c7914ff2e0fd03ae6820bfcb7837e82a7adbc18a7243ef7972a25c2e2d4f1391a2f8d8aa29be1d000000000000031a73b4b1872e713a48237ff4f155a017818b32eca1ab68838a987096b8256564f377d1897bf8554b91302ae67f8716c063e744c87f9057a35d53b14dd04cfd043b8890259359634dfaf9c724f675120fac03fca58f205ddec16f3bd058e92e36e1837738e21fed3861edb0c2e891b4565b63d099598f646e5666b61f035bf3b8454d000000000000000000"], &(0x7f00000004c0)=0x55) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r8, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r9, 0x9) fcntl$getown(r9, 0x9) r10 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x10, &(0x7f0000000040)={r7, 0x40000000}, &(0x7f000034f000)=0xfffffe6c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r12 = dup(r11) ioctl$SNDRV_TIMER_IOCTL_STATUS(r12, 0x80605414, &(0x7f0000000400)=""/157) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) connect$bt_rfcomm(r14, &(0x7f0000000280)={0x1f, {0x1, 0x89, 0x80, 0x8, 0x9, 0xff}, 0x80}, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x0, 0x0, 0x8000, 0xa4, 0x12}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r12, 0x84, 0x78, &(0x7f0000000240)=r15, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r12, 0x0, 0x1, &(0x7f0000000000), 0x4) 06:42:19 executing program 5: r0 = semget$private(0x0, 0x1, 0x2cd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10, 0x78bd837344425d17) r2 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x80, 0x10800) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_none='cache=none'}, {@posixacl='posixacl'}, {@access_client='access=client'}, {@nodevmap='nodevmap'}, {@uname={'uname'}}], [{@appraise='appraise'}]}}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) 06:42:19 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc, 0x0, [0x0, 0x2000000]}) 06:42:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r1, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r2, 0x9) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r4, 0x9) r5 = dup3(r3, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r6) 06:42:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:19 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:19 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='\x06\x00\x00\x00\x00\x00\x00\x00lv\x05\x00\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000080), 0x0, r3) [ 352.274942] FAULT_INJECTION: forcing a failure. [ 352.274942] name failslab, interval 1, probability 0, space 0, times 0 06:42:19 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) sendmsg$nl_netfilter(r4, &(0x7f0000001500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x124c, 0x10, 0x2, 0x300, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x1}, [@nested={0x238, 0x5f, [@typed={0x10, 0x75, @str='security\x00'}, @typed={0x14, 0x57, @ipv6=@mcast2}, @generic, @generic="234cf8381f4a27dee805aa413155cbb996dda9a858e227728b092693ded4f5a48be53a4be06024a801ba7c47a0d913637285a98a51fa9438a0c71781fe5829eb0c9c14d6a7c76ef1d97c999fdbbb1678b17b402a4c393e8f59e1cf94e1f3f2af5e211431596cc8d6a7b342cde8ef2a97001ae0295d4412f42cce0b504301b8", @generic="6d7015afc66e499b82909c54fbb45210a630f562e08d129b84a595711759dd8f43f07ecd9ba3d5bec76447eb16deb20576f2f62aa137fef6ccf9e0ab9cdb0f0b7975182156b4e8", @generic="47662adaa43c3f8c9109bd822ed3a820a18f6758537622d92ce29fdabdc87f614e249aebbd7c96dde5206b26f5f50b3233364b6ac56186997a33ce32a7a928e8f2fb1d6a354ac15359d4fa2df5faa8ffcadd9bcc439885", @typed={0x8, 0x2c, @ipv4=@rand_addr=0x125e5c2e}, @generic="4b07e9d439013876b8ee65494392480205f29faf8ae3db66ef4d87c5cdb6f0c48992d63fc60b5b3a6fc9d391e6d257cbcfa443696405fff7e16cb06d43fb268f2b790c2859f5f59b8b2080e77de94c4bccb5ae80177b6d1ca71334bd680da23d3d5a541af0b329e303c213f8a8bea1b9ec0a1198805c037150d254833a0d150f5a30221d09857614d6e06665f3920e9e745d68d4ffbced3e5d63509223d2388dab30c96d1c68c605317eb4176c61fcfa9d2012f86668268d71b1ab8de376d6970c518a68b00af120", @generic="481c418d016cbbe94e0ee7ed90fb1ffda3281b288b5d7a2f174d", @typed={0x8, 0x42, @uid=r7}]}, @generic="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"]}, 0x124c}}, 0x4048) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) [ 352.323612] CPU: 0 PID: 23965 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 352.330598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.340080] Call Trace: [ 352.340107] dump_stack+0x172/0x1f0 [ 352.346309] should_fail.cold+0xa/0x1b [ 352.350219] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 352.355331] ? lock_downgrade+0x880/0x880 [ 352.359489] __should_failslab+0x121/0x190 [ 352.363843] should_failslab+0x9/0x14 [ 352.367653] kmem_cache_alloc_node+0x26c/0x710 [ 352.372243] ? __lock_acquire+0x6ee/0x49c0 [ 352.376486] ? __dev_queue_xmit+0x1757/0x2fe0 [ 352.380991] ? find_held_lock+0x35/0x130 [ 352.385067] __alloc_skb+0xd5/0x5f0 [ 352.388709] ? skb_scrub_packet+0x490/0x490 [ 352.393042] ? mark_held_locks+0x100/0x100 [ 352.397287] ? trace_hardirqs_on+0x67/0x220 [ 352.401744] alloc_skb_with_frags+0x93/0x590 [ 352.406157] ? mark_held_locks+0x100/0x100 [ 352.410395] ? avc_has_perm+0x379/0x610 [ 352.414377] ? find_held_lock+0x35/0x130 [ 352.418454] sock_alloc_send_pskb+0x72d/0x8a0 06:42:19 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc, 0x0, [0x0, 0x0, 0x2]}) 06:42:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) [ 352.422965] ? packet_cached_dev_get+0x148/0x260 [ 352.427733] ? sock_wmalloc+0x120/0x120 [ 352.431718] ? lock_downgrade+0x880/0x880 [ 352.435879] ? kasan_check_read+0x11/0x20 [ 352.440044] packet_sendmsg+0x1a16/0x6440 [ 352.444191] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 352.444216] ? rw_copy_check_uvector+0x2a6/0x330 [ 352.444238] ? sock_has_perm+0x209/0x2a0 [ 352.444261] ? packet_notifier+0x840/0x840 [ 352.444281] ? selinux_socket_sendmsg+0x36/0x40 [ 352.454547] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.454563] ? security_socket_sendmsg+0x8d/0xc0 [ 352.454577] ? packet_notifier+0x840/0x840 [ 352.454595] sock_sendmsg+0xd7/0x130 [ 352.454610] ___sys_sendmsg+0x3e2/0x920 [ 352.454627] ? copy_msghdr_from_user+0x430/0x430 [ 352.454650] ? mark_held_locks+0x100/0x100 [ 352.485770] ? kasan_check_read+0x11/0x20 [ 352.485791] ? __might_fault+0x12b/0x1e0 [ 352.498722] ? find_held_lock+0x35/0x130 [ 352.498742] ? __might_fault+0x12b/0x1e0 [ 352.498777] __sys_sendmmsg+0x1bf/0x4e0 [ 352.519013] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 352.523350] ? kasan_check_write+0x14/0x20 [ 352.527602] ? __sb_end_write+0xd9/0x110 [ 352.531679] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 352.537226] ? fput+0x128/0x1a0 [ 352.540515] ? ksys_write+0x1f1/0x2d0 [ 352.544327] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 352.544343] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 352.544358] ? do_syscall_64+0x26/0x620 [ 352.544372] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.544385] ? do_syscall_64+0x26/0x620 [ 352.544404] __x64_sys_sendmmsg+0x9d/0x100 [ 352.544420] do_syscall_64+0xfd/0x620 [ 352.544442] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.544453] RIP: 0033:0x459a59 [ 352.544467] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 352.544475] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 352.544489] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 352.544496] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 352.544502] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 352.544510] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 352.544516] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:19 executing program 4 (fault-call:6 fault-nth:40): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:19 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc, 0x0, [0x0, 0x0, 0x1000000]}) 06:42:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="f0000000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:19 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x2, 0x30, 0x8, 0xfffffffffffffffa}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000080)={r7}, &(0x7f00000000c0)=0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @initdev}}}, 0x0) r9 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, r9) keyctl$get_persistent(0x16, r8, r9) request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000240)='0vboxnet1vmnet1?\x00', r9) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @initdev}}}, 0x0) r11 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, r11) keyctl$get_persistent(0x16, r10, r11) r12 = request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='.\x00', r11) r13 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'\xa7Yz', 0x2}, 0x0, 0x0, r12) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r13) 06:42:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:19 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc, 0x0, [0x0, 0x0, 0x2000000]}) [ 352.816286] FAULT_INJECTION: forcing a failure. [ 352.816286] name failslab, interval 1, probability 0, space 0, times 0 06:42:19 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x5) r6 = fcntl$dupfd(r4, 0x0, r5) write$P9_RSYMLINK(r6, &(0x7f0000000180)={0x14}, 0x10000015a) r7 = socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000001240)={@can={0x1d, r8}, {0x0}, &(0x7f0000001200), 0x40}, 0xa0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockname$packet(r11, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000c40)=0x14) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x20, r14, 0x701, 0x0, 0x0, {0x13, 0x0, 0xfffffffffffff000}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x5}]}]}, 0x20}}, 0x0) recvmmsg(r13, &(0x7f0000001cc0)=[{{&(0x7f0000000c80)=@tipc=@id, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000d00)=""/21, 0x15}], 0x1, &(0x7f0000000d80)=""/125, 0x7d}, 0x5}, {{&(0x7f0000000e00)=@caif=@rfm, 0x80, &(0x7f0000001440)=[{&(0x7f0000000e80)=""/93, 0x5d}, {&(0x7f0000000f00)=""/19, 0x13}, {&(0x7f0000000f40)=""/56, 0x38}, {&(0x7f0000000f80)=""/247, 0xf7}, {&(0x7f0000001080)=""/245, 0xf5}, {&(0x7f0000001180)=""/185, 0xb9}, {&(0x7f0000001240)=""/42, 0x2a}, {&(0x7f0000001280)=""/104, 0x68}, {&(0x7f0000001300)=""/204, 0xcc}, {&(0x7f0000001400)}], 0xa, &(0x7f0000001500)=""/28, 0x1c}, 0x81}, {{&(0x7f0000001540)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000015c0)=""/226, 0xe2}], 0x1, &(0x7f0000001700)=""/17, 0x11}, 0x5}, {{&(0x7f0000001740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000017c0)=""/69, 0x45}, {&(0x7f0000001840)=""/175, 0xaf}, {&(0x7f0000001900)=""/88, 0x58}, {&(0x7f0000001980)}], 0x4, &(0x7f0000001a00)=""/155, 0x9b}, 0xffffffff}, {{&(0x7f0000001ac0)=@ipx, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001b40)=""/24, 0x18}, {&(0x7f0000001b80)=""/168, 0xa8}], 0x2, &(0x7f0000001c80)=""/31, 0x1f}}], 0x5, 0x301e0, &(0x7f0000001e00)) r16 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r16, 0x40045431, &(0x7f0000000080)) r17 = syz_open_pts(r16, 0x0) ioctl$TIOCSETD(r17, 0x5423, &(0x7f00000000c0)=0x5) r18 = fcntl$dupfd(r16, 0x0, r17) write$P9_RSYMLINK(r18, &(0x7f0000000180)={0x14}, 0x10000015a) r19 = socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$RDS_GET_MR_FOR_DEST(r18, 0x114, 0x7, &(0x7f0000001240)={@can={0x1d, r20}, {0x0}, &(0x7f0000001200), 0x40}, 0xa0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r22 = dup(r21) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r23, 0x40045431, &(0x7f0000000080)) r24 = syz_open_pts(r23, 0x0) ioctl$TIOCSETD(r24, 0x5423, &(0x7f00000000c0)=0x5) r25 = fcntl$dupfd(r23, 0x0, r24) write$P9_RSYMLINK(r25, &(0x7f0000000180)={0x14}, 0x10000015a) r26 = socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r26, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r26, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$RDS_GET_MR_FOR_DEST(r25, 0x114, 0x7, &(0x7f0000001240)={@can={0x1d, r27}, {0x0}, &(0x7f0000001200), 0x40}, 0xa0) ioctl$ifreq_SIOCGIFINDEX_vcan(r22, 0x8933, &(0x7f0000002140)={'vcan0\x00', r27}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002400)={0x0, @empty, @broadcast}, &(0x7f0000002440)=0xc) r30 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r30, 0x40045431, &(0x7f0000000080)) r31 = syz_open_pts(r30, 0x0) ioctl$TIOCSETD(r31, 0x5423, &(0x7f00000000c0)=0x5) r32 = fcntl$dupfd(r30, 0x0, r31) write$P9_RSYMLINK(r32, &(0x7f0000000180)={0x14}, 0x10000015a) r33 = socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r33, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r33, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$RDS_GET_MR_FOR_DEST(r32, 0x114, 0x7, &(0x7f0000001240)={@can={0x1d, r34}, {0x0}, &(0x7f0000001200), 0x40}, 0xa0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002c80)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000002d80)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000004780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000047c0)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r38 = dup(r37) ioctl$PERF_EVENT_IOC_ENABLE(r38, 0x8912, 0x400200) getsockname$packet(r38, &(0x7f0000004840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004880)=0x14) r40 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r40, 0x40045431, &(0x7f0000000080)) r41 = syz_open_pts(r40, 0x0) ioctl$TIOCSETD(r41, 0x5423, &(0x7f00000000c0)=0x5) r42 = fcntl$dupfd(r40, 0x0, r41) write$P9_RSYMLINK(r42, &(0x7f0000000180)={0x14}, 0x10000015a) r43 = socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r43, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r43, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$RDS_GET_MR_FOR_DEST(r42, 0x114, 0x7, &(0x7f0000001240)={@can={0x1d, r44}, {0x0}, &(0x7f0000001200), 0x40}, 0xa0) sendmmsg$inet(r3, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="834de883fd159bdb066b3c144d33e88cc67c4c55649ad8192b30d638b9dab3c9603b26ffa29700c428eed9c05fd65a8af510932d11b95e2f859cab116a87cec5dc6b87aa61613600c9e3b319ba47c85af67a4eb7f6cec0", 0x57}, {&(0x7f0000000180)="1b0af5b23f81ebd1b853a7db1be582df42f450624d4e35ffcd305bce311fdca3f4640d405c8bcb7f06d96421f73283ffff96ea5150dd71b3214e8716786083c57792cf3dd632b8d054ddbe4d532367d3249801d1e55fb388b68db2777eea9ee22be044a9795b4ba9b4e01a6d56ecc1f1a8a1716225fc505dd4dab52e18e68f9d55edc196ab4f7f35b30dbd4c541d4d7ee6391fca3ddd0288b8804a1600ffbbb506972742d680686c5bd9d7c3fb7e0f1b5c1546f62ac0a63879c9c5f9ab180b0622564f00477d81ff35540ea4a1770d31fa12", 0xd2}, {&(0x7f0000000280)="27ed7afd7b2ba1dc9a5da32420885634bf3dce67f98d8887d7ff4d985e65d8edaa01d212a5ac10b447b6295eae94950b522201715d6f93a30c5d911534c14de499b35cfca45e6832b511407ecd7dbddd5e739938fa", 0x55}, {&(0x7f0000000100)="a2ce2ea9a405c7ad3ea9cf07a0cb87549fb10ab4d4d77db9d257261aba8ffb640875b4c5163257eb454d6dcb486ebc7ce996", 0x32}], 0x4, &(0x7f0000000340)=[@ip_retopts={{0x30, 0x0, 0x7, {[@noop, @rr={0x7, 0x17, 0x8, [@empty, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x1b}, @empty]}, @ra={0x94, 0x6, 0xf2}]}}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@noop, @cipso={0x86, 0xf, 0x80, [{0x2, 0x9, "26a915f86148dd"}]}, @generic={0x0, 0x3, "ba"}, @cipso={0x86, 0x4d, 0xfff, [{0x0, 0x8, "9149353d179e"}, {0x6, 0xa, "ca10066fb1f6812d"}, {0x5, 0xd, "729e16f140fab459384381"}, {0x6, 0x11, "d99cced5e474d89d15b85197b1ca93"}, {0x5, 0x7, "a8eeb6b77f"}, {0x7, 0xd, "eaea6462e2e62f70f8ea55"}, {0x0, 0x3, '='}]}, @lsrr={0x83, 0x17, 0x1, [@multicast1, @rand_addr=0x23d, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @cipso={0x86, 0x33, 0x400, [{0x7, 0x11, "2cd38c89aa3079690201871e826424"}, {0x0, 0x7, "de11884f1d"}, {0x6, 0xe, "d8d71606c1732389a1fec9d9"}, {0x2, 0x7, "6b89eb48a2"}]}, @timestamp={0x44, 0x10, 0x5, 0x28f886cf6bd2f394, 0x5, [{[], 0xfffffffb}, {[], 0xfffffb74}, {}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xbc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x985}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast1, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x7f, 0x0, 0x1, [{[@multicast2], 0x4}]}, @lsrr={0x83, 0xb, 0x0, [@multicast1, @remote]}, @ra={0x94, 0x6, 0x6}, @timestamp={0x44, 0x8, 0x8, 0x0, 0x9, [{[], 0x80000000}]}, @generic={0x88, 0x7, "9180294ca7"}, @generic={0xa0, 0x3, ' '}, @rr={0x7, 0x13, 0xa6, [@local, @rand_addr=0x7f, @local, @loopback]}, @lsrr={0x83, 0x2b, 0x1f, [@rand_addr=0x8, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr, @empty, @multicast2, @multicast1, @local, @remote, @broadcast, @loopback]}, @generic={0x7, 0xa, "46970ec1ec7aefda"}, @generic={0x375b1c4e8dc7289f, 0x2}]}}}], 0x210}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)="699d893d1a21543b9ea256ea6f7618d2cdc8e2625d4e7c4c5d0e55a6923f08d50a8830c84390ea767691d17add6bf015e9b8fd62f24ce619a7308cf29ac25a907ddfddbfe4a8f7a66194aa4cef0cc897d6014f64fa0b63fd87c9f8880e612ed82ab2fad9893d4a567a79ebcdded8c329b7e8de5f5ebf9f70eed1b333eb30e6c77c6d7a49e36cf961ce36502e0058864261b9fbdd661963535f0b13186a8cd58614e9634145c0e4e5ac815b042cf351b92711", 0xb2}], 0x1, &(0x7f00000006c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xb0cd}}, @ip_retopts={{0x68, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0x7f, [@dev={0xac, 0x14, 0x14, 0x28}, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x13}, @remote, @loopback, @remote]}, @ssrr={0x89, 0x3, 0x7}, @ssrr={0x89, 0xf, 0x4, [@multicast2, @rand_addr, @dev={0xac, 0x14, 0x14, 0x12}]}, @noop, @timestamp={0x44, 0x24, 0x5, 0x3, 0xa, [{[], 0xaee}, {[], 0x65}, {[@multicast1]}, {[@multicast1], 0x7fff}, {[@multicast2], 0x2}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x69}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @rand_addr=0x1, @remote}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@noop, @cipso={0x86, 0x47, 0x4, [{0x2, 0x9, "6c7d1016d073f2"}, {0x6, 0x6, "ba5c0b12"}, {0x6, 0x11, "7f1c93bdffb60ed8df8a883da19c28"}, {0x1, 0x4, "fbbc"}, {0x0, 0xf, "00f78ca4ee06c75d6ee4440e72"}, {0x1, 0xe, "b037e7f6066791744add5c3a"}]}, @generic={0x86, 0x8, "1439e3075945"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x80, 0x0, 0x7, {[@ra={0x94, 0x6, 0x6}, @lsrr={0x83, 0x2b, 0x6e, [@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @loopback, @local, @rand_addr=0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast]}, @timestamp={0x44, 0x3c, 0x1f, 0x1, 0x1, [{[], 0x9}, {[@multicast2], 0x3}, {[@local], 0x3}, {[@local], 0x7}, {[], 0xb13}, {[], 0xffff}, {[@rand_addr=0x2]}, {[], 0x4}, {[@initdev={0xac, 0x1e, 0x0, 0x0}], 0x4}]}, @end, @end]}}}], 0x1b0}}, {{&(0x7f0000000880)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000b00)=[{&(0x7f00000008c0)="f73b187c6e7767d0a9a1f86fa31dee23816a56707020356072731ef03e9641", 0x1f}, {&(0x7f0000000900)="2f618f669442e958dedfb75e4851977028efccf791dcec7a8a87b6d0a3f3296244eefb799b8d1ff08eda6d9f95a1d893facf5e336f33a8097ea655178bd681191266bf20b8626bfd8727b2b45efc6e4236972e9cfc17436519e42bbe1609811a720d61ffee3c0fe5e4bb8a1e5d95b831220c164a7c7531d5241d022358aa469f1ee8bbf36eb08dece1636f6b7edff02be3d7286bc836296aa33e44f58fc2a63b878605fbe6491b5aaefffb9ef911a4e00bbe9232aa0cb15695b06ae788", 0xbd}, {&(0x7f00000009c0)="685daa1de55a699867daac6ef63208e9cbb000c7af4c14a0872a0868d20fb7f9cfa703e85086e5d7f9df209be91567e964f9ed3b29f98bf155ed2521eb0755915cbe80754f11907f12220e9c01", 0x4d}, {&(0x7f0000000a40)="255d1049a7fb2ac8d66270cb554361ad1777ca8b8ac380e30b151b0425b39d5f1e53b942e422653b580d263a358f8130314e3bdc4385031cfbb7d8ca24b6c6dad36e71d242cdb0603d6ede32d1f2b96df9446f0d268555e402415892f4de8b15856eca125ffa23f2ac22bb81aa0284bef9807bfa8f8be8742eb4dfdf1c635b7e8614ee2385e2fa6a491c48800ce23dc32fc8eb614fd08f6e257384", 0x9b}], 0x4, &(0x7f0000001e40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @broadcast, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x8, 0x1, 0x8, [{[], 0xcc4}, {[], 0xd8}, {[@dev={0xac, 0x14, 0x14, 0x29}], 0x7}, {[], 0x400}, {[], 0x1}]}, @lsrr={0x83, 0x7, 0x3, [@dev={0xac, 0x14, 0x14, 0x24}]}, @lsrr={0x83, 0x17, 0x8, [@local, @dev={0xac, 0x14, 0x14, 0x1c}, @broadcast, @multicast1, @multicast2]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, @ip_retopts={{0x50, 0x0, 0x7, {[@end, @generic={0x83, 0x10, "d10cf59fece0681dc4dd46d975a6"}, @end, @ra={0x94, 0x6, 0x9}, @generic={0x0, 0x6, "75441f1b"}, @timestamp={0x44, 0x20, 0x3f, 0x1, 0x0, [{[], 0x4ade}, {[], 0x8000}, {[@dev={0xac, 0x14, 0x14, 0xc}], 0x8001}, {[], 0x3}, {[@multicast1], 0x3}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x50}}], 0x110}}, {{&(0x7f0000001f80)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000002100)=[{&(0x7f0000001fc0)="33cdac0503719d654a1e5e5b1205aab6926698d2213ae4d24d782c9a2411", 0x1e}, {&(0x7f0000002000)="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", 0xfb}], 0x2, &(0x7f0000002480)=[@ip_retopts={{0x28, 0x0, 0x7, {[@noop, @rr={0x7, 0xb, 0x8, [@local, @dev={0xac, 0x14, 0x14, 0x2b}]}, @rr={0x7, 0xb, 0x81, [@rand_addr=0x80000001, @remote]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r20, @loopback, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty, @broadcast]}, @timestamp={0x44, 0xc, 0xd7, 0x3, 0x9, [{[@broadcast], 0x37a14f64}]}, @ssrr={0x89, 0x1b, 0x5, [@broadcast, @local, @multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @ssrr={0x89, 0x17, 0x80, [@rand_addr=0x1000, @dev={0xac, 0x14, 0x14, 0x10}, @broadcast, @rand_addr=0x5, @loopback]}, @cipso={0x86, 0x57, 0x4, [{0xe, 0xe, "be5b2fbbcfcea99de95193e2"}, {0x0, 0x4, "7db1"}, {0x2, 0x8, "050d83ec99b7"}, {0x429533cdbfc4c0c9, 0xb, "fde90f19484f2eaa87"}, {0x0, 0x12, "e21a4f7eb7ed6a92fc10355929409578"}, {0x5, 0x5, "9a36ce"}, {0x3bb98dea7ab24a5, 0xb, "9424083d81fdaf8e96"}, {0x6, 0xa, "ae2cb259dbecd46e"}]}, @ra={0x94, 0x6, 0x7}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r28, @broadcast, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r29, @multicast1, @local}}}], 0x1a8}}, {{&(0x7f0000002640)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a40)=[{&(0x7f0000002680)="14946b15797435f36a9a64f4b45e5166517a0c24d9faf3e5e52e1020fbb24dd71e2d33deb8fa9d7ce2cd2bd428c77dd53f0cf689d1daafa841c0ccc28d37db366bc51768a6d1a4b27467a0ba98703d52041185e4c623f7c88268baa099a196a623024d04c9e2745b732924", 0x6b}, {&(0x7f0000002700)="afa1a7e0a664f0799b2ccf6861b924d4cccf276d4a8f603b244aabe48fd6be54aee01ceb4b4688fa77dd706e52db4349720549345a140b89d768a49f310b0005b4817948ed852abd15048bdaa0b007d03a8b506201cb560eb8dfe4643f93478aa6e69fa877271e155482ae9b16d79b3ee809c7ba1b8e130d984a8b7d781b9e4e48dacb0b78e5b8d0769ee0168871b5cd38c7b8862d72798c0f9b2221cc2eba5d558ca09eebc157f5e98b1e48d02c43333ba5713e1567e7431000de79ee3d03a3fa2f7f98a915aa366af097a070e10f6e7c17006a64acd3e171f130c54a45f924", 0xe0}, {&(0x7f0000002800)="d06e5fb88b5c90ef52591f2a7418bed1ef085e44fca9dd4d3213cb863ef1ad3070e7be0136e9a0a57c798f88bedbaab8e7efd487a0df2f18292e48a1d145e1b779f42bfad9a8967df6cbfa33f90a5f822be955b2418429802ee0c9", 0x5b}, {&(0x7f0000002880)="02f3736a9a077a37e2e377e2b40fcd68d36c3d9e3769d71a7ce013d8c1fe4969765fae94f297239a82837d1c06a16d171147df516cdcc6db90c2ba7d0f1c93e472d8f6c53dc326c80193dbf12201bf489045545b09c7f8a2a2a2b4c39b5b17bf7eed1dd197e87646da19f959d9ca0b603dd76d6e2e59c7e226465ba540d7c4a76d77b45b240244cc2855fbcf6275062621dedce90879ead578520f48700a828c1a29ca6590f8", 0xa6}, {&(0x7f0000002940)="cc8ffff8c56290aa48c7e5e8d4ed7ec62b53460d7d7cdb6939de13e25838e18f0c5e530f7ed3150fda644fa0b89eb2cb6dd150a25606941bb6af71c0ae374921f0e5ebbc7f7c07b1a7cfe29bfd9f8b1cfd1eb1636a704b0f710710af79a90906923acf7a6b8cda", 0x67}, {&(0x7f00000029c0)="78347d7cd6aa0b07860895bf6e10b312a28fb00404eae542ccfc95ca1891e3a93ef42dbc6e46671354da5a4f4d33fd9226da6753a34cff1595c0598f982ea7330b", 0x41}], 0x6, &(0x7f0000002ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r34, @dev={0xac, 0x14, 0x14, 0x25}, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb1000000}}], 0x68}}, {{&(0x7f0000002b40)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000002c40)=[{&(0x7f0000002b80)="273deb0e59f43c5af962ed719c013c2ea8ec93af1f6701b303b0be1b240eb52a914c4217674ce5294e1397acfd847c18d725fe40175a0a2aaa10324a6c73bb8df48942ceabbeb8468847758dc1438c3e566e1bcef23996e7cd55e1ceed9d1820240830b60c99e9ff1c092880faeb61204052592a5fdd5c55fc9439b9dad7d2674387ef8f726ed42ce9f6cf5ddd6f56", 0x8f}], 0x1, &(0x7f0000002dc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r35, @multicast2, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x34, 0x0, 0x7, {[@noop, @end, @rr={0x7, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x1b, 0x10, [@multicast2, @remote, @broadcast, @broadcast, @remote, @remote]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0xb8}}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000002e80)="a3a638a07c4fa6c755d2d2c9046070bebf7913f7ea527639ba381cbd6dda5b517d4ea8b929936a0b90f076aca25209c7e4f3e5c19c99ed182e3d63add947d56161254ef3fb7322933a0d5e5cd68b1bf1bf00c247b7f8a37bc62917b865d4d4376be5106d3d5d25511bedb9569d9597972c3a484eb660809489c558fb7447ce638265ac89c9f8c13af2d546a1c619d474f44b9a0afb86ea", 0x97}, {&(0x7f0000002f40)="6d0e46e19cea041f73664fe04aff37c317f8e08d8f6d52baf841a307fb6b5cbf868e8eb7cac3aa90398d7fb2bf5854638562de5b77c2bc90ec8f95f2da4a82e76c852dd7e70861d5118eaa5911bd7b4b34697d542d1f9ba40e24fb8637f2f312259554700cb89f2c0e48e51cd070bee79c381f89b52da9864c3acb962c7a2010242d03eeef71ff082355deef4ee7edff8317ab4baba4cc38", 0x98}, {&(0x7f0000003000)="a8747431d036d63f8c5fd82c84d4fea15f93b104c139a5c3afa3eb00a962032cd5b4fbed956b6c5d223641b613399f9c95f3431222cb566b0a35001216671daa2bec4c8f07fc124bd9ef91fa", 0x4c}, {&(0x7f0000003080)="50f38e29811c75776275fad1134180d0987f22538734ecaeedac4222878bf8988f779fc1fdc7d98469510c46fb376adfd90b6d3e897a92c3b699d318b5c848b9852f4651da788d79c8259f98188b5e262b98d2e360851a91fbc75a93cce410e77bf7131b9ddc11cb628a2ce49c9a8eec667cc054456bdaa7d7528016166b02ec945123fc72a08f361ddc3340e1bcf246fa991932e0e1932efb9a9d5420d09f68d303e4dc3ceb124124f86198aef7281c705baa028c0457e25b728c00d79c47ab593681b56c2ff0a4ad3b4e25e0cd9c06f644d6187d9349397f154746913849df53d29d09", 0xe4}, {&(0x7f0000003180)="70cccee1f5bac90a23f113ceae7c2fe03931c75cb34fbacf91b015367d3d05b49f6554a0d384e0db497e3e0bbc67e4ca4fbe37d65cf761347c43bb135d60e591c239089e02224ad2af9132f265ea157f3e593d89782b0ca4a83dfe5d892c43", 0x5f}, {&(0x7f0000003200)="4e310053fd17fe1905c3cf16327301c0978822fdc415281eedd2c5b8a626e0aad03c4ede67ef0b6e65cfdcb40bea58adfe7431040f01deccb07cf8185d63bb3566bfd3d10eada5f48fbd80bbf92f1eeee89fded11a4a72f9", 0x58}, {&(0x7f0000003280)="9565437289725d59e40d60355bae4e66c3a87040190b00c36ec085d3768118254dc16dd436899228a5e5c14231912874c792c44515b9f4ee51ee168122c7b495ff1acb68c33542f0cddd7315757f4cbd1af2ee625ebc40e0fede1ee8123ffabcadff478b85dd6b28ec16f61c3a", 0x6d}, {&(0x7f0000003300)="4d73dcf32bc52dcd5859de7da812ef0f7da08a8efe6222d70559656151f8b600f3cb51efe56f4a54155ce96f4484750588b56beb498e3e9b8e93294fd3294bec9028551c0848df2b1a00e267f2a82f45ec8caad677bb689b637e95ada740405afaa454138dedf2c4d9d7ff7e830d27cca48d8f53a9b94570686eefdaea3aee0672aa201a55097f749c1ac832d53ae097f84872f8438d80b8692f40750bcc9c51f3aff73f39e305293ef5f4db2c6ec9ec42d573d3ca46ef9c5efcadeb4f36d65e9028684426b7a0a894a7d15594558d9b1557c8e12149fad5aa4435111b3cf995769348c603618962c06c454718595c89a92c33125bc054efd727fa8e44bd4187c005e2a3fe12dd43c533c15052bbdaf6973e17892e79ea0d9bf45fd4c17f2a6da3c6da09a345a9b40f4e39b933ef0183c1523c1ebdc765051e207fda821332f13568ef9db2a5428d565d24d9650aa688f245c7bb71a91b640bf54961a5fe649629b7db690e4d175ffd98fad968bb9ea03f8b668e1c2bf0150eac8691b0767211e124cce8903231707c0d172cd947c41b4943da79688609d272b319e238990af7ca6c4a338fcbb07e7d7f585f63de9154f71990a20f7632e4902e016241fb4b7ef72c2d20d13f78f3ac5fda7a9ccb2eeebbf4e49dabe68b72b7414dc6e552d549944575b6c9c127cbeff4b62eca0ca98ffaba05d13960ba6e6f20a1a0f567c02031196c4d1d5b83c3af5dfa70105de28f482dda192c903a83298676f3e17b30a2895c832d4323673cfcb276829c76142a876e2f9e3fe53676918363ae3980ad1c75afb59adafda763e33c0992197ccfe0f17df3747a1ecd2ea34c7a5ffeef72f4fcce38f2809e7774bde972f273950ee137b345d9cb31241cb962f94cd11fbb916c917a4cfe67800571f71bcb15267cfac74d101577cfcdc004a55cea56253455449f60e2c248b123d2541b0b8a67def6837442c1eef86714fc122c00a0a3388bf94c2d1d8f023a0cbb90ac857068c8f00b8780d6da16afe1629c39c4b58bd1a199dc0e39a62a5a278c80732200c6e9cd91073db9444a7991fb306ac1fb675d9c3ef2fa3fb53f8af96464fcce0fbf5403f5a5ec36930df8e1bf5d4949a7e6bb73b8b07200d0cc39cf2afbdc0a486f1745f9513ea5773df8118032c391be950b8bbdcf3532ffc848f6e3d7ca7c0895095649a9c2105a2fec7f8bdecb4d4f5b038fe5d320f18658629361659ccc1ad9e60a321458676c6bac13681cbe33719d02b1a812bde81f75e5346bf31b2c3bd3a27de3a8af3813636c9e26f0d29dde4818b162b6eac2bbb95c231d297ec1f5fdad269a0b5ad18cdeacbd181cb5c109effd07ad5edd510f065864acf7ec95bb3e44771760da4949801748b842215dfbe279aa15d77011090c872bee79c8130c79a61ae4735577bfaffdcddaa563acbb0abdb33adc3acd84f4c9f710538fcda08cbc55b6cf9409b5e7231a2765c73dc95a3d4b2f23c6be750b01a5409ad8e515d6d576679c4e1de75c3ff11078c1c15d1eb8ac8a6f0807669f08e80637618e9d67250645c3a16f93ba37b7168478c0e3c9b63b70b5f7df6cdef29cdd854fdbaa32ea4bbdc0ec4c82c1db8b1ad8587e484a7b6f66b6419b8ad4a7a8c5df9e5baa85c88920d8b0fcce55eb77b7cea254ade8ef182c98438936bbc750db2f83eb1aae290a2e562a65e189e7007097887db168f1aaf5d2feda70045269a78b0e295618d135bbf338a982342311c6a643bdb577cfb10992acd8b1c9858840d40d378478dd41f725ede7e0d6cc8bd14a641f3841ceeaba455618bf71d3cf21f6b1ee13990141287d9e29c5eb08c50a3d533070d818b5a1e3ec240cf0f4dfabd4ea37a6924a49d3b0faa1d525ec63417a5f8d71e6776e5275d6f4474183cb72849ac18746eb4ab3c8284c52e030041870f95cf6fb0463f83f0357ae1db39b1c1252878038ccace15cec8aed64bfb2fa26cef7c265a5a2fc2fc0bd19bc900686f6e3a1ed5f8f74c0a45bb8d983e528da89705cf1b5108559560bb0c5164cce4e824aaaeab63e38c2eea99eb8233a522fa77cd3471e3e0fdd4f48b1bd431c49650c64a256977324be4d3a6a461c17ba8566bf7fc758c97a4779dc581f68698e05e2d27f9157f4b35ab8cbbf3c1d68ac781272ec7f9c2940f7e2e7a8a13cfaeab4500c5a1ce66768f61416e2f66b2fecebd7b7bade11a1aea006ceae2f1d50b5bdf6d30f6eb55030157c2d35a42339ad22cc32e61a203c5f2143c103ad5c51dbdd0a8e6c0718015ce1a8ed95a4450f5e70d63056cc45fa2627ee95ac411bd74157a83d99e8b251bb338d49b93fd238db00e3501ce1be83fccfa71b6296ee09004cd20ce3ce97dc0c3f4a4da71958ada17e48b840bfa60c1ae3c8acc258e16beb603b180ec416bb5649fac59e6afcce6353c6432e73a1f2aeeeb9ce157cabc018d77f822705316afbcfca9ccb7298ce3621bd8aadecd206dadbffe9c43eedc4dd9a24c169058fe2ea52f875abae0adf215ca73780678170214c9d41017b046e43dbfcfe8c9ba9a658972247c931883c6b823ccebdc20e905d3bf4ef86e648d5d777fa010dd2af465da2d9b051e2522f175b00b488863e6659c2c254deff2aab79812f04b65ef76134840e2aa1da79e822264229c6add503bba238c0ac077714305422c444f0cd8723a3c6175a984ae1e27fabd8ad710168f39f1fb155a933b1e3b0eb1bf6af2c0856acc948f08883524b7aac607eca45052f82153f95e99d242026190a4087abf1bfe20c15ffa288e5845b5a970e0ac97ab4954c5273bb1e98eb76a54dc366404dd30bdb44bc7a3c5dba3ea676458daad4662b8f88b587039e552c055f780d7c46c77f36b8c24824169f660a80b31e15153b405ea83ac1fad92da3a7522236a6b93310f53cfa24b5579dea58cf45aad9b884a8dfd3040c4ed2a277e7df245435324eab755f35a3fe035a3d3679c8659c298ed67e31cfb94ce134f92e7f46e07af1c0118e8291fc67d6248cf31c8453883858166cb7cbded5649d72329c45ad153ef9d0b81bb618376300080bdca255927c282972744778e8ff9ed853ba4762c1317d6fcc555678e2e0d3b0e2d13516eb8b299a6ecdf64dd95f305508186796cca2e7d86fabe3daf9fc95f6576fd68681d119ad78b8561a7aca3d2d99f380c15b84ad41df069145f3fa99cfc6c22e81ea3c1c7a273edbab843caa8d4b8a44dc69b714b17837a20e35a41d9ee5451e1f19962a902bf910a4b41076db7e1945c9da6c5e3605fc1337905d2cf4e6d6c5c32955a8edde0bb8a6e4cd2f1c6d7fd57715d5874f44aa459ddb84f4600294cbf65b0f0d4e94399e2367db9d7fff9f7e5847867c874b29e0da996d3edb31aee7c7519c3d5d538ffd956aabb2208a80b72df9e0cf7b5e36e9541b40e6d940f05e543d7279eebf3f02ffed0edbfa0919af529cef1e01dac3579aa7005a9f8ddb4185c91bf440c4ab5481245c6203b4992f2d771f1038c40fa77035fb85727ecfc53d99884520981cb35bef2950b7ba9b5fa40da574dfc5d251a0fc5c4ae906476581294f23cdf335afc4f7d7aa84eabd715a8941e8e6c317c65ffecfb656edc9548ae299392af00d21403255ca36a825ccc911d97936a52b9c998a386cd0738d230e438e01ab8878b831d07bd3d241aa3d0510fc6184329b85f5039f0cd593b20d7f4c7b0017d7f932493c31b1f9bf7ba2483d228e44075682c2390741a800b2be946d83c6da2f86ebdab3c610e52d54e58e8184ac339a4eb4b2ed08950af0d02b90e57e89af4e63423727bdb8cdb9654594868c1dee4df5e20002484b1274d27f4c7c2bc59d33a97da37bdbfa881fd3bcbb76892c82c255a7bc5748e8552038ecb766d0367df090ee7dd4d26eb70ec47cda7b9258fd3b4f34eabfef325c945df1f22136cfe6540c4a3a9f9a359da34daa27b3a7bef02249ad92a5cb878d5620d35de6b3db56b4b9659fbe2e24bf6f5560202dca71a9d5d4e71a3cc84b21a57fac4e9a2a87f1effc451664c76605c4f44e7f93f1cfe1b119beac2b694b9a95702c28422d7788c20e460931ad2c585fd78f7737602c794f7a0867ed59cf963edd9abbde68b3ba3d18fa36d3b0e2c0c1457c9800ccb9ccd743be7c38e0baf7bcf3170ee329728b3e53f499801c24038ac54740656ccdcd5994001ebc1b1dba62855ca0a394dbb128ec184adba0c74bb2f32ac7d2f8b211c713841710b9b72b37079a0d58b4e77f11bfeb1267096873d5d766e698354b94b3d9e509bdbaacafa86d18ba4df581183d3d4f21f89aea3c7643b08de14037a9aaaba6f23afa39c379e4d27342a7e7829c77cad2ee07ce3c27864e4b7cf7eba0665c299a9b43a1a38e3492f9a872ea0ac5892fd7448d7f05bd0524b9f30f0a4cc4419d4173aeb06c4c2a7577ceb7bec31661deb583d6ee365706cbb6692a143aa0896d44d9e8041922b4627110718a1d8770ba3bbcb88f78bc0ba6ac95589f59e5d9b1846e3f81564de554bf27027741458f748ef80bb3fca1f9f9280a45aea426c448f8388df2b8b6974594bb6683a5c68bdd3d4f6d14dc3504cd9ac332d8e208aaae52521d48c7fe7087984a99d3e298b3ee37dd219fe57f1c951b9204e781cdc672d91afc14594300684b6421e49af7f6110dc675886515ed019f476ae3cf0d203d526944ac5f0ef58f2cb9a7dd6b53284f22ce3483599735a048fc6f29a9d84333221ad75def74133db51cb374dc3154d9fd6d0afbaf680b0f0d8c01702559fa73efc677e91363aef745f0c3f65e590e7c3ddca94b54b9f651291f8da8e00dc4f383800a6444562b64b2694581c8f405292c73fda7736e83d48f3b811a60f16f8bf60307da35f7685a41d71c4a8f552bf0154cd545454a9c65e7b1f7e3295b033ba0f843a5486cce223b5681cd71b26dce79a565e6518f450f7cf4e8dfd220cff2cb961f0453bad0c0ab0276ec16fa02e1820234de0a0d7a0988640465aa25572f261898195bd9972a7945048f26d4c25ff3f53f009f1e8b40ceb832ee3e2ef814ce28e430eaea718da533221c0cbb266a19f231905e5239bc62256cb9a57fd73f60db8560ba603243f8fde4ee3b68c4569a2c834b33c6dbf9d6ea684728b6175e96b819b9a31d81c55c020e19ae62a91b6c8ab1b35f56133cd985276ca10aff00b637166cc4398c6a94d106104457d896e28b4f468bcaa576e1a955e6e8241da0c56f14a136a7017c7d02268be0e92046d083820d983b1b224e51e1690ed0f26d64c4fd419270c013349f6fbafa8a39b9bf77e679fd4f38848b666abc6efa20b1a762aa7f0906f2b61fed7f056643da0aae842697c15f617c5504a1d0d2f0ac874fc2848b2cf0613a308bdc46aa3a9ae62731cb95bb55d2bf34bef3a9b5ea1dba9881e7f7b637631ffc343cd7b5ca0c35643c3dc065eeb70c51d70c0524b76a78bc373bf98ecfdad107fbf84e51586d0f1d827a6be0d6f54dd6fce466bc02db9d709740dc8e342f275ef8cf023f1fc824250c407fce901e200cc7e6dd27cea0fb85b13710c255e640f5816293bfc95a22ceebbb6f03fad9d56603fbb0e9888bfab0bae83ebb9e085a93941e31183dfe1b0dcf6bc40942b70e097e734be5da5d100c476d957046336012114740c21d4c30490d0f51fb89c1e932c1474fc7bf7ebd3acadb2bd028b3eaeed1e733b074244c24a4091dee8cda82f2a108e0f6d5cfd10eb65f5b8f2ab9a253714e3125fde0c2d42507cad5c85549eb286f05a1ad753ade6ad7130289770e15b68c65", 0x1000}, {&(0x7f0000004300)="9660fe673987fb46e014e5140ef885bdd8cc8341917b36ae630ec8c323ff2798ec7bf115450608d963360c60a374a9879327b69bd64477016f93db8c0b3a7f62ce93b097e0fb1975fedf90e70e313734964d093c2b6a401ec3542fe4f3984d38b9edb6419663fc124965613a07129709bbfd544b75d0353ed2d24bf23719aede252734051b059798df45fbdb47e82f9b94d327890fe18a071411189821ae8ef6c99abefbcdec84830ce53a7de84bc21e0367607ad48a87f3", 0xb8}], 0x9}}, {{&(0x7f0000004480)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000004640)=[{&(0x7f00000044c0)="9f949343b8cf58cd14e9bb394640c5ef095884182de9ca171ca05590c3f796ab4c07f335da5c01186a4586d1679a3a95dc89e85ae26990db6735b1c5e4d5623a0d03748072fb5f7bd45ff80a7d703f79b266ce93ea7b52d38f6c5cf21b02f0dcb20468b0989513acafe8ae007c423567430aee12520b", 0x76}, {&(0x7f0000004540)="aec5f24b562c1637362e878442f55739fb4f7ba74e175f3971331b689dd83e6c98d28acaa119224c709a613408aa02c6f5f028afcf653dce1a445db08b6080a6263d78bf2b4cc68315cfb7b1ae39f44c4fbd6810944f34bef6d815fd1b66b054c0a014a7589fffab14dbf8f5bfef4e8a7b7ad1cebe22d3c4788d48cd3db2a5e4edee23cf7ecf645c5a59b5e9ba1433", 0x8f}, {&(0x7f0000004600)="30c8cd05ffd03228b275d00c56e922b927fd4f827cfe13d7f86413", 0x1b}], 0x3, &(0x7f00000048c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r36, @rand_addr, @rand_addr=0x6f}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x0, 0x3, 0xf, [{[@broadcast], 0x6}, {[@multicast2], 0x7}, {[], 0x80000001}]}]}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@end, @cipso={0x86, 0x34, 0xff800000, [{0x2, 0x5, "89777c"}, {0x7, 0x8, "bdc120ecbdbd"}, {0x0, 0xd, "a5786abc7c55fdd412d147"}, {0x6, 0x4, "8ff6"}, {0x5, 0x4, "098e"}, {0x7, 0x3, "16"}, {0x6, 0x5, "ff1505"}, {0x1, 0x4, '5\\'}]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r39, @dev={0xac, 0x14, 0x14, 0x17}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r44, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x6, 0x800}]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@cipso={0x86, 0x11, 0x6b, [{0x1, 0xb, "fbfd89acd23bb6817d"}]}]}}}], 0x128}}, {{&(0x7f0000004a00)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000004c00)=[{&(0x7f0000004a40)="007ab1fd801d0cbcadc17de92c299eb20ee867e6481e8cbf5b3c35206b3978b878467c796f649f96d53b0e97570bf2f563255cf0", 0x34}, {&(0x7f0000004a80)="00b4256d78c617bd32b0414df62d0aa7b22fc7704b490aedc929faded8d7de70ede7c1f2dac33a50e19807f3b711d24878e5bc02f700edac7c83e6402bf96b030247bd5edc8f5a0271b2", 0x4a}, {&(0x7f0000004b00)="b608b4d4ec5daa86cbe3d1b2f8cc0f03fd22167bed4e38f403660793", 0x1c}, {&(0x7f0000004b40)="9e4bd7cb00e941bf7c26b0793a444074fd9a36ec143340ac83f9d7c6b61f5984d3918af8ec472a", 0x27}, {&(0x7f0000004b80)="454b69eade9aaf15b721750faa5bd0c03dacca46991f3754dd49bce4addb06d7b528d388447e457156c14b7a7a49674bbfb91b70bab24dc3c23221dc832e35e55b68b9fbb62d89e3d237b5a696e7f1a238f82ded6f770d63b52e6d22f0a6ea5cfd47ef3a1bfa8041b93d09ddeea5b7acc479032d65", 0x75}], 0x5}}], 0x9, 0xc008091) [ 352.902019] CPU: 0 PID: 24288 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 352.909001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.909012] Call Trace: [ 352.920968] dump_stack+0x172/0x1f0 [ 352.924615] should_fail.cold+0xa/0x1b [ 352.928524] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 352.933645] ? lock_downgrade+0x880/0x880 [ 352.937810] __should_failslab+0x121/0x190 [ 352.942049] should_failslab+0x9/0x14 [ 352.945850] kmem_cache_alloc_node_trace+0x274/0x720 [ 352.945868] ? __alloc_skb+0xd5/0x5f0 [ 352.945891] __kmalloc_node_track_caller+0x3d/0x80 [ 352.945907] __kmalloc_reserve.isra.0+0x40/0xf0 [ 352.945923] __alloc_skb+0x10b/0x5f0 [ 352.945940] ? skb_scrub_packet+0x490/0x490 [ 352.954827] ? mark_held_locks+0x100/0x100 [ 352.954843] ? trace_hardirqs_on+0x67/0x220 [ 352.954864] alloc_skb_with_frags+0x93/0x590 [ 352.954875] ? mark_held_locks+0x100/0x100 [ 352.954890] ? avc_has_perm+0x379/0x610 [ 352.964461] ? find_held_lock+0x35/0x130 [ 352.964481] sock_alloc_send_pskb+0x72d/0x8a0 06:42:20 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x20, r4, 0x701, 0x0, 0x0, {0x13, 0x0, 0xfffffffffffff000}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x5}]}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCLINUX7(r6, 0x541c, &(0x7f0000001380)={0x7, 0x2}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r7, 0x200, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000800) r8 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = accept(r10, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80) ioctl(r11, 0x1, &(0x7f0000000380)="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") [ 352.964502] ? packet_cached_dev_get+0x148/0x260 [ 352.964518] ? sock_wmalloc+0x120/0x120 [ 352.964531] ? lock_downgrade+0x880/0x880 [ 352.964548] ? kasan_check_read+0x11/0x20 [ 352.972559] packet_sendmsg+0x1a16/0x6440 [ 352.972576] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 352.981099] ? rw_copy_check_uvector+0x2a6/0x330 [ 352.981124] ? sock_has_perm+0x209/0x2a0 [ 352.989742] ? packet_notifier+0x840/0x840 [ 352.989766] ? selinux_socket_sendmsg+0x36/0x40 [ 352.997762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.997779] ? security_socket_sendmsg+0x8d/0xc0 [ 352.997794] ? packet_notifier+0x840/0x840 [ 353.007016] sock_sendmsg+0xd7/0x130 [ 353.007032] ___sys_sendmsg+0x3e2/0x920 [ 353.007049] ? copy_msghdr_from_user+0x430/0x430 [ 353.007069] ? mark_held_locks+0x100/0x100 [ 353.007087] ? kasan_check_read+0x11/0x20 [ 353.015194] ? __might_fault+0x12b/0x1e0 [ 353.015211] ? find_held_lock+0x35/0x130 [ 353.015228] ? __might_fault+0x12b/0x1e0 [ 353.023512] __sys_sendmmsg+0x1bf/0x4e0 [ 353.023533] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 353.023549] ? kasan_check_write+0x14/0x20 [ 353.023572] ? __sb_end_write+0xd9/0x110 [ 353.033832] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 353.033846] ? fput+0x128/0x1a0 [ 353.033860] ? ksys_write+0x1f1/0x2d0 [ 353.033878] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 353.033893] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 353.033906] ? do_syscall_64+0x26/0x620 [ 353.033921] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.033933] ? do_syscall_64+0x26/0x620 [ 353.033948] __x64_sys_sendmmsg+0x9d/0x100 [ 353.033963] do_syscall_64+0xfd/0x620 [ 353.033980] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.033993] RIP: 0033:0x459a59 [ 353.052442] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.065099] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 353.065115] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 06:42:20 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_subtree(r1, &(0x7f0000004340)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) r5 = socket$bt_rfcomm(0x1f, 0x0, 0x3) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000004380)) r6 = socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r6, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000000)="3716334eb709d86273fa85b3cffd7d33d9bf65717da63b6c52d33cdbfe20b9a0e7bb8cb4c1baff54586179cc2d29dc37cca7940514c28bd799ee890007a2e9c190894dda8368820ff700d17a1662efc2189012", 0x53}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000000080)="5c7fa24c5988fda4fcd8fa142c1e884b5d55ec427bf0acab8faf1933f2a780", 0x1f}, {&(0x7f0000001180)="e78f4fd52c20addb020bf399d58933756db377245011886fc58f2965f437e1639e367d96f93709a93f63e7d5755fc6663c2d883fb777ef377e7857e0d732bfac8af1071a378f4eec891c1298ea2e778d0fd9ef0f303c03235c20bb5a7b5668d4c9199b0c630d5ba956340c15fccfba71e295946413e32be2263ee46cd527992c1f1b5754d38c751083c4fcc2c791b1f3966d61c7501c1b046d37ddcf162f1777f3c8039ff40d0767ed3da8cf128b177b784f69f6e22eb20479d598b62e64ed9d9af59f96c8a145caf5781a2455b7b02649", 0xd1}, {&(0x7f0000001280)="b7a1a1b2ccf4e24c312ffb18b6cc02719be872926328380364fc0a7b87151d1457c162bec16cee13a32a6dde041ad3b5e89acae21c2af0dae77ae921c3e1e783ad0d6a2ab7c6b8cba87d596c578c26f41d0e0fcc5302bff5deb24d6d4e184d001c21e7e24b5b01bd5adbb9890448acaa01e826bb8ae4553feeec02344a99020e0515233488606a32a2a212f8b2566acc4c4f2ad4a04ccda7eddd3b9d1a121e4c3f246a4415ce112ef9b695e7d789d832f6c0dad718d508a77efa3e344e99bdfb4bee71d381ef52d2a260df897d94bb7226a879", 0xd3}, {&(0x7f0000001380)="c6e2889546f4341f0c915f5dc5c9e0a560872ab21e2a0da0e23e09c1508bc2c71a4d25c27e93fcde8756a4dba7645e2f3b3fdb25b4354894b13f9a4c185658a725dbc4dfaf8d535d80cd421fc7f70045d34886693491c725873c2ff6f94dd4c1e13682b78bb0ac11ef8faa555e23e4848ce2366a18ad2931c977530db4297737d1c3e49df2c18ef5dc763313", 0x8c}, {&(0x7f00000000c0)="77edde153b32efb9a8a14aa518", 0xd}, {&(0x7f0000001440)="77798a09b731a6cb7f385856919740ef7c8cd6c740beeac49a6f2e2fb3f0253f7bf940bbd51880ac2a7abaddd5bef063cab1c1decf40dad497a9188348ceaaa7fca4878ebf1dd1155fc890aae6f858506fb6dfd93da6c92655b3f48a9adafbf093873c001aedef636ca4ecae29cbd636bfe74138f16a0f0ed02b6f9eba061bfdecba5d57e42401c0a204f62135a476c9a733ef74bfef9eaf53325ae21aec2a285af103d08c194ba2a95c015cb650868e35773c0bdb57a35557fd75da4986b534a915e6d49de4ade0311c696ae1fa73236d77109a6f5426a54ba8b831f01f539bffa9e19ae69162f6c8058118f4c0801e598303f2dfb5", 0xf6}, {&(0x7f0000001540)="67785ea5a68c04467a51db20b7b905d7bcf90b07d7bb4ee48b1db4769536c09e3521f22073b46bdf577351b16181ccac1d1d3c9adea8ecf847a1bd1541700cd21f98c9eca111f322c090742c3c8ef32198c6396a2a1905a8bafe624849211ac10aca79d1a1823da6afa5ccdc72f1632864b909aecf635b5ac529df13139f45ce39f03bd9fd6b220366d41e748e84222d", 0x90}, {&(0x7f0000001600)="09fe1cea0f1ab414edccfb8a98d4fbb6fb0dbc4cd14eb2e9b3f33e376d4e7e4953ee6d197a2d9363b01696df5e1b82a9d5cc5312541800d251d08bc262e85cd29f12665a95313f99f2c8f24dc36f262bbb6cbd3b3dba9dd3190350042da14c93d8547e83d73e84074e1bd9f6a708a0cd314b1828443548e3a26d09060e5ea998259da6d1d88f01ba10b17edf8c13ebef0554ac7d", 0x94}], 0xa, &(0x7f0000001780)=ANY=[@ANYBLOB="68000000000000002ac5e72f0100000039f7c18dde6a5e8bb29523702af0c456dfbdbc2b3eafd6d066e94853acf2c8af89e001d5cba61bf637946c3ddf344c21917e33c3b694ee15a15319605b111190fec97c76e58ac6378cd257946dfad40fde559b81fff793bfb80000000000000016010000330c00005f4e621ccb45a1b463b3a6188e96a97331bfe15b53287fe1af545d2c03b128f0907c1993eb61d918234fde01a1b72eae509f7903834bcaac75ab0213fa9651f13c61de5ceed18717d9bb0f5215f28824bdf4889451b9905bd03135646f2c2f5cc2b7b3a43788836780037dd974da0e112099be8252a964571db7d94e9f8041243a45c360038338f21edbd150e6be639e9fbd92b0fbf67ecdea787719f540b67d2967cc8d00000000e80000000000000000000000080000005b7470cc5454b8173c65ea71e2b062c1af0bf4586461cd62a6f9527eccf50431dcf5835f21cdf38d7744b6f09a061d9ce83a4ccaaeb3d6750c81cfc57c70553dce27470c92e3a9f0942e4ba2c00726f65803a80fa86a4e0e7b50964168a091e9595203670cbd84f5643971e0ee4184b4917f0cdf7cb84fd28cf9f1bd53d9a2651ea25083319103dca87d046382e042f8a46b87e886aa39c7cb9742c1f0e5473c7486a3aae1ce0579cfb4c580c1840b7a5a669116f5a51f6dc90676f1b97e21694d708b688c7e07b32116e35001ee20f3b6d1d755ee1df807083ebf27b6791d9ed51010000000000000040100001d82ffff5f55d7048535678226575567910a551f21213939a7b4b5d49313cf817a6cfa2e3cfc38251528b69567dfaa8f49c2fc5c58e46db0039a26e5aba45178fd5e72bf76facc96f950a48405eceda7023eade1df7d7d99626dca222a7128618e115fe2b7ec5ec427ff7331e31b3885d2bf28071a1b85f2a1817dc45135086c12ce8ada3d0544cc16959d85cb30df8dd625d6f0f170b358000e378296438ddfd2f52dbcc679b36114305b80528d08cb9a0eb39a8c11665bf76500d448cb8ed681baa6d0533a816d0b16a2cabf731413e3dd4f501b0ec944bc0d34b5173d3835d314d249e82f1fe0c5b981b8db11a7606a94d982cdcff52734efbfb036b68e5fa0bafd686881c8e62684c5c3b8918ff4d223f7f7d0772e9214d84a590b4b154aef265c0faf7cf16b6f0c23e104f0d686341fa482b2a37c3ba2ef9c91a478ff434ecc15a5c1af012589513aa726cfdf963c5d61f6f76819a768493763e7a38baa39b23aa45fac67f6117b630bd8a89b902e1b00c741878303a47fe24c8d578b04da26773f438006f6d551e43f735d2a61d1739bed813657c2990c99cf62c0b33faea41864683626a3f3072bd46ad08f578e86cca2c9474978de8486984e7ad4145d7eb7a32ebb5d081bfe8bf72dde0df67712a4ff2257a18d2a8f0c0704305402556791e1cf27ed46fd0ce0c0af08fa8b0f757af0ec39b25071c8962935df742940ad8d7eee54b77bd26db68a4778787f44e7f672ef0c2ba9b52bfe94787d115079de9d515d618d23383346145f813ccec8108fa97f3be57ee976bf44f8e740d77554125a548af86a589af6a4d0639fb6bd6b6bebf8fcd372f0b6b8daf9b9c3a59e61a6c14ccf6c9eddcfcb5dbb3d0b1db58fd15cc699e50faac650f61ea72915fc28493cc37aad982b5a14492b37e7d5c7d783cf24b1300990fb378fe4c4d627bf443211e74ecc50133e909ebb4f67b57e5c86f8e1e5cf8911be29564593321d68ed68838e270c707852b669b487ffa6d38685d2beb3aefe8a99c2dd2c354b1fc401ede2046623b823c815d837e4bd2b272c5882528380ee55358e77043ce8cd803d32416a9f9bc681cd48e8b63eaa0e38f3471a9054b0aee1d242fe56d64ef939eab84aac707a37c057f6bd088c91f52dc82fb85f27a64a316ce95d5197b60fe39b5a78d89e1baa386a2e9b559f48aa6c4fd6df2949b12c5a174b2c5b5ec24071bad3d36cc0e2f9f7b57a706b88ae96c8955977387a6181762828d6a9d087fa44119e81d8b704551bcda754e6f52e5d34a0abfce040b54f88c8ecb9c12b7b35a2dd7d447f25d6ba5bcba25d5ec35b1285213a2a7901f6359a4aa1784247f9a168b800e6a448dbe00474c901fee023603869b5aa0a122ab0ef5a9e44c0408cdacd4bc6c852c4aa83506fd9363b57961c9360ef6f185b29bcc4bd977798eb236ccf4090c0b8782773f58009f948939377534cdffc89b318794b076697628a52088df09776d5ed5dccad6dc96fdd63cdc60cdeeadaa14dfea5c7cc5efbee5c8ee65dbeaaffdf4d6ea356122d98654c23c5855e8c46b28bef8d72ce93647bcac98858f9cdc434e0c5839a10a292a5d3de0728672cc3e098699725f649f2ed7dd9277465e7b7d8c69e9ab4bc3c8857e69e500bd4bb1dbcbe36eecbdb11a03c26cca4b247fa0087d8ab0eea7e6dbc1c61e238a10dc875405298c67113a59c172268f9742ce387f9e69fd30465a85cb54d65af303915c67f8a5885a6556ae7a928f6208982a67824b7aa560b04a3ca7ba81653b2501aea7983ce3b7f87febdfa127e5661c671d6bde5ac3cfa545c52c600a0a1c8553871a6880238311fd74e8c7ab0fc64bbd06e23952490cb01711b1e6231268f12c2562a83ebe766704bf6a5288392c7f9c0ee41c406226ddca596dfac87b613b540fc82603bc3d8e58a31d44e19a402b89ff6e54d52705abbb74aa226d9027ca0145e19e48ea655dd0ff968f4cc18f2e0b2d9335ad029ef1cb4517e7f7206f0a41e47de7e10d0069e198e200ef682eb664c94bbd8686f59fa76674084d139f3892624493805052635abc81bdfa153f375e03536234c907beb841025c6b8318fcda31b015b6816fc2d3c512c3d48a9c0cebbee7e84e073534ea951ddd8862bc0357f86b9da07321ef8bd65f5f7deb8312f959a104f3d290622e55d80552404789cf0ebd8b31b46879ccd9e9ac0a2095ac93bddba826906adfb20d62fb0dbe9661a66da804e4513ea6a45325baa3dff7156da151bd5073c563fa6864d3c4516f2b668d94a6a81cadf05533e81021857f6a376f975aad33144e2ded2c468c56cf1e2b428a9fec79d78c1521ad5f52f66f21316e94b76b13b141f4cec5c35bad8f6dcba5327320097f64e17a2ae0d66d0c49aa3fe944d2267e334367fda43d47ce177adfe20aa65db3eed5ef1310a0d2a33c14d5b040fbca016c8c8509cf9e7c9bb2038c1cda0bb7186c5dd728efeee2d9677847ce1a0f51cd238b59438cb8d547d7ceb77acb573ab4e64efe578a97c3872bb35065f65e8f2b18bb4dac6d82f7fc5f9a5d6eda916ae3dabbffd80e94f99315b23ead277871fac2ff882ecff6fd2426f90bb681208105c18e3cafe25d0656b0c938a922ba451188e34c1da71feef4f8c415498e91086c355fca098cb93a6dc638d26bff7a77b1f3b581a3e21a4e1ad2f141c8277e205501c306b4d75652a28c151d7becd8e939ee9dc707d061bbe78b569416d375e17ac5f15f214e0c781d2b7cbfc172d546e739be4f64f35c379850596265ed010fb4c6d650bcef3e7d734816e934c721bc096f63701170b0c89ca471f664093b6127d25c131446911d9a96df96c1c9ecaaa8d3a175cf10104dfd1b5be63fbf271fcbaecc7d5a22e4e79baca10a7501425cca5c5cc2f6a4ae36fc299df7f3e646a0e285c54d0ba672b23f5a62edcfa39399299c1bce4c3381adf66d57625463a8e844de88125bf35a930a1fd5d0f4048865b5e0569c0a28550919aea924c649a5ec349d6f32ab8b82a2f1fe52751a4d51317a9a8b37df6bdd00b43cd4f66dada3d2e17ecdaf2dbe02bfeabe90ccf9feb7d900171f2601c295ecb448e9cd12604e178fde41b381bba058d1553cb84167573b55652e6622e59f7ba383b91156698f73373c7d965f9678cba1cfbff0bd0310255dd2b3f2a739360d8bae8a91891130f9382e9100cf64771ff9de1316bddf1cfca31ca111e66fe4108b664c0209e1c35c1f9a4ddc56957d1c97975b353b01d5a5431f16ca11977aa2ff168c83052b6ef63b904b6fe3a777416310ff4e48efb0581d7f1acf0caa131e7432e67fc7cb5aabf5776344ae3b266b156eb5158c63c5660bd037dbaf04d8926ac8d7509c4b3f3d4c04eebe26a1fbec34ccff0f1b14d8d0f4ffeb0b902e838ef28c5bc14fabb8450c368a533664656016666b821dd62fae95e106fc6f24ab36d6e3ba474e2a7fbdaa9e43cf185ec8ec9d7d7192efdcb55fa0731a6f6aa19aa551956a8636e27fc360a53f37e2ec100d41dc661500d0e14176ecbe118879d493ae931188182b33753710e978d9fd9be889a0bc068e61fa6ae7d5e598d131205eab507229ea33b087b2946bc26ff2e8014c08160d84df28aa95cdd9b2cfb2cd056cf109b1123c119a7c197fc3a94004edfb05ffb15a26e778659f105ce0946013e5e50763577440d82a69922f159dc7bda553d9a849a466038fa6fd2254be8923866154e4c4b3738114d84d920e83fc644f0bd34c61de97f99998d7e562c4d8e805c2b4f2f561c5cb66ca3ce6b212e0b2d9657a1b64d344d1d127f4d696c8125bdd6dd8cfe5b6ce647d2e0352efc9b7b546bcb4ae4bd68025adf13a4df76d67d28b46a247ec95b8e9ed0fa5b5fafd448ca3b40a84c39813ea5dfbed0e93cfecd43a16c2c3b2b4a3d2c0448bdbcf9b29cf423f500b76c004338c5646eb3b6fea4021736dde76cc798a39399967548199f1b3e808c391316f05fcd0fa8eb80f6e8b94f5297c7714526fe703642949487e6ed52ce1c6b432616f7d301c16fcef5d909c85a788d28b201f96f6afefb157b469f208fbc5426460e3f4db8b889ef9be5313f165d38a0d00859ddd7343c7d1cb20cad1a68ff6aa58b6a02b925f297936eb8adb9ee877c0d4d399e508bb8cea064bf90510fdd2a5c9d33a71994990c52154f5cfe541e6cf8f3a59446c9301cd3327ca92836523ab2cca34a509a267c86c227e2e1d50f97b03dc3a8cbf50ffe359ac9f8a45cd5cb576bdd9c81b35d47e7c4708ff755a308bdd1010d84f1372f930034aa598e0a9e25349b3c730fb007ad200a2fc76ae35f67daec1d0155f4a044c77cda3065dab2c1c29fd5398f418ef36fb971e6e3fa610f4dfbb2c18ed7ad80ca067fb1a3a4d6865d94c9524fc932ddc2d01e6b509f1e7b7988056a8e61488c7d731489c25eacce607f57c9f8120e1b65fba7422d5f8f2fc2388509deb7b76fb0a5b2a0efab2b2b79643778032f694e73811c492b8cc0844c4d01fef3baf3e6731f18a8ce91f5f393a72aa31f95ffcfdfc2100786872238de43cdc90aed76872d6a8cf682ef64cd30ee14676c1518ae0b9991f875828973c31a272470836543cab2e516a7f3f9174ad7502621215c8db5f6f547d4b2f2280dd8816becd48c53155ac830aea3d755dbe3815aee5db85551d6113658e976846d077b71a20c4b83018bd67aac274b62c2baffc1e0cccb1d6d7ce6feae2e36415f929930983e15d6bdaafa19331d7c9fb52db983aacad57ac46c73acedceef13b261dd860e497cced1e5c51f23bca062b43eec731e445fed8f94a9f1702f264571f318ee3e402bad36a37b337c4175808f8f472ef55eaea029fff74a6860f15129e99b790c97b7503bc64f39b46fb2d77b1f4ec36ec1afcdef3b799035f643f7ec0211289f3510456fff51cc5badce30772cfc8652fa895bb96c81e92f23bf6d270dc548a3e932cabab9b3f9f7e02815ddc6d34d160716d4fb776cd39e23004650e928dcdef0c2c14d46480525ff0e905cb4f11504f926a1a271581c4e1b9bcafa6f2a4b8b0a30ead1faff4889929b4328b85716981e920daae36dac8944d888256a86f4d0df0265e7662142d47a85a11efc144d8edf26d9474da24fbc3bda4da1c2b1aabada5d8344412a7bdcf7a323afeed4ed3716f69cd901ad300282247b4ed1404268bf8927696ac50fcc22f0e8e5472da82fcc349b67a88a5e2edd51c37b4251d605a2df79a7a8b19aee3ee74ee6f23beb433e7579205931a0d8d3ea2b60808add24b74e2d4103c43ceee2c5a47644cc093bad51754016427f2bebdd9068fd35da3e0a6a39016c0d70955a4e38d15e86c9780c37a54cd602df85b8647462dec5c7070aee8af313203b64941794ee7b8d4771dec0a1845d4dcf8c4737edd3297efc037a81540c2e68da0bb3e8ccb90ed69660a3b83c8462f274ca12055e5d50dcc799fd615cc090fa149f835b23607691a8162d6cb75cddadf5f5c7a2937a9f6700221a323c340f7d51f29391b531221da0087230afacc0a61eeb2e10612b2b6076f98299f828b07c59584de5e6364e92210f33dcf6a45068733d0263507b7f78c5e745a2f24561c2be7caa7d07f034c5fba0db1da3e61b559e69dd5199afc4794a34bf0d475fe679545c79359e6a4df4a92184a5ddc1ebf5356b142837988f330a4a665b8719bc4abfc1a16b6c20b02b2b38ecab9339f9b675d186ab78226dd893612f5c736b9c10b74e3790df94b1a23389b7d7ddc56da35632a88b0497ffa42c7d81232fa1d52aa87c5b0801000000000000aa0000001f000000375bea54f228e325319df3cfafd25cd42d639938a0c9ac0c88527098d9efb9fda4e3d3f50457fe486bb56cfa48bcd5ae8c2ccc6c8e5e8b255b6da8aa395d01a9ab082fb18671381a8241f8958b9044dc955c069e30d60a51bc4363001198c45cc5933deec3a4824d8fcc06a50d1eea3fe8b17efa56f81fcaa2df7fd6feb1cb12ac1d0c2a5d01018883b1b1612a5ce6490c167bd781f4846faa8f5c68aaac0e4786fac2585cfc0d7ec53762d67f01c230a41b789c1364e7af718731cd1766523cea94a5b3b8d4916b5e591cd2d6a97dcc9d3ce98b3963f0601f8ec7ebd7e418e18aaa9238f74c02486309dfdacef66446e35555945aeb000010010000000000002a02000005000000adf14c04f26f6048cf87b738ba49f916e1a2b8678ac2eaf9a5fdbd3ac570f568c82d5035b82799d0c34e587b73174b736f1b2cf12b28c668b8e77b9cc90316673880555b179afcf2ce4c6275e1639c20d342b7e5cf89f74adaf5f6e851d4d6aafb89fa543681e2655a916dc8f4a20abb890591571e22b490ee21d84a52fabd39a4128b0c2a42e742e8f106ad5e8cb9cb083a3abf2c2ce8faab34fb228496c5666ec9bc672bd302cb9e9045a1515fb0fa38c5bbad788cf68b1ea879714724f26297221a1a551c746d270deabb4c6e9189fd8305518455e5a98ddcdf1d086346f29862c0d8cd3d55c9b04c90b5a604d7bf15a6602ee5917b6d5345365610200000f000000000000000010000001f00000086f4ffd05d43cf349dc5276047f4a9fee42aa35759b165193398fc3b641e825cd59bff33144b9a70b954ccb7cbc64d4471881c4941f4f0ca93dc0bfbd8975f45bdb55d571cad6404a0653596f1767160bbd56c18bf8774c66a9a0a0126ea198ac853bd7f3870e39c53a660bfd352fe338027c69985ddb08d5c909f8ad7208a37deadf8df2689a53271173186b090ec214e08570a94e87c8fac73daaf6ee08f37c43ffe1af2cb049fa0c7b8e71666ccb02909fd16f3eee9fb693efa0759fd312cc663b12fd5715ded1b3ae4f7fbf34326bfb6cef88c9eb3"], 0x1520}}, {{&(0x7f0000002cc0)=@ax25={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002d40)="6eacabc9de44d247f986b43b083f2a5be7767c190a48fa40d930ea6402f687092f3085b963c680a861f74093423c9f7c23f91cc92b095a41ee7c8adda68491bdbb9c30c0aaa11b3bd6ce009e97884bb674885ba5c672c00b955c2b55c99fb10893d496dfc0fd2899761e652fa1292d2df55df4facce8d7c48dc4b2e7009d33d10bcefa8f97a156aef43e110df5f8dd7e87b865f2900705d4a7b10e465f09fb8d89b12e", 0xa3}, {&(0x7f0000002e00)="4f972f6cf42b682b34747cfcd1f949d6861f1614d5c4ee54fff3d7489b4d71f739791eac07d17cf37a538860af97481f0976195d6e697a84e8fa457ccc3ae3e44ad41e4287c494d9ee1bb233c102b2ca05dbbc5c2c7ae88b868182184b446c4276fc49feae27365ed3201bfba336e787be448e1d7817d22b5a44b103eaea411733b68d47c2736286fcd88d85162e4740a59eb0c43d322ca5fd784a614ee57a779a10e7f2544af34de5c0a24d189d14f0d7714cf65ea3b58e8812c10661d688a1f8b40b65ba6e24fe3c762ff31c8a88bfe1523ccd781695ba5cc52a31c1", 0xdd}, {&(0x7f0000000100)="be72c4c0d8fe827057879dc299c0dddc13deca3d7f05fec08cb98a8391fc51d5c5bb32fecdbcab63aa", 0x29}], 0x3, &(0x7f0000002f40)=ANY=[@ANYBLOB="10000000000000000801000001000000e80000000000000002010000090000009edadd964c46a78ba7a554961cee4ba478603fb731e58109500af21238cf2180fdb76ef984f80facf5ff2bcb2d5c270532522b29d76f40238661f561a1a292e98f45dad74ff77f882b4d3a6a2fb1101c6c80f960f29d1032c8121a2354a067144d21f5bef3e974c0469428a8fedd2d67d7e98485d36027bd0b03b2958cac39ff786c05c53efefc46fc42c0c22e0016f6fbb90615f0ee6265f1536d4d17f7e2e737d0f8013167e3dfea6f893e1f6b1e83e1d1e4f5cabd65ab076ba7b5ad80510967434a7d60bb52353680be46fbed1dd76aacef0000000000"], 0xf8}}, {{&(0x7f0000003040)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000004200)=[{&(0x7f00000030c0)="4461f818e9accbdb178e49760042e529576e12e05a185e53975c5d6c3d3559ff63a212780e446978cda4cc5c8b2c7377efa4ea982c9e907e4de4da5cb2734f26b38fa2526c9f51c526de5f88d8c35705c8d72755a5697d3fe4020a3a7fb05943ab39769c62bf1f543f9b7598025ec65bea791809a659af9b3e4c7e7c0296d6b7a0a94a", 0x83}, {&(0x7f0000003180)="01326e918a855072c9ba9dbf718a677f63286d6d5dba8c11f5e3e2c2783bf62c0b4a683a15d8bd3674983f77", 0x2c}, {&(0x7f00000031c0)="c83140278a83c77f5b0b079a438dd1ba38bc3c274d36850c4e1084fe7ea02bc6ee701903923d249b727328608351396f19a7692c43", 0x35}, {&(0x7f0000003200)="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", 0x1000}], 0x4}}], 0x3, 0x8d2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) memfd_create(&(0x7f0000004300)='(eth1em1}selinuxbdevem1\x00', 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) 06:42:20 executing program 4 (fault-call:6 fault-nth:41): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 353.065124] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 353.065133] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 353.065141] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 353.065148] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:20 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) [ 353.245676] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 353.310551] FAULT_INJECTION: forcing a failure. [ 353.310551] name failslab, interval 1, probability 0, space 0, times 0 [ 353.321895] CPU: 0 PID: 24514 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 353.326634] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 353.328827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.345554] Call Trace: [ 353.348168] dump_stack+0x172/0x1f0 [ 353.351802] should_fail.cold+0xa/0x1b [ 353.355695] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 353.360906] ? check_preemption_disabled+0x48/0x290 [ 353.365943] __should_failslab+0x121/0x190 [ 353.370183] should_failslab+0x9/0x14 [ 353.373987] kmem_cache_alloc+0x47/0x700 [ 353.378053] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.383595] ? check_preemption_disabled+0x48/0x290 [ 353.388615] ? lock_acquire+0x16f/0x3f0 [ 353.392597] skb_clone+0x156/0x3e0 [ 353.396152] dev_queue_xmit_nit+0x309/0xa10 [ 353.400491] ? validate_xmit_xfrm+0x1f7/0xda0 [ 353.404996] dev_hard_start_xmit+0xa7/0x980 [ 353.409325] __dev_queue_xmit+0x2704/0x2fe0 [ 353.409338] ? refcount_add_checked+0x33/0x70 [ 353.409356] ? netdev_pick_tx+0x300/0x300 [ 353.418147] ? packet_cached_dev_get+0x148/0x260 [ 353.427023] ? sock_wmalloc+0x120/0x120 [ 353.431009] ? lock_downgrade+0x880/0x880 [ 353.435159] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.440696] ? skb_copy_datagram_from_iter+0x441/0x660 [ 353.445970] ? kasan_check_read+0x11/0x20 [ 353.445989] dev_queue_xmit+0x18/0x20 [ 353.446000] ? dev_queue_xmit+0x18/0x20 [ 353.446015] packet_sendmsg+0x3bb0/0x6440 [ 353.446028] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 353.446040] ? rw_copy_check_uvector+0x2a6/0x330 [ 353.446072] ? packet_notifier+0x840/0x840 [ 353.462100] ? selinux_socket_sendmsg+0x36/0x40 [ 353.462113] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.462131] ? security_socket_sendmsg+0x8d/0xc0 [ 353.491596] ? packet_notifier+0x840/0x840 [ 353.495839] sock_sendmsg+0xd7/0x130 [ 353.499539] ___sys_sendmsg+0x3e2/0x920 [ 353.503496] ? copy_msghdr_from_user+0x430/0x430 [ 353.508259] ? mark_held_locks+0x100/0x100 [ 353.512500] ? kasan_check_read+0x11/0x20 [ 353.516658] ? __might_fault+0x12b/0x1e0 [ 353.520705] ? find_held_lock+0x35/0x130 [ 353.524753] ? __might_fault+0x12b/0x1e0 [ 353.528818] __sys_sendmmsg+0x1bf/0x4e0 [ 353.532781] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 353.537091] ? kasan_check_write+0x14/0x20 [ 353.541321] ? __sb_end_write+0xd9/0x110 [ 353.545375] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 353.550895] ? fput+0x128/0x1a0 [ 353.554155] ? ksys_write+0x1f1/0x2d0 [ 353.558027] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 353.562768] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 353.567510] ? do_syscall_64+0x26/0x620 [ 353.571468] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.576814] ? do_syscall_64+0x26/0x620 [ 353.580775] __x64_sys_sendmmsg+0x9d/0x100 [ 353.585000] do_syscall_64+0xfd/0x620 [ 353.588786] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.593956] RIP: 0033:0x459a59 06:42:20 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc, 0x0, [0x0, 0x0, 0x0, 0x2]}) 06:42:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) socket$caif_seqpacket(0x25, 0x5, 0x1) 06:42:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:20 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20000, 0x0) mq_timedsend(r0, &(0x7f0000000080)="6946bf0e064743a8e4f558b65507be8c835bf39d5291cc81b1b30107a894355599cd99397d6a12fdd6b95e463e3d705447c14e998fd3e42f681b7ecdfccccb12675489803ef386398addaa3ffc61411af430f66cf85075d71a79e362d9c8f2ac1ade8b766008b7943da8e0a24644ef9bf27dc7a6a6afb700520cae579e9944f8ea4ffc38117bfcd3a55fbdfe569e2b56e94dbda59f183266026769f062176849a46ef682328e335e6d4bf7b3184e9c5d4af9bedff1bce574cbb20cebc3bfec53e71ac64b6a3c1ccbd944e654d1fb8a7bf9c2d5f6df36939c662e63b819d6bb5abeff82b5ce87c10e49d2", 0xea, 0x2, &(0x7f0000000180)={0x77359400}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x10000, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf32(r2, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x8a, 0x7, 0x6, 0x8, 0x2, 0x3, 0x8, 0x266, 0x38, 0x1f0, 0x9d, 0x0, 0x20, 0x2, 0x40, 0x0, 0xffff}, [{0x6474e551, 0x7, 0x80000001, 0x0, 0x80000000, 0x5, 0x0, 0x2}], "17aa8ceb06fd5f77a33638da78d82529380f37f71e95b62d489f531a346bed276d5daca0c491b5c6f799ef0b03c274f6b978736ad69aa2373d5a75cfce534eaf6cb2852bc0084bd5f68af22bc784621998942b03fcacadd6684ca081ec9e50821e771c9e7c03742e7fcb0221c3c45005cd774339a9d5050ed713d73f268d2613daa44d0663b97922f4a37893042cb3623d8c98d49c628684454565cdedd2633dd6bf1058d20c90d9a5ebab4a335a1df07cb1357f2d2b9650d8b9f8f0c0820ac6", [[], [], [], [], [], [], []]}, 0x818) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xda7c0516c8f6ba5b, 0x8010, r1, 0x0) r5 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x1, 0x0) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000bc0)={0x8, 0x7, 0x4, 0x40004100, {0x77359400}, {0x694c5b0d02d058ac, 0x5, 0x4, 0xaa, 0x1f, 0x7f, "ad29e554"}, 0x7, 0x2, @offset=0x6, 0x4}) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r5) [ 353.597134] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.616015] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 353.623706] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 353.630959] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 353.638209] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 353.645461] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 353.652714] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:20 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) pread64(r1, &(0x7f0000000000)=""/175, 0xaf, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) [ 353.697406] audit: type=1400 audit(1571380940.714:66): avc: denied { map } for pid=24624 comm="syz-executor.2" path="socket:[77363]" dev="sockfs" ino=77363 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=unix_dgram_socket permissive=1 06:42:20 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc, 0x0, [0x0, 0x0, 0x0, 0x1000000]}) 06:42:20 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8040}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r3, 0x20, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", ""]}, 0x1e}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) r4 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT(r4, 0x0, 0x12, &(0x7f0000019380)=""/102385) semop(r4, &(0x7f0000000200), 0x33e) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) 06:42:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:20 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000340)='z', 0x1, r3) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100309}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x104, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x33}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd32}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x74}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd8}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0xe9f0dcc26bcf46ce}, 0xc048) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "55cb2093d34463cc", "79b65033b58a8b0e4373b1c9f42f257f7e2a3d1655be52eda9c538c9f80c6917", "05b617c7", "5f1ec0acab2f7ac2"}, 0x38) ioctl$RTC_PIE_OFF(r2, 0x7006) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000100)) 06:42:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000659742bf512377a9381b06d611d3cba2cae222bcb2a46460afd9411edfe53b7557ae605df45fa30c4be802cd395a48d7660da32c58fde162c44c0650d61fa3abff0e7e", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:21 executing program 4 (fault-call:6 fault-nth:42): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:21 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc, 0x0, [0x0, 0x0, 0x0, 0x2000000]}) 06:42:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:21 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000180)) select(0x40, &(0x7f0000000000)={0x4, 0x1, 0x1, 0xfffffffffffffbff, 0xe8, 0x9, 0xaa16, 0x7fffffff}, &(0x7f0000000040)={0x80, 0x20, 0x8, 0x9b, 0x3, 0x6, 0x7f, 0x3}, &(0x7f0000000100)={0x9, 0x6, 0x2, 0x2, 0x96e, 0x0, 0x1, 0x6}, &(0x7f0000000200)={r3, r4/1000+30000}) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) 06:42:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000280)=0x4c5aef0e4d3976eb, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x89, "43af103afc16a6d83513e0a467d0eb1b8f437f17fd8e24e04dda4682bd1f81694481a40fcc85a8aedbb85ef31bd28bdc81f76674fde11fc658effabe10d9ce1d051ed3398717d6a8c7139913c8f5bb1ed366454e616e8a0b32b018942ee903992088f3783c8876be416043a6ec7f551d7f74ed0af189e9ff8400f2a45710d19f2574ccab504ff79a15"}, &(0x7f0000000100)=0x91) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000180)={r9, 0x3}, &(0x7f0000000240)=0x8) r10 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x48100, 0x0) r12 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20a000, 0x0) bind$unix(r12, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_RUN(r11, 0xae80, 0x0) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r10) 06:42:21 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) [ 354.212757] net_ratelimit: 20 callbacks suppressed [ 354.212766] protocol 88fb is buggy, dev hsr_slave_0 [ 354.222952] protocol 88fb is buggy, dev hsr_slave_1 [ 354.225814] FAULT_INJECTION: forcing a failure. [ 354.225814] name failslab, interval 1, probability 0, space 0, times 0 [ 354.228053] protocol 88fb is buggy, dev hsr_slave_0 [ 354.239190] CPU: 0 PID: 25076 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 354.244254] protocol 88fb is buggy, dev hsr_slave_1 [ 354.251103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.256196] protocol 88fb is buggy, dev hsr_slave_0 [ 354.265426] Call Trace: [ 354.265452] dump_stack+0x172/0x1f0 [ 354.265484] should_fail.cold+0xa/0x1b [ 354.270510] protocol 88fb is buggy, dev hsr_slave_1 [ 354.273044] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 354.273058] ? check_preemption_disabled+0x48/0x290 [ 354.273083] __should_failslab+0x121/0x190 [ 354.299905] should_failslab+0x9/0x14 [ 354.303711] kmem_cache_alloc+0x47/0x700 [ 354.307785] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.313340] ? check_preemption_disabled+0x48/0x290 [ 354.318364] ? lock_acquire+0x16f/0x3f0 [ 354.322353] skb_clone+0x156/0x3e0 [ 354.325919] dev_queue_xmit_nit+0x309/0xa10 [ 354.330253] ? validate_xmit_xfrm+0x1f7/0xda0 [ 354.334766] dev_hard_start_xmit+0xa7/0x980 [ 354.339105] __dev_queue_xmit+0x2704/0x2fe0 [ 354.343438] ? refcount_add_checked+0x33/0x70 [ 354.347949] ? netdev_pick_tx+0x300/0x300 [ 354.352118] ? packet_cached_dev_get+0x148/0x260 [ 354.356887] ? sock_wmalloc+0x120/0x120 06:42:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r2, 0x9) finit_module(r2, &(0x7f0000000340)='\x00', 0x6) r3 = socket$inet(0x2, 0x4000000805, 0x6) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000180)="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", 0x179, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000791be113b5d747cc78afe10c600a623a116976472affd3ab1934227b8fefc47fa5330635f30cc3a45b5858979b774b45415ea711dbf0a4fd68b8129b8bdfef4107955a7ae8ccc06ec32351d8949f4f764a2515037a02ceb8ba04992ef2d499a86c43891b73a8672d0ffe68ba9148140dce4d0d97649f01", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x10, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000300)={'U+', 0x100000001}, 0x28, 0x5) 06:42:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:21 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0x8) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x10000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) 06:42:21 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) [ 354.360874] ? lock_downgrade+0x880/0x880 [ 354.365020] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.370552] ? skb_copy_datagram_from_iter+0x441/0x660 [ 354.375834] ? kasan_check_read+0x11/0x20 [ 354.379998] dev_queue_xmit+0x18/0x20 [ 354.383808] ? dev_queue_xmit+0x18/0x20 [ 354.387788] packet_sendmsg+0x3bb0/0x6440 [ 354.391947] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 354.397612] ? rw_copy_check_uvector+0x2a6/0x330 [ 354.402401] ? packet_notifier+0x840/0x840 [ 354.402427] ? selinux_socket_sendmsg+0x36/0x40 [ 354.411411] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.416971] ? security_socket_sendmsg+0x8d/0xc0 [ 354.421729] ? packet_notifier+0x840/0x840 [ 354.425973] sock_sendmsg+0xd7/0x130 [ 354.429691] ___sys_sendmsg+0x3e2/0x920 [ 354.429710] ? copy_msghdr_from_user+0x430/0x430 [ 354.429734] ? mark_held_locks+0x100/0x100 [ 354.429751] ? kasan_check_read+0x11/0x20 [ 354.446817] ? __might_fault+0x12b/0x1e0 [ 354.450893] ? find_held_lock+0x35/0x130 [ 354.454960] ? __might_fault+0x12b/0x1e0 [ 354.455000] __sys_sendmmsg+0x1bf/0x4e0 [ 354.455020] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 354.455039] ? kasan_check_write+0x14/0x20 [ 354.455062] ? __sb_end_write+0xd9/0x110 [ 354.455079] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 354.455090] ? fput+0x128/0x1a0 [ 354.455103] ? ksys_write+0x1f1/0x2d0 [ 354.455124] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 354.493053] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 354.497824] ? do_syscall_64+0x26/0x620 [ 354.501805] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.507173] ? do_syscall_64+0x26/0x620 06:42:21 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x3, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000280)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, r6}}) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) getpeername$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000000500)={@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e23, @local}, 0x1, 0x4, 0x4}}, {&(0x7f0000000440)=""/155, 0x9b}, &(0x7f0000000180), 0x1}, 0xa0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r4, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x4002, {0x8, 0x1, 0x2}, 0x44, r6, r9, 0x5, 0x6, 0x7dca, 0x7, 0x7, 0x2, 0xffffffff, 0xb4, 0x1, 0x9, 0x7f3, 0x9, 0x81, 0xfffffffffffffff7, 0x8}}, 0xa0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @initdev}}}, 0x0) r11 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, r11) keyctl$get_persistent(0x16, r10, r11) r12 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r11) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r12) symlinkat(&(0x7f00000005c0)='./file0\x00', r4, &(0x7f0000000600)='./file0\x00') [ 354.511159] __x64_sys_sendmmsg+0x9d/0x100 [ 354.515410] do_syscall_64+0xfd/0x620 [ 354.519222] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.524416] RIP: 0033:0x459a59 [ 354.527613] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 354.546524] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 354.554249] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 354.561524] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 354.568794] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 354.576069] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 354.583344] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:21 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) 06:42:21 executing program 4 (fault-call:6 fault-nth:43): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:21 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) r1 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT(r1, 0x0, 0x12, &(0x7f0000019380)=""/102385) semctl$IPC_INFO(r1, 0x0, 0x3, &(0x7f0000000000)=""/18) acct(&(0x7f00000001c0)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r4, 0x9) r5 = socket(0x10, 0x3, 0x0) syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x3, 0x2) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, r6}}) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r7) setfsgid(r7) fchown(r4, r6, r7) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) 06:42:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x340, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) r6 = gettid() tkill(r6, 0x1c) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)=r6) 06:42:21 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r6, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0xfffffffb, @link='syz0\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x20088020) r7 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r7) 06:42:21 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}) 06:42:21 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) [ 354.930163] FAULT_INJECTION: forcing a failure. [ 354.930163] name failslab, interval 1, probability 0, space 0, times 0 [ 354.941469] CPU: 0 PID: 25416 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 354.948406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.957787] Call Trace: [ 354.960400] dump_stack+0x172/0x1f0 [ 354.964045] should_fail.cold+0xa/0x1b [ 354.967953] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 354.973061] ? check_preemption_disabled+0x48/0x290 [ 354.973090] __should_failslab+0x121/0x190 [ 354.973106] should_failslab+0x9/0x14 [ 354.973122] kmem_cache_alloc+0x47/0x700 [ 354.973137] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.973151] ? check_preemption_disabled+0x48/0x290 [ 354.973164] ? lock_acquire+0x16f/0x3f0 [ 354.973183] skb_clone+0x156/0x3e0 [ 354.982425] dev_queue_xmit_nit+0x309/0xa10 [ 354.982443] ? validate_xmit_xfrm+0x1f7/0xda0 [ 354.982464] dev_hard_start_xmit+0xa7/0x980 [ 355.012625] __dev_queue_xmit+0x2704/0x2fe0 [ 355.012639] ? refcount_add_checked+0x33/0x70 [ 355.012659] ? netdev_pick_tx+0x300/0x300 [ 355.017252] protocol 88fb is buggy, dev hsr_slave_0 [ 355.021455] ? packet_cached_dev_get+0x148/0x260 [ 355.025820] protocol 88fb is buggy, dev hsr_slave_1 [ 355.030239] ? sock_wmalloc+0x120/0x120 [ 355.053096] ? lock_downgrade+0x880/0x880 [ 355.057250] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.062790] ? skb_copy_datagram_from_iter+0x441/0x660 [ 355.062806] ? kasan_check_read+0x11/0x20 [ 355.062826] dev_queue_xmit+0x18/0x20 [ 355.062838] ? dev_queue_xmit+0x18/0x20 06:42:22 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0xc8041, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmctl$IPC_RMID(r3, 0x0) shmctl$SHM_LOCK(r3, 0xb) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/125) r4 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r4) 06:42:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) [ 355.062855] packet_sendmsg+0x3bb0/0x6440 [ 355.084149] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 355.089693] ? rw_copy_check_uvector+0x2a6/0x330 [ 355.094565] ? packet_notifier+0x840/0x840 [ 355.098819] ? selinux_socket_sendmsg+0x36/0x40 [ 355.103489] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.109056] ? security_socket_sendmsg+0x8d/0xc0 [ 355.113815] ? packet_notifier+0x840/0x840 [ 355.118145] sock_sendmsg+0xd7/0x130 [ 355.123084] ___sys_sendmsg+0x3e2/0x920 06:42:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) getpeername$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f0000000000)={'sit0\x00', 0x6}) r7 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000040)) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x10, &(0x7f0000618000)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="ea02516e", @ANYRES32=0x0, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES16=r6, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES16=r1]], &(0x7f0000a8a000)=0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x10, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 355.127068] ? copy_msghdr_from_user+0x430/0x430 [ 355.131833] ? mark_held_locks+0x100/0x100 [ 355.131850] ? kasan_check_read+0x11/0x20 [ 355.140235] ? __might_fault+0x12b/0x1e0 [ 355.144307] ? find_held_lock+0x35/0x130 [ 355.148377] ? __might_fault+0x12b/0x1e0 [ 355.152471] __sys_sendmmsg+0x1bf/0x4e0 [ 355.156477] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 355.160817] ? kasan_check_write+0x14/0x20 [ 355.165069] ? __sb_end_write+0xd9/0x110 [ 355.169146] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 355.174687] ? fput+0x128/0x1a0 06:42:22 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x3b, @multicast2, 0x4e21, 0x2, 'lblcr\x00', 0x5a, 0x8, 0x76}, 0x2c) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f0000000040)={{0x1, 0x0, 0x20, 0x0, 0x800}, 0x2d4, 0x9, 0x4df}) [ 355.177972] ? ksys_write+0x1f1/0x2d0 [ 355.181784] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 355.186542] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 355.191298] ? do_syscall_64+0x26/0x620 [ 355.195272] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.200639] ? do_syscall_64+0x26/0x620 [ 355.204620] __x64_sys_sendmmsg+0x9d/0x100 [ 355.208860] do_syscall_64+0xfd/0x620 [ 355.212668] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.217868] RIP: 0033:0x459a59 06:42:22 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x0, 0xfffffffffffffffa, 0x49}}, 0x28) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000600)=[{&(0x7f0000000180)="668fae3cb2b42cdeaaaef9f48b93d5171e5abcd68d19a385b0ab403b63a3c3a81eb02acee7f4e7ccb7df77198aaeb0bf66c6bc8250382ce778829e844fb4554c01e779acb31ad67522d2fc91e8997bd1863fa4ecae9d76cebef0ff4290d27647d2dd8e5786c19960a91cc7c1bca888c9307afe2386070543e542970fa1f204629d287605ceb831ffd8c82eb32c567caf30817b68beb663f743bd6a94d98a3962b2688d4ba883db14", 0xa8, 0x8}, {&(0x7f0000000240)="35af5d365c236a03e622207c8c4ab7f69d32b0352d704744d8e9bd53a09e7aa7af43fbd28190ed20dc826f6770d2a3c26123805730cc133a19526c8b667360b24b88c8f0307f69d97cbe42e63f8717386a233e13b649b7638baa76730dbb44b3bb4f9c9bdd2a6ef26516a0b2232113b1b8bc1f852d05c30924b8c5c183e56ad91091dd2018171695802342b4f22ff4f0d18a055ebe3b32a0250d8bc197e0bb83c83350fa3e5fc3b6aa75930073f81eaf1b205126e3fdaa31907a4ea68eeafd3b1147a2c45916e877c227b4d09f188cfa2f252916d6e2897a2789bea608f9170084bb3ecf35cd37b682a5", 0xea, 0xff}, {&(0x7f0000000340)="3310dd693237cb9e4dd7d65026288a532e3ec7318eb06ebdb307beda9055d2de6a2a0bfba36d3c38a6f6b1fe3fa6c4c3d693ed1d160c", 0x36, 0x6}, {&(0x7f0000000380)="18", 0x1, 0x1f}, {&(0x7f00000003c0)="701a56c5ebffcad08398d88ab37cc4bbea", 0x11, 0x8}, {&(0x7f0000000400)="e59241f76ccb423a1a", 0x9, 0xffffffff}, {&(0x7f0000000440), 0x0, 0x80000000}, {&(0x7f0000000480)="f7b3b0826e389c006a4403cc71710d481364c784b216bee2668886d844ae71cf89669e274222330c50873dca4a4d780234ccde5d435fb21effa53541bba4bc1784fa63e958e18dadf38ba161586f888c07ce36cd76dd27b4fda130e13bbb8a0931ada55ac17271ab4dfdb42fa29ece5b4ec94c60f6e1ab660f0f70f3aa2842f5bc4f63026b34eb8250a3acd855a1eb62af37", 0x92}, {&(0x7f0000000540)="5438f027cae1dea94c98f80519aab400609238cc367f70af46a4c1cfd002f032113f88b0d44848e9b660ddce3ac9a44c1e1cefd50ef3ff5acf8d319acc9e2470c34f40837c05f3e1ff4eb1335dce415b66c8435852ed0be5cd50962e3f42b6abfa53ed62b6a62d5a2874aa25980a71f64ee4ac3c2e9be10c9e63f47d40b92dee8b20863bd9e2dfecd6c5eb050a478bf6a1a2d944d014e4303cb226ef3253b2762903fb0c318c00196d37019b56", 0xad, 0x8}], 0x0, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) [ 355.221061] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 355.239961] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 355.247771] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 355.252748] protocol 88fb is buggy, dev hsr_slave_0 [ 355.255048] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 355.255057] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 355.255066] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 355.255074] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 [ 355.289286] protocol 88fb is buggy, dev hsr_slave_1 [ 355.420340] BFS-fs: bfs_fill_super(): No BFS filesystem on loop5 (magic=82b0b3f7) 06:42:22 executing program 4 (fault-call:6 fault-nth:44): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:22 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r3, 0x9) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000000)={{0x5f24dc55887db3fd, 0x0, @reserved="fedc0cd51ae6328a17af54f1e7299b6922256b2826ae5def118061b70c5c2bed"}}) 06:42:22 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}) [ 355.603361] FAULT_INJECTION: forcing a failure. [ 355.603361] name failslab, interval 1, probability 0, space 0, times 0 [ 355.614678] CPU: 1 PID: 25844 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 355.621602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.630947] Call Trace: [ 355.633544] dump_stack+0x172/0x1f0 [ 355.637184] should_fail.cold+0xa/0x1b [ 355.641089] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 355.646190] ? check_preemption_disabled+0x48/0x290 [ 355.651215] __should_failslab+0x121/0x190 [ 355.655449] should_failslab+0x9/0x14 [ 355.659252] kmem_cache_alloc+0x47/0x700 [ 355.663317] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.668859] ? check_preemption_disabled+0x48/0x290 [ 355.673877] ? lock_acquire+0x16f/0x3f0 [ 355.677870] skb_clone+0x156/0x3e0 [ 355.681412] dev_queue_xmit_nit+0x309/0xa10 [ 355.685751] ? validate_xmit_xfrm+0x1f7/0xda0 [ 355.690249] dev_hard_start_xmit+0xa7/0x980 [ 355.694573] __dev_queue_xmit+0x2704/0x2fe0 [ 355.698889] ? refcount_add_checked+0x33/0x70 [ 355.703389] ? netdev_pick_tx+0x300/0x300 [ 355.707535] ? packet_cached_dev_get+0x148/0x260 [ 355.712315] ? sock_wmalloc+0x120/0x120 [ 355.716291] ? lock_downgrade+0x880/0x880 [ 355.720437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.725972] ? skb_copy_datagram_from_iter+0x441/0x660 [ 355.731246] ? kasan_check_read+0x11/0x20 [ 355.735390] dev_queue_xmit+0x18/0x20 [ 355.739187] ? dev_queue_xmit+0x18/0x20 [ 355.743164] packet_sendmsg+0x3bb0/0x6440 [ 355.747311] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 355.752849] ? rw_copy_check_uvector+0x2a6/0x330 [ 355.757624] ? packet_notifier+0x840/0x840 [ 355.761868] ? selinux_socket_sendmsg+0x36/0x40 [ 355.766535] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.772436] ? security_socket_sendmsg+0x8d/0xc0 [ 355.777196] ? packet_notifier+0x840/0x840 [ 355.781435] sock_sendmsg+0xd7/0x130 [ 355.785149] ___sys_sendmsg+0x3e2/0x920 [ 355.789218] ? copy_msghdr_from_user+0x430/0x430 [ 355.793985] ? mark_held_locks+0x100/0x100 [ 355.798233] ? kasan_check_read+0x11/0x20 [ 355.802386] ? __might_fault+0x12b/0x1e0 [ 355.806538] ? find_held_lock+0x35/0x130 [ 355.810601] ? __might_fault+0x12b/0x1e0 [ 355.814682] __sys_sendmmsg+0x1bf/0x4e0 [ 355.818660] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 355.823000] ? kasan_check_write+0x14/0x20 [ 355.827244] ? __sb_end_write+0xd9/0x110 [ 355.831303] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 355.836858] ? fput+0x128/0x1a0 [ 355.840145] ? ksys_write+0x1f1/0x2d0 [ 355.844133] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 355.848892] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 355.853648] ? do_syscall_64+0x26/0x620 [ 355.857624] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.862986] ? do_syscall_64+0x26/0x620 [ 355.866967] __x64_sys_sendmmsg+0x9d/0x100 [ 355.871211] do_syscall_64+0xfd/0x620 [ 355.875020] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.880208] RIP: 0033:0x459a59 [ 355.883404] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:42:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4004, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r5, 0x2288, &(0x7f0000000040)) sendto$inet(r3, &(0x7f00003cef9f)="82", 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="64cd8a67a3864c8400cc058e53fa17f65f2e403b558733633c573b63ab0ff60aec3de1c51dd7e16e94e6561dc48e42fa7b13", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x100, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r11, 0x1, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'gretap0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r9, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000340}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r11, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000940) r12 = socket$inet_sctp(0x2, 0x5, 0x84) r13 = dup3(r8, r12, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r12, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00000002c0)={0x2, 0x0, @multicast2}, 0xffffffffffffffe9) sendto$inet(r12, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x7a, &(0x7f000059aff8)={r14}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={r14, 0x3}, &(0x7f0000000100)=0x8) r15 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r13, 0x84, 0x8, &(0x7f0000000240)=0x6, 0x4) getsockopt$sock_timeval(r15, 0x1, 0x15, &(0x7f00000001c0), &(0x7f0000000200)=0x10) 06:42:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:22 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r3, 0x9) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000000)) r4 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r4) 06:42:22 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)=0x101) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) [ 355.883411] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 355.883424] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 355.883431] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 355.883442] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 355.931989] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 355.939261] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:23 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r0, 0x9) r1 = fcntl$dupfd(0xffffffffffffffff, 0x21f9b4689a73e452, r0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000002c0)={0xffffffffffffffff, 0x5a76e16586e933c6, 0x4, 0x2e1bada169192648, 0x25b40000}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x5, 0x8009, 0x9, 0x2, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r3, 0x9}, &(0x7f0000000100)=0xc) r5 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) r6 = accept(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x80) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={r4, 0x7}, 0x8) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0xc0305602, &(0x7f0000000280)={0x1009, 0x6, 0x2}) 06:42:23 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x111, 0x1}}, 0x20) sigaltstack(&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)) [ 356.010946] Failed to obtain node identity 06:42:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:23 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x480001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x111}}, 0x20) fcntl$getown(r1, 0x9) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r3, 0x9) r4 = dup3(r3, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r5) [ 356.038988] Enabling of bearer rejected, failed to enable media 06:42:23 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x40100) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x1, 0xc}) 06:42:23 executing program 4 (fault-call:6 fault-nth:45): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f00000002c0)=ANY=[@ANYBLOB="840000000000000000000000000000000000400000002000000000000000000000000000000000000000000000000000530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000902042ec9a9b91271d3799b8000000000000000000000000008c687b7f8e1cf9b8b600000000377fc5ea8083a83802a22a4badf619e7b397fbc99db8d82ed60e425fd2d73af027408bdd96"]) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4a24, @broadcast}, 0xffffffc4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="d515ee793785652de928bd79b50197703d9cf1e11b6cc910a445089bb1edef41252bf0e594226a8cfb5ae55f73d328cc25ae07dc5ad72a9003d50f0641733caa84dfa4", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$bt_sco_SCO_OPTIONS(r9, 0x11, 0x1, &(0x7f0000000000)=""/206, &(0x7f0000000100)=0xce) 06:42:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:23 executing program 3: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:23 executing program 5: r0 = semget$private(0x0, 0x1, 0x1280631fc3a2d43b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) recvfrom$inet6(r2, &(0x7f0000000000)=""/119, 0x77, 0x40000000, &(0x7f0000000100)={0xa, 0x4e21, 0xa736, @mcast2, 0x9}, 0x1c) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x100) getsockname$ax25(r3, &(0x7f00000001c0)={{0x3, @netrom}, [@netrom, @null, @netrom, @bcast, @rose, @default, @null]}, &(0x7f0000000240)=0x48) 06:42:23 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\t\x00*\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000000)={r6, 0x1}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r7 = dup3(r0, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r9) getsockname$unix(r9, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) r10 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KVM_NMI(r10, 0xae9a) r11 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r11) [ 356.486353] FAULT_INJECTION: forcing a failure. [ 356.486353] name failslab, interval 1, probability 0, space 0, times 0 [ 356.497697] CPU: 1 PID: 26197 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 356.504629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.513992] Call Trace: [ 356.516604] dump_stack+0x172/0x1f0 [ 356.520249] should_fail.cold+0xa/0x1b [ 356.524209] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 356.529326] ? check_preemption_disabled+0x48/0x290 [ 356.534359] __should_failslab+0x121/0x190 [ 356.538598] should_failslab+0x9/0x14 [ 356.542400] kmem_cache_alloc+0x47/0x700 [ 356.546474] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.552018] ? check_preemption_disabled+0x48/0x290 [ 356.557041] ? lock_acquire+0x16f/0x3f0 [ 356.561029] skb_clone+0x156/0x3e0 [ 356.564583] dev_queue_xmit_nit+0x309/0xa10 [ 356.568905] ? validate_xmit_xfrm+0x1f7/0xda0 [ 356.568929] dev_hard_start_xmit+0xa7/0x980 [ 356.568950] __dev_queue_xmit+0x2704/0x2fe0 [ 356.582046] ? refcount_add_checked+0x33/0x70 [ 356.582072] ? netdev_pick_tx+0x300/0x300 [ 356.590702] ? packet_cached_dev_get+0x148/0x260 [ 356.595474] ? sock_wmalloc+0x120/0x120 [ 356.599459] ? lock_downgrade+0x880/0x880 [ 356.603614] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.609163] ? skb_copy_datagram_from_iter+0x441/0x660 [ 356.614458] ? kasan_check_read+0x11/0x20 [ 356.618620] dev_queue_xmit+0x18/0x20 [ 356.622434] ? dev_queue_xmit+0x18/0x20 [ 356.626413] packet_sendmsg+0x3bb0/0x6440 [ 356.630565] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 356.636109] ? rw_copy_check_uvector+0x2a6/0x330 [ 356.640898] ? packet_notifier+0x840/0x840 [ 356.645143] ? selinux_socket_sendmsg+0x36/0x40 [ 356.649831] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.655374] ? security_socket_sendmsg+0x8d/0xc0 [ 356.660136] ? packet_notifier+0x840/0x840 [ 356.664387] sock_sendmsg+0xd7/0x130 [ 356.668114] ___sys_sendmsg+0x3e2/0x920 [ 356.672103] ? copy_msghdr_from_user+0x430/0x430 [ 356.676877] ? mark_held_locks+0x100/0x100 [ 356.681126] ? kasan_check_read+0x11/0x20 06:42:23 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) socket$inet6_sctp(0xa, 0x5, 0x84) 06:42:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x11) r2 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:23 executing program 3: syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x80000001, 0x10000) r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0xd15, 0x400001) sysfs$3(0x3) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, {0x400, 0x4, 0x800, 0x1}}) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) 06:42:23 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8400, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3a0}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffe35c}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf9}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4d0}, 0xc0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) [ 356.685288] ? __might_fault+0x12b/0x1e0 [ 356.689358] ? find_held_lock+0x35/0x130 [ 356.693430] ? __might_fault+0x12b/0x1e0 [ 356.697522] __sys_sendmmsg+0x1bf/0x4e0 [ 356.701507] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 356.705843] ? kasan_check_write+0x14/0x20 [ 356.710098] ? __sb_end_write+0xd9/0x110 [ 356.714167] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 356.719709] ? fput+0x128/0x1a0 [ 356.722986] ? ksys_write+0x1f1/0x2d0 [ 356.723007] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 356.723020] ? trace_hardirqs_on_thunk+0x1a/0x1c 06:42:23 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) [ 356.723031] ? do_syscall_64+0x26/0x620 [ 356.723048] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.731572] ? do_syscall_64+0x26/0x620 [ 356.731590] __x64_sys_sendmmsg+0x9d/0x100 [ 356.731607] do_syscall_64+0xfd/0x620 [ 356.757646] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.762844] RIP: 0033:0x459a59 [ 356.766044] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:42:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = socket$bt_bnep(0x1f, 0x3, 0x4) signalfd4(r5, &(0x7f0000000000)={0x9}, 0x8, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_PPC_GET_SMMU_INFO(r7, 0x8250aea6, &(0x7f0000000040)=""/89) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) [ 356.784945] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 356.792649] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 356.792663] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 356.792671] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 356.792680] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 356.792687] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:24 executing program 4 (fault-call:6 fault-nth:46): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0xa0b04) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'\x00', 0x0}, &(0x7f0000000340)='F', 0x1, r3) 06:42:24 executing program 5: r0 = semget$private(0x0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) 06:42:24 executing program 3: io_setup(0x8, &(0x7f00000004c0)=0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80080, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='rdma.max\x00', 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) io_submit(r0, 0x1, &(0x7f0000001bc0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000280)='z', 0x1}]) r3 = syz_open_dev$video4linux(&(0x7f0000000240)='/#\x00\x00\xff\xff\xff\a\x00', 0x2090a9, 0x30800) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x242800, 0x0) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000180)=""/232, &(0x7f0000000100)=0xe8) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x410900, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) renameat2(r5, &(0x7f0000000040)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00', 0xb) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000002c0)=0xffffffff, 0x4) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, 0x0, 0x0) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200f9f4b53867677ebb9c08e927bcb0a161ad5bcc031601f61100009913639b05800e42e971a14002a6e70c4ec6f789332c90bbdef90a1a10e80c43dc1b7d683886c8d743dd7bb342b4d2142b5dcb43abd3b5ec5ad5581250bf75cc6c816deacfd913e2046053cd6fee1ac9e00574b223430b9037aa99800299ad8fccc1cc24e484c9adb9215a45ed851b22b297f74c77d1dc12fcd82b22c89066084a5bb9bf53e6e49b62b169", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x10, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) [ 357.135021] FAULT_INJECTION: forcing a failure. [ 357.135021] name failslab, interval 1, probability 0, space 0, times 0 [ 357.150495] CPU: 0 PID: 26549 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 357.157448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.166804] Call Trace: [ 357.169422] dump_stack+0x172/0x1f0 [ 357.173066] should_fail.cold+0xa/0x1b [ 357.177085] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 357.182287] ? lock_downgrade+0x880/0x880 [ 357.186445] __should_failslab+0x121/0x190 [ 357.190774] should_failslab+0x9/0x14 [ 357.194584] kmem_cache_alloc_node_trace+0x274/0x720 [ 357.199692] ? __alloc_skb+0xd5/0x5f0 [ 357.203511] __kmalloc_node_track_caller+0x3d/0x80 [ 357.208662] __kmalloc_reserve.isra.0+0x40/0xf0 [ 357.213335] __alloc_skb+0x10b/0x5f0 [ 357.217064] ? skb_scrub_packet+0x490/0x490 [ 357.221404] ? mark_held_locks+0x100/0x100 [ 357.225641] ? trace_hardirqs_on+0x67/0x220 [ 357.229308] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 357.229970] alloc_skb_with_frags+0x93/0x590 [ 357.229986] ? mark_held_locks+0x100/0x100 [ 357.230000] ? avc_has_perm+0x379/0x610 [ 357.230017] ? find_held_lock+0x35/0x130 [ 357.258081] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 357.258098] sock_alloc_send_pskb+0x72d/0x8a0 [ 357.258118] ? packet_cached_dev_get+0x148/0x260 [ 357.274711] ? sock_wmalloc+0x120/0x120 [ 357.278695] ? lock_downgrade+0x880/0x880 06:42:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r2, 0x9) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r5, 0xf01, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1002008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="24002fc93ddd7e143bbac84c07565b8ded002c26b76330c926a62a00000000", @ANYRES16=r5, @ANYBLOB="200029bd7000fcdbdf25030000000800040007000000dafe050001040000"], 0x24}, 0x1, 0x0, 0x0, 0x14094}, 0x800) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/642]) r6 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r6) 06:42:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:24 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000000040)={0x7, 0x4, {0x53, 0x8000, 0x0, {0x8, 0x6}, {0x1, 0x603}, @ramp={0x3, 0x3d06, {0x3, 0xfff7, 0x2000, 0x100}}}, {0x56, 0x1, 0xfff9, {0x200, 0x7ff}, {0x1, 0x6}, @period={0x0, 0x5, 0x9539, 0x80c, 0x7f, {0x1, 0x3, 0xbdf, 0x5}, 0x5, &(0x7f0000000000)=[0xfff7, 0x3, 0x5, 0x5, 0x7fff]}}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r5) [ 357.282850] ? kasan_check_read+0x11/0x20 [ 357.287011] packet_sendmsg+0x1a16/0x6440 [ 357.291170] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 357.296717] ? rw_copy_check_uvector+0x2a6/0x330 [ 357.301476] ? sock_has_perm+0x209/0x2a0 [ 357.305580] ? packet_notifier+0x840/0x840 [ 357.305604] ? selinux_socket_sendmsg+0x36/0x40 [ 357.305619] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.305634] ? security_socket_sendmsg+0x8d/0xc0 [ 357.305647] ? packet_notifier+0x840/0x840 [ 357.305669] sock_sendmsg+0xd7/0x130 [ 357.305683] ___sys_sendmsg+0x3e2/0x920 [ 357.305697] ? copy_msghdr_from_user+0x430/0x430 [ 357.305718] ? mark_held_locks+0x100/0x100 [ 357.305735] ? kasan_check_read+0x11/0x20 [ 357.305755] ? __might_fault+0x12b/0x1e0 [ 357.305769] ? find_held_lock+0x35/0x130 [ 357.305785] ? __might_fault+0x12b/0x1e0 [ 357.329170] __sys_sendmmsg+0x1bf/0x4e0 [ 357.329189] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 357.329207] ? kasan_check_write+0x14/0x20 [ 357.345946] ? __sb_end_write+0xd9/0x110 [ 357.345966] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 06:42:24 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) getpeername$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'vxcan1\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) recvmsg(r2, &(0x7f0000000480)={&(0x7f0000000240)=@ipx, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/61, 0x3d}, {&(0x7f0000000380)=""/205, 0xcd}], 0x2}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_S_AUDOUT(r5, 0x40345632, &(0x7f0000000000)={0x2, "45ee210fa3901640a66a19f69ff4e90d640606b23a3ace4a13693e0133f04216", 0x2}) r6 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r6) [ 357.345979] ? fput+0x128/0x1a0 [ 357.354159] ? ksys_write+0x1f1/0x2d0 [ 357.354197] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 357.354212] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 357.354227] ? do_syscall_64+0x26/0x620 [ 357.354241] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.354255] ? do_syscall_64+0x26/0x620 [ 357.354275] __x64_sys_sendmmsg+0x9d/0x100 [ 357.354292] do_syscall_64+0xfd/0x620 [ 357.354310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.354321] RIP: 0033:0x459a59 [ 357.354336] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 357.449604] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 357.449621] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 357.449630] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 357.449638] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 357.449650] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 06:42:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r6 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x5, 0xaeebc2a5d8d1c4a6) bind$tipc(r6, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3, 0x3}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x10, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0xfffffffffffffd0c) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, r9}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@mcast2, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r9, r10, r11) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0xfffffffffffffffa) 06:42:24 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x5, &(0x7f0000002340)=[{&(0x7f00000000c0)="7b3009a2cbb6571f1de891cc68f9d848d9d0922e17690b4b036bfe6618aee153ed272f41fb778056ba4d6493694219e9dad3e98129450a09ab0a9238f0fa1b587caf29bd2c8da54654ed0cbc83fd08aba1cb2a336d0854891ab2e79714cc691c4507f7a417694a9781d9df44ca96b17b0356512179efd247ce4f455a6f5a2977ef31a87b313909f81b0ffaa6ed", 0x8d, 0x7ff}, {&(0x7f0000000180)="3a2c15945a048205937bda892252de7239391dbaf6dbaa7409692bd885ee563209c837a4a3f15db7acb686a214d120e11d22eab9b3789be09045f4f6e4534a30a03ad866ef785bce984bed26a5e6d7e436361d26517fee978df0249cb7b4a6390b871d15c53b0bb7b285eb9b23144d1d2f03191112da34f23095a06d337f73e3a74d0e36b88cc1b0814b3c05addf1f193f2e3417acb572870397c33df746aef6124ad503ad34a0a3484bfdbacc9f19425fb2271273f6b6a37508ef", 0xbb, 0xffffffff}, {&(0x7f00000012c0)="272698e6e2e447459196fafd21ca7d6870ee08c4616ab44083c6", 0x1a, 0xbc}, {&(0x7f0000001300), 0x0, 0xffffffffffffffff}, {&(0x7f0000001340)="2896bff6f1014a2b38fb809c0c6abcbae7df4ba66e67e92c8dbb0843a46c86b8a2eb0f244b45b73d203aebb593e25517d86ed474d4f11e9abe7e50837924fee48fc65c4fed8c7cff67c648ef58e7ae3b6059bdf182e636265570af2d820e62a403ab54f450ee5a3bd21e43a93832b1e8986521bf1f270c81b049f638c66c83a8a3b2da79f7e2fd91778e9875b868548a6b24e68f8b3f12972d6b463d09b150348e509d0b4626fde1be66a29cd064efa601caa8b5898dec28de335c0227c51bb5abe5be7c58a5dc8fda2025d302fb7f6f236a891000c5edc5f330f039f9158ae0ac4a24a9d9e79020702fbcb5d973a900064824357bcf889dea184f91e3827f3ec22c5e7e8dfc7392c0153260aa986a87413141c9882af24547907830c6ca96495f2e3339b22beae734395dd46dd7d98f0c2b06c20ce25984a63c7ff3ac38fabe62b6d794ac9547fbd629dfb57998d318e8455975cdeb28d452a7ed13dd0309091ddf30c0e84e547160ce4ef8cdcc8b102422d183dbb6fad2808b1a75cebdb4c2b6b16bea7f1de83fb43e2d153a8a898836a88e0f9f4203dbf32873603d225cfc81d5c92903fabf82cc7a0a54c841b73cd3dd37e7cf06097b84b5cf58f9b9db6b55c13202d44294b09441600cc0f716489c9f26849a23daf9e0f688d15d6d79896e88f9595b6165a941a1bb6cc263b993c23f347c3be2314110a181db8d882a3076500c02612cc29c16da0c13ed2d49b2ade6f458543d7ee096ba4f80ebf0f01fc25120764d61d9c3d1ca1980a26504d2d6b0d7a86f32faeb1ee611f1c0777379d162939958b7a4c0e80cd8fa99e917d2c58576cd85aedf7333d1aa7cc2e3548e00c790ffe334d554610daf30b74a89c1ab09ee540c2d0691919aba038cb021a2e992f64658ccd59591fedc9eeef2bc98527c0ebbd80b99e8a77b861c6d2239c4e98f667f918678293063d7a1e24c8400ff2c29bd79f255fa54ebbeb48dfaf39fd439fff706f7128a2cceac071e663d840f079cacf9b63f262822dad6c4294ba1b4c185b510da3572274c3cc6da0fbeae18be2604a0825f4768a843583c275260948ce8ea05c8cf5a1f44fd840352a4e0db5b0f895b070851773700df15e8adb9d5186f0459192a43d3c6aa887a017bd0cb0d75c94f35f1f9330187cf5a160e04d91ed40d243ebb97d53635a2d542f6b13bfdc01227542b3681fe3e38a432539e14f6c73f55afa024bac449da428c7a9eee2efbc9b20e1fbd899a6b849e8e2319ced60fb060ef878a38ce1aadb0c4abe0055981a49a71898ae1ca8083738a8fab4f2911ba50200770118630ffb4413a21094204336bba5acad11e76b5a4ec55a2df30ed110cce63b5c9a2e48b80180b17c1a5bcdaad01c9931546437ac5d229f3357bf21bc9e2f6f464553815604eb1814a42d025f713b5289b9bac7ae8370b3f83e1e82afe5f042cc172fd0c99f463253ecc73b7f00f445410ef9cf73edfbef9a20e5ee4ccefb89c93d743c1d62c314958fb9d0a2833130a395c9808f6f38ae958c467d12bb5de339aef6d493213a9d0430e9b10ef557fcc395612c22b00736d0248ff223ee9f141118d112c65eee40185084f1b7cd39036de094535cb32ab3cef0fa5492a8bd2f187a21b0ee9a261fac9a67f7ee25bdaa57049c0db24233e7c4298f3da5b3e317196b9c5196c8b5c5430c5f6966830933a42bb02f2e309d03be99a42e868410fbcd8814e2dff2eae01abce84fa3e125ff54f84a6703ba2bbf5a9b8eb15a783965a92f2e5326d816a7b704436ca2763ca9d6fea72a5379a129b10b0c261ab703de68c723c8fc76d380b6bac9f611c535a591780268a068c93385e3dc47aaf039a7022bcf7ba5d7c63cd003ebb579a0b16e0bf6dad07ea21cde50bdeb1ade55da63b5676227318b4a2a3a87fc907548bfc46dcde47aa7084743d5c2cf8a1d8beaf9f1036db1515cfe04fc912d25a29473a6878116c261412a8ba19f50da835a71663fd8992bf364603774965d9f47e1c8406f20f727524f8a63a199eb3a3bd9ef2afdba6ec951e1bd5797903ab1a2e8674b36fd5f1694bc029704bf8044b4609544eff8c96457f5da7bf69e564f5f787fe98564305ecbc23477cd8ba7ee5e9c69d98c36a325735e782c04e2b5c8686300d7725127559bcfd2dbaa582fe87ea2ed3db239fea27e772bc1cdd15e42d1c063b0e040228e07b1c0f183b59bdab2f800924fcfb0ba7a312a355de1b17727b7897afb76636bc8d86709848f35a853a91ff7a36f7830e559ca21828db03a9c19b8641d603f10baa23f3258590a9c76758b7beb9d9eae19ed4a9b20ad0e3e9b01c13bf8ead2e1af4d3c8835d27f69e4ae2e3cd40bcd24352455c01b6b70035dc49b150bf969188b3c1305c3bb03605a95d501ff66058a488cdc9e948b5aea3f83c6a2b06ed6917969188d8c27926ea031fc886408001565830c1af799b14811fd63f335844c161782b9a96ce0e2e8f80ca79863b7152ef8e1d1d102357396140c36b0ee18445577a7363c5594205b7c4b8a2a331eb2be1e419525e7f9b1867b77e6915962692ce30b7ada6b620fe4c6e2bc213905330270e291ebae6c053fcbe8f7558a8a26c47495f074d0dca30bff512d329a29c98a43ef801e0dd7fbd82e8042e6f65a89dbba96837b3c8eb3dae19fe8212b41293b878e32f5fd124f1c51bc1b2cf3edf64f06d310c08efce4a93ed4a8d357b86688b9657a1c9c1197f91a961c2a33beec4bc64202b67df6764e592838408c7e209a93c5564d8db04b88a90a6a32cfd3e0ac928fd0b251541568762a8dc7b62e1037ee777e051ea94d450313d884197aca7166900eadba486434928363a3dbcea04f8a87ba2e3fca803adab05d06b95ade676e7345837afd6fbf6ff327247b4cd1a637250edddc9055c333e396b1279225477a20e8a9d5684e75f700ccc68a22c6c122cd877178b1a15f6d46dc41857953fed4a56a6f67565a53dc25b2739c3daf9a12ecc2056786950b6f0028af93b17f555a16bb2a662db06a8b0bcdf520e50d0842d658515c9ac1859b4540d8615dcf20ed587fb6bb88fd0214524e6aecb498607031186eb230740c60c84fa449bb242f61106f0eabc1c9eb922a9dbf89abffd1a5907385443e210268019c55a0cb8edb4cd2f7be96884cc1fe348645c06e71fa89ed2af16f6f92a07a475676b2990fbf751b0fa3e79e1321f32150bc8fd6af0f95cc501a193a4bc2092da86fad34e73b8b9d8d7de9432adad0afc24c6cced526f44b01ea1ec5d7af4336a5e78351de5b0f5fb28af57efef605307bfab937b79ada764bd03386a050635af3f24ad638ee43ec66e4525baa996c04df3ff8aa984ce0b6867c94daec7e5002e6909bd0931741492917a987d21146f92a6bbe467f9da6ff3c932427b42be2719d27679a11e003cdb0b3b35c8f9878476689dda46040138f342e12b0c8b8eb0bb7d8e513791cf670a5f93b553c635d9dfad9ce0345680ee13e7cd697a9e86bd511841a1377aa68290bb013f80912924022b7a6c9f716597fd8f4c0e5a4ae8e19618a23c6ad88ddaaadb9fe4408d175131abe2f1911c924ff37abc57f872db80f4b846b6c127541a882de108f7894fa316e24edcdcf8b00e1eb0b3e34cbd3e53ae292105d6b77b6c4fd634e242e5dc9c0fe5c15a389bcd27d54d12432b3f209ddb4857583a91e2ad923f618a7cb42d3c6fedfc0fb25b3660e1aa6bee2967559b91b988ad71206c03639f16a049a4c71873751dd7d76ca4c402705a7ff5b1604edba51fde39de9be8f99120b62adab3caf48274a3e5b44bd8b3f297564bbecdf4488fc0331a334f58dee9b747d1494ee9d8f441694bd9c09b8761d7fd050ab73764d8e9b4d689f8eca1ba4aa970234f429da3279271bba80c07a585ae58d9467e328941575fae46ed926848dcde7c900dc744e3ecc271db9f6196fea62407999c4c75469434872d983fde36d8f5b194855ced5205b4dc805c53dc70c3191d0a686871ef06ca91c6df89081937b06ba187b70b2f09247f554d1c65cc2e0d4a8952037b0e52562fed7d2113c6f3754a7136a8a446c24834eea8af33d306469c4608c36ac04b836a150e38bf3e9e9bd67252c0578576ffe1641d21058c741b3dd73177ebaa3bbc8861a0edb1c74a6e5504670d86389a57e686ffa5fdca8abc3110620a1930d831caf21147f9185100e17e1be8481a6ab7e83eb7bfa837660eb74a7d52e1b24a9bc0ee532d01f9551e1a7a4add1fbc51adb0f9ecb5d3fcc6ec2e4a6914141dc8b072f8831743db4da7df5ebde6d064875b61e63930749454686c2d4b8b56961b7d92d8e5fef54b526d5ae0784ae9567bebb47640800c47b1767c6fe69d9d8e89805a5e1017541bf15543420d93e2de8e783028c36fd5167481994d379f5a4799e1b1590029bb4a0dbb259cbbfde66da06ee87ee1f7dd6bbf6651ca66eeef5b07e99d4e76d5903bcb8f95405dea11469d44337833bfeba38a5bda2a207be25c5c2d7a4eb4f356e7cf59f7d9e7173946e3d78aaf37ed00f4f2898ff3e0af65df722c3a94183f0787473eea6e804f0729e233682bd3bbb2e741b9567d0fd470f68b8a24eba257d549800ad5cfbdf270b889b74085f0c38880ef077e6855effdfef52f4998f27dd58a27a19ff83feb89b7027cfc4aab76af9a270b75d4a74da6037ebaaab9c523e8bc669eb656053fccbfe1f43e2e6047d6f2515d25914451349d2c04e3a018facab6b8d4c5bf0d89c42f0045286666b69c0273ca9bc17597d4393e3cbe1dbb2cb7b2f5f011a6147c8346090bbc51bb9628626f1454c1e830447ba1289c81bebf2eb66171fbd6265440f40fe46af9a252465455e99afda9ceda18102e0a13013bd82254f6fd61e22caaeb81db83c86a1ac084f519e34add62258b9c13c407d14bb4f46a3cfbc59c84f52728a71ae2434b120dcee485f231ea1052ac4d49776392fa5083182ca83d675ae6f56cee410da7e34964bee10747a99dac751118e072a18ad2ef450be576dc279755dbb6483eef48604658b10203581c61e9cd6e0d92a58e019b088a91bdef6710bb66f962796d5b4eca1de934a9e6f1165aa2e2915b61412b116cd86f6f640d854bddfdcf56ebf790a2e71f2ed421a68de0723dac7eaa92eaaa532959a845fb5c959f23f84e30c10c1a611d5d326a129ec49ce4a24fb0e17bd0c9f5cd0bd187bf66559fdc01cb07e02cdde1e174c4e3ca756a437b11f66e37a9982ba8918bad68914157ce82d7524ca4ed4334013c7344cd333583f12664cd401ab59e47c3cfc6fa8591a5ffafb6745abc0762b38bdffd11c5f690b8d487dd9d6324e3dc4331ad97dfc57d364e3685ac5d434d2420c4b61470bba334648fb2a35c97c91e80ef8083ffc150ce72967c5c7f38ec95dcbb9ac49070ce8846768f9f30c632520a81fe9551f842c9458cd0baf1869a652de5f39bdf529cb94eb7dc58a0eda6261a9f7bcd9b27d254e3e230338fd42d5e6c6203b59475f04d2c761e3241e05e1a5dd9a90addbde9222d45b9f62028d0a64f4979163f59e81b36ec27aad1b8229dfe29f49202ca44ea25a233d8f55b3a1e3f6fb4c44af6b7d7cc81bfb5f29cee6a39f4e30f9dd0aa31aef9e202455aa13f66c5eba54f5e12fb3989473db69458b084837d4f8a84f0191989d3e294db9dcf8b3e70ee960750652e6517e555932eb6f480efe17bbf98e3ff28dcc63861cdb2b75c42dba2f2c7b90f718a7ba9be2579cf0b4692973925bdf5e984cb00"/4096, 0x1000, 0x5}], 0x42000, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x408002, 0x0) read$FUSE(r1, &(0x7f00000002c0), 0x1000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000001300)='/dev/null\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000025c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000002640)={0x5, 0x10, 0xfa00, {&(0x7f00000023c0), r3, 0x3}}, 0x18) [ 357.449659] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:24 executing program 4 (fault-call:6 fault-nth:47): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:24 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080), 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) 06:42:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:24 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/tev/v4l-subdev#\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000000)={0x1, 0xdd3d}) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x201) write$9p(r1, &(0x7f0000000080)="4f54c498a3352b9e02e73ac25b8bc947ad42bc45a4a95a14c6c2c3224719332dd4a0fb94599dd862e76f564aa5c68e73091b6c0e92f5c63607f29abff55924f7d18e5137d275f2e0f2", 0x49) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r2, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$nbd(r5, &(0x7f0000000300)={0x67446698, 0x0, 0x2, 0x0, 0x4, "bc8fb0ce3e58831a640c9b3000458d568316e748485545de8fa6125c22d4c40da652f95ac64eede17130dee45da6386e7bc78d5f0424b70b348214bf0a714254b64c6657bc6cb6401dcc7aba468e8469b72dc8c8b4523631270d3c8198188879e7a2da33924b251ba322cbc809d7f2635071c89b292099933136eee5cf983f8abbab53ce8fdf66b2d8b25bc53d201f"}, 0x9f) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000200)=0xe8) getgroups(0x2, &(0x7f0000000280)=[0x0, 0x0]) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/current\x00', 0x2, 0x0) fchown(r2, r7, r8) 06:42:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) [ 357.814182] FAULT_INJECTION: forcing a failure. [ 357.814182] name failslab, interval 1, probability 0, space 0, times 0 [ 357.825472] CPU: 0 PID: 26943 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 357.832401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.841755] Call Trace: [ 357.844354] dump_stack+0x172/0x1f0 [ 357.847999] should_fail.cold+0xa/0x1b [ 357.851898] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 357.857019] ? check_preemption_disabled+0x48/0x290 06:42:24 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='\xdalC\x02\x00', 0x90a9, 0x208765) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) [ 357.862054] __should_failslab+0x121/0x190 [ 357.866297] should_failslab+0x9/0x14 [ 357.870110] kmem_cache_alloc+0x47/0x700 [ 357.874179] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.879722] ? check_preemption_disabled+0x48/0x290 [ 357.884733] ? lock_acquire+0x16f/0x3f0 [ 357.884752] skb_clone+0x156/0x3e0 [ 357.884771] dev_queue_xmit_nit+0x309/0xa10 [ 357.884787] ? validate_xmit_xfrm+0x1f7/0xda0 [ 357.884807] dev_hard_start_xmit+0xa7/0x980 [ 357.905424] __dev_queue_xmit+0x2704/0x2fe0 [ 357.909751] ? refcount_add_checked+0x33/0x70 06:42:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000100)={0x3, &(0x7f0000000000)=""/22, &(0x7f0000000080)=[{0x0, 0x39, 0x80000000, &(0x7f0000000040)=""/57}, {0x6, 0xe9, 0x33b9, &(0x7f0000000180)=""/233}, {0x800, 0xca, 0x3f, &(0x7f0000000280)=""/202}]}) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x10, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) 06:42:24 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="a4b72ffc281b47d63f4f33de1a3fde15892b06e54f75215bf6577a2d529652262b941f95dd2ec195e20899474e35455316471bc7afb099ab3e1f7ed9ea47e20a89fc316573e26d59cb5fc53102eaca87d27116c3b455238e9ad5ec4f26f0a2aa181000941b015a60e9d19bef100f", @ANYRES16=r4, @ANYBLOB="01070000000000000000130000f00c0009000500020000000000"], 0x20}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_PROPBIT(r6, 0x4004556e, 0x17) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) r7 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT(r7, 0x0, 0x12, &(0x7f0000019380)=""/102385) r8 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT(r8, 0x0, 0x12, &(0x7f0000019380)=""/102385) semop(r8, &(0x7f00000001c0)=[{0x3, 0x7, 0x2000}, {0x407c637a1aad16c3, 0x7051, 0x2000}, {0x0, 0x5719, 0x800}, {0x3, 0x400, 0x800}, {0xd6b5fbafb6f7a23e, 0x18, 0x86ccc13eb794ff12}], 0x5) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x20, r10, 0x701, 0x0, 0x0, {0x13, 0x0, 0xfffffffffffff000}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x5}]}]}, 0x20}}, 0x0) ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f0000000180)) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) [ 357.914263] ? netdev_pick_tx+0x300/0x300 [ 357.918419] ? packet_cached_dev_get+0x148/0x260 [ 357.923183] ? sock_wmalloc+0x120/0x120 [ 357.927174] ? lock_downgrade+0x880/0x880 [ 357.931420] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.936966] ? skb_copy_datagram_from_iter+0x441/0x660 [ 357.942252] ? kasan_check_read+0x11/0x20 [ 357.946413] dev_queue_xmit+0x18/0x20 [ 357.950223] ? dev_queue_xmit+0x18/0x20 [ 357.954204] packet_sendmsg+0x3bb0/0x6440 [ 357.958363] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 357.963907] ? rw_copy_check_uvector+0x2a6/0x330 [ 357.968700] ? packet_notifier+0x840/0x840 [ 357.972964] ? selinux_socket_sendmsg+0x36/0x40 [ 357.977650] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.983205] ? security_socket_sendmsg+0x8d/0xc0 [ 357.987972] ? packet_notifier+0x840/0x840 [ 357.992219] sock_sendmsg+0xd7/0x130 [ 357.995943] ___sys_sendmsg+0x3e2/0x920 [ 357.999928] ? copy_msghdr_from_user+0x430/0x430 [ 358.004704] ? mark_held_locks+0x100/0x100 [ 358.008872] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 358.008947] ? kasan_check_read+0x11/0x20 [ 358.020444] ? __might_fault+0x12b/0x1e0 [ 358.024510] ? find_held_lock+0x35/0x130 [ 358.028577] ? __might_fault+0x12b/0x1e0 [ 358.032669] __sys_sendmmsg+0x1bf/0x4e0 [ 358.036656] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 358.040991] ? kasan_check_write+0x14/0x20 [ 358.045241] ? __sb_end_write+0xd9/0x110 [ 358.045259] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 358.045271] ? fput+0x128/0x1a0 [ 358.045284] ? ksys_write+0x1f1/0x2d0 [ 358.045304] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 358.045318] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 358.045332] ? do_syscall_64+0x26/0x620 [ 358.045349] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.054917] ? do_syscall_64+0x26/0x620 [ 358.054939] __x64_sys_sendmmsg+0x9d/0x100 [ 358.054957] do_syscall_64+0xfd/0x620 [ 358.054976] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.054988] RIP: 0033:0x459a59 [ 358.055002] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 358.055009] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 358.055024] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 358.055032] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 358.055040] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 358.055047] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 358.055054] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:25 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000000)={0x11, 0x13, 0xd, 0x1b, 0x3, 0x8001, 0x2, 0x146}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$2(0x2, 0x3, &(0x7f0000000040)=""/79) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) 06:42:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r6, 0x9) fcntl$getown(r6, 0x9) 06:42:25 executing program 3: syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fanotify_init(0x4, 0x1000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x805fc002f254523e, 0x0) fanotify_mark(r1, 0x1, 0x40000000, r2, &(0x7f0000000080)='./file0\x00') r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x80000001) r6 = shmget$private(0x0, 0x13000, 0x10, &(0x7f0000feb000/0x13000)=nil) shmctl$IPC_RMID(r6, 0x0) shmctl$SHM_LOCK(r6, 0xb) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) shmctl$IPC_INFO(r6, 0x3, &(0x7f0000000180)=""/175) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0xc0305602, &(0x7f0000000280)={0xa111f7656cb7b09a, 0xc, 0x1}) 06:42:25 executing program 5: ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000000)) r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) semop(r0, &(0x7f00000000c0), 0x0) 06:42:25 executing program 4 (fault-call:6 fault-nth:48): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) [ 358.503883] FAULT_INJECTION: forcing a failure. [ 358.503883] name failslab, interval 1, probability 0, space 0, times 0 [ 358.543886] CPU: 1 PID: 27215 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 358.550870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.560218] Call Trace: [ 358.560244] dump_stack+0x172/0x1f0 [ 358.560266] should_fail.cold+0xa/0x1b [ 358.560285] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 358.575541] ? lock_downgrade+0x880/0x880 [ 358.579702] __should_failslab+0x121/0x190 [ 358.583944] should_failslab+0x9/0x14 [ 358.587755] kmem_cache_alloc_node_trace+0x274/0x720 [ 358.592873] ? __alloc_skb+0xd5/0x5f0 [ 358.596800] __kmalloc_node_track_caller+0x3d/0x80 [ 358.601781] __kmalloc_reserve.isra.0+0x40/0xf0 [ 358.606463] __alloc_skb+0x10b/0x5f0 [ 358.610190] ? skb_scrub_packet+0x490/0x490 [ 358.614519] ? mark_held_locks+0x100/0x100 [ 358.618758] ? trace_hardirqs_on+0x67/0x220 [ 358.623101] alloc_skb_with_frags+0x93/0x590 [ 358.627519] ? mark_held_locks+0x100/0x100 [ 358.631769] ? avc_has_perm+0x379/0x610 [ 358.635755] ? find_held_lock+0x35/0x130 [ 358.639824] sock_alloc_send_pskb+0x72d/0x8a0 [ 358.644326] ? packet_cached_dev_get+0x148/0x260 [ 358.644345] ? sock_wmalloc+0x120/0x120 [ 358.644362] ? lock_downgrade+0x880/0x880 [ 358.644380] ? kasan_check_read+0x11/0x20 [ 358.661395] packet_sendmsg+0x1a16/0x6440 [ 358.665551] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 358.671105] ? rw_copy_check_uvector+0x2a6/0x330 [ 358.675883] ? sock_has_perm+0x209/0x2a0 [ 358.679967] ? packet_notifier+0x840/0x840 [ 358.684220] ? selinux_socket_sendmsg+0x36/0x40 [ 358.688896] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.694449] ? security_socket_sendmsg+0x8d/0xc0 [ 358.699208] ? packet_notifier+0x840/0x840 [ 358.703448] sock_sendmsg+0xd7/0x130 [ 358.707168] ___sys_sendmsg+0x3e2/0x920 [ 358.711154] ? copy_msghdr_from_user+0x430/0x430 [ 358.715919] ? mark_held_locks+0x100/0x100 [ 358.715942] ? kasan_check_read+0x11/0x20 [ 358.724471] ? __might_fault+0x12b/0x1e0 [ 358.724486] ? find_held_lock+0x35/0x130 [ 358.724502] ? __might_fault+0x12b/0x1e0 [ 358.724537] __sys_sendmmsg+0x1bf/0x4e0 [ 358.740620] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 358.744950] ? kasan_check_write+0x14/0x20 [ 358.749202] ? __sb_end_write+0xd9/0x110 [ 358.753288] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 358.758830] ? fput+0x128/0x1a0 [ 358.762119] ? ksys_write+0x1f1/0x2d0 [ 358.765938] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 358.770707] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 358.775476] ? do_syscall_64+0x26/0x620 [ 358.779460] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.784831] ? do_syscall_64+0x26/0x620 [ 358.788820] __x64_sys_sendmmsg+0x9d/0x100 [ 358.793071] do_syscall_64+0xfd/0x620 [ 358.796890] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.802087] RIP: 0033:0x459a59 [ 358.805292] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 358.824192] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 358.824209] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 358.824217] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 358.824225] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 06:42:25 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x7) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = dup3(r8, r9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r10, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x7a, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000100)={r11, 0xa0}, &(0x7f0000000180)=0x8) r12 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r12) r13 = memfd_create(&(0x7f0000000440)='\xb3', 0x0) write$FUSE_DIRENT(r13, &(0x7f0000000080)=ANY=[], 0x87) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup2(r14, r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r13, 0x0) r16 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r16, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) 06:42:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:25 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x3, 0x1}, 0x10) r4 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r5) [ 358.824232] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 358.824244] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:25 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000200)={0x4d2}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x4) r7 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={r8, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x20, @remote, 0x6}, @in6={0xa, 0x4e20, 0x1800000, @remote, 0x2}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x7fff, @dev={0xfe, 0x80, [], 0x19}, 0x4}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3c0}, 0xc) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={r9, 0x2, 0x5, 0x7}, 0x10) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) 06:42:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:25 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000)={0x2, 0x0, 0x2001, 0x2, 0x200, 0x5, 0x2, 0x1}) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7, 0x1) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r5, 0x3}, 0x8) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x3) 06:42:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], &(0x7f0000a8a000)=0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:26 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x141000) getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) 06:42:26 executing program 3: lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="6f1a0480000000b5b8c7ac2f64657622549194502315eecf49072f76"], &(0x7f0000000080)=""/232, 0xe8) r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdevK/', 0x90aa, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:26 executing program 4 (fault-call:6 fault-nth:49): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:26 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xa1000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x420000, 0x0) ioctl$VIDIOC_S_MODULATOR(r5, 0x40445637, &(0x7f00000000c0)={0x6, "c7dc761fce86bdb442c7186b2013766d670d8204deca98fc76198f9ec5a8cda7", 0x200, 0x6, 0x2, 0x0, 0x4}) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VFIO_IOMMU_UNMAP_DMA(r6, 0x3b72, &(0x7f0000000040)={0x20, 0x2, 0x3f, 0xfffffffffffffffa, 0x4}) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) 06:42:26 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x5) r6 = fcntl$dupfd(r4, 0x0, r5) write$P9_RSYMLINK(r6, &(0x7f0000000180)={0x14}, 0x10000015a) r7 = socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000001240)={@can={0x1d, r8}, {0x0}, &(0x7f0000001200), 0x40}, 0xa0) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000040)={@empty, @broadcast, r8}, 0xc) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) 06:42:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) 06:42:26 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0x80, 0x9146ff3817f53bee}) 06:42:26 executing program 5: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x6) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x591000, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000100)=0xdfeb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvfrom$unix(r5, &(0x7f0000000200)=""/216, 0xd8, 0x400000c1, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r6 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x2f00}], 0x1) semop(r6, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) 06:42:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) [ 359.329079] FAULT_INJECTION: forcing a failure. [ 359.329079] name failslab, interval 1, probability 0, space 0, times 0 06:42:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) [ 359.376048] CPU: 1 PID: 27659 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 359.383014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.392364] Call Trace: [ 359.394962] dump_stack+0x172/0x1f0 [ 359.398613] should_fail.cold+0xa/0x1b [ 359.402515] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 359.407627] ? lock_downgrade+0x880/0x880 [ 359.411789] __should_failslab+0x121/0x190 [ 359.416031] should_failslab+0x9/0x14 [ 359.419838] kmem_cache_alloc_node_trace+0x274/0x720 [ 359.424950] ? __alloc_skb+0xd5/0x5f0 [ 359.428767] __kmalloc_node_track_caller+0x3d/0x80 [ 359.433702] __kmalloc_reserve.isra.0+0x40/0xf0 [ 359.438382] __alloc_skb+0x10b/0x5f0 [ 359.442107] ? skb_scrub_packet+0x490/0x490 [ 359.446435] ? mark_held_locks+0x100/0x100 [ 359.450687] ? trace_hardirqs_on+0x67/0x220 [ 359.455018] alloc_skb_with_frags+0x93/0x590 [ 359.459438] ? mark_held_locks+0x100/0x100 [ 359.463675] ? avc_has_perm+0x379/0x610 [ 359.463692] ? find_held_lock+0x35/0x130 [ 359.463711] sock_alloc_send_pskb+0x72d/0x8a0 06:42:26 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semop(r0, &(0x7f0000000080)=[{0x81fb84de31374b84, 0x0, 0x3f00}], 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000100)=""/101) r3 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT(r3, 0x0, 0x12, &(0x7f0000019380)=""/102385) semop(r3, &(0x7f0000000000), 0x0) [ 359.463732] ? packet_cached_dev_get+0x148/0x260 [ 359.463749] ? sock_wmalloc+0x120/0x120 [ 359.476250] ? lock_downgrade+0x880/0x880 [ 359.476270] ? kasan_check_read+0x11/0x20 [ 359.476291] packet_sendmsg+0x1a16/0x6440 [ 359.476309] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 359.485023] ? rw_copy_check_uvector+0x2a6/0x330 [ 359.485049] ? sock_has_perm+0x209/0x2a0 [ 359.485074] ? packet_notifier+0x840/0x840 [ 359.507770] ? selinux_socket_sendmsg+0x36/0x40 [ 359.507786] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.507800] ? security_socket_sendmsg+0x8d/0xc0 [ 359.507816] ? packet_notifier+0x840/0x840 [ 359.516103] sock_sendmsg+0xd7/0x130 [ 359.516120] ___sys_sendmsg+0x3e2/0x920 [ 359.516137] ? copy_msghdr_from_user+0x430/0x430 [ 359.526335] ? mark_held_locks+0x100/0x100 [ 359.526350] ? kasan_check_read+0x11/0x20 [ 359.526367] ? __might_fault+0x12b/0x1e0 [ 359.539033] ? find_held_lock+0x35/0x130 [ 359.539052] ? __might_fault+0x12b/0x1e0 [ 359.539089] __sys_sendmmsg+0x1bf/0x4e0 [ 359.547809] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 359.547830] ? kasan_check_write+0x14/0x20 [ 359.547857] ? __sb_end_write+0xd9/0x110 [ 359.556223] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 359.556235] ? fput+0x128/0x1a0 [ 359.556249] ? ksys_write+0x1f1/0x2d0 [ 359.556271] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 359.556286] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 359.556298] ? do_syscall_64+0x26/0x620 [ 359.556316] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.564399] ? do_syscall_64+0x26/0x620 [ 359.564420] __x64_sys_sendmmsg+0x9d/0x100 [ 359.564438] do_syscall_64+0xfd/0x620 [ 359.564457] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.564475] RIP: 0033:0x459a59 [ 359.572478] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 359.572487] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 359.572503] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 06:42:26 executing program 3: syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x2, 0x0, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000040)) [ 359.572512] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 359.572521] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 359.572530] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 359.572538] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 [ 359.572820] net_ratelimit: 22 callbacks suppressed [ 359.572828] protocol 88fb is buggy, dev hsr_slave_0 [ 359.594075] protocol 88fb is buggy, dev hsr_slave_1 [ 359.602714] protocol 88fb is buggy, dev hsr_slave_0 [ 359.656250] protocol 88fb is buggy, dev hsr_slave_1 06:42:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:26 executing program 4 (fault-call:6 fault-nth:50): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:26 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x2ba3) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x3f00}], 0x1) r3 = gettid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x0, 0x2, 0x1}, 0x14}}, 0x0) tkill(r3, 0x1c) r5 = gettid() tkill(r5, 0x1c) setpgid(r3, r5) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000000)) 06:42:26 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f0000000000)='keyzing\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) 06:42:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000040)={0x8, [0x0]}, &(0x7f0000a8a000)=0xfffffeca) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 06:42:26 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) [ 359.926184] audit: type=1400 audit(1571380946.944:67): avc: denied { write } for pid=27980 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 359.966623] FAULT_INJECTION: forcing a failure. [ 359.966623] name failslab, interval 1, probability 0, space 0, times 0 [ 359.977926] CPU: 1 PID: 27986 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 359.984861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.994217] Call Trace: [ 359.996821] dump_stack+0x172/0x1f0 [ 360.000472] should_fail.cold+0xa/0x1b [ 360.004380] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 360.009495] ? check_preemption_disabled+0x48/0x290 [ 360.014530] __should_failslab+0x121/0x190 [ 360.018773] should_failslab+0x9/0x14 [ 360.022583] kmem_cache_alloc+0x47/0x700 [ 360.026658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.032205] ? check_preemption_disabled+0x48/0x290 [ 360.037230] ? lock_acquire+0x16f/0x3f0 [ 360.041223] skb_clone+0x156/0x3e0 [ 360.044775] dev_queue_xmit_nit+0x309/0xa10 [ 360.049114] ? validate_xmit_xfrm+0x1f7/0xda0 [ 360.053710] dev_hard_start_xmit+0xa7/0x980 [ 360.058056] __dev_queue_xmit+0x2704/0x2fe0 [ 360.062389] ? refcount_add_checked+0x33/0x70 06:42:27 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r2 = dup(r1) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000000), 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x4000, 0x0) [ 360.066892] ? netdev_pick_tx+0x300/0x300 [ 360.071048] ? packet_cached_dev_get+0x148/0x260 [ 360.075824] ? sock_wmalloc+0x120/0x120 [ 360.079822] ? lock_downgrade+0x880/0x880 [ 360.083972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.089511] ? skb_copy_datagram_from_iter+0x441/0x660 [ 360.094788] ? kasan_check_read+0x11/0x20 [ 360.094808] dev_queue_xmit+0x18/0x20 [ 360.094821] ? dev_queue_xmit+0x18/0x20 [ 360.102742] packet_sendmsg+0x3bb0/0x6440 [ 360.102759] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 06:42:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r0, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r1, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r2, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r3, 0x9) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_DROP_MASTER(r11, 0x641f) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x14d114775de95e04, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x200, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000a00)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "a11fd9bb777ed6d2de013aa84c1780812dde64019c3679140f98742d991c188999137e2c0c273c01ce5ee4a98e9a5f9621977495adc63b5e42cfed5f869c9b9c3762653da39cff6f836d3d8c2f820218e7f36d69edfe4f6100003ba171580d5d229a27995ec89a2ae6ea35537a994f882cb14b30ea1e81f4ffce42d406d795b1667439abc3912178aa17fed740c80915b5df43ad2e40db2e0c07023314ebb582148f97bf4b7f329a3f160dfa8dc19707f955096b143bd08da435072e87ba883dfc7fec35c82353166a54070000004068adc33e99bed553bae5b0410241e3d969c47980bfb66acc42eae3297dadf62b3f5d48f2bbbae626416b7f89ba77f540b4", 0x7e, 0x4, 0x0, 0x8, 0x100000000, 0x5, 0x3}, r12}}, 0x128) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r9, &(0x7f00000000c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), r12, 0x5}}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0x0) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000e6ff0000c5ace30be3155d1545629899b9d45daed63d53f30ab0321223fec2070a2c47a12d18e8f797c505e15fa5a7fb2f6ab7fba99789783577472c8715cdd7729a8cfb8078f067cc598154439b3100002f39e37dd9f71088748d8d0e98d4c042d7be5ad5e29b27b9ab53942fe6a1bc7bf139ff98418aa886f6a32b0defe63e170b070e67eec3ce8d", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x10, &(0x7f000059aff8)={r13}, &(0x7f000034f000)=0x2059b000) [ 360.102772] ? rw_copy_check_uvector+0x2a6/0x330 [ 360.102806] ? packet_notifier+0x840/0x840 [ 360.125409] ? selinux_socket_sendmsg+0x36/0x40 [ 360.130082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.135632] ? security_socket_sendmsg+0x8d/0xc0 [ 360.140405] ? packet_notifier+0x840/0x840 [ 360.144656] sock_sendmsg+0xd7/0x130 [ 360.148386] ___sys_sendmsg+0x3e2/0x920 [ 360.152372] ? copy_msghdr_from_user+0x430/0x430 [ 360.157239] ? mark_held_locks+0x100/0x100 [ 360.161489] ? kasan_check_read+0x11/0x20 06:42:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) [ 360.165658] ? __might_fault+0x12b/0x1e0 [ 360.169743] ? find_held_lock+0x35/0x130 [ 360.173823] ? __might_fault+0x12b/0x1e0 [ 360.177923] __sys_sendmmsg+0x1bf/0x4e0 [ 360.181920] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 360.186249] ? kasan_check_write+0x14/0x20 [ 360.190500] ? __sb_end_write+0xd9/0x110 [ 360.194570] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 360.200098] ? fput+0x128/0x1a0 [ 360.203376] ? ksys_write+0x1f1/0x2d0 [ 360.207186] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 360.211952] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 360.216713] ? do_syscall_64+0x26/0x620 [ 360.220695] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.226060] ? do_syscall_64+0x26/0x620 [ 360.230043] __x64_sys_sendmmsg+0x9d/0x100 [ 360.234284] do_syscall_64+0xfd/0x620 [ 360.238098] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.243287] RIP: 0033:0x459a59 [ 360.246564] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:42:27 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x80, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000200)={0x14, 0x49, 0x1, {0x40, 0x4, 0x3}}, 0x14) r1 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000180)={{0x9, 0x53}, {0xb8, 0x20}, 0x80000001, 0x4, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) geteuid() socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, &(0x7f00000000c0)=0x5) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x200000000008) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_SG_FREE(r11, 0x40106439, &(0x7f0000000040)={0x800}) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='%\x00') semop(0x0, &(0x7f0000000080)=[{0x1}], 0x2aaaaaaaaaaaacea) semop(r1, &(0x7f0000000280)=[{0x4, 0x8, 0x1c00}, {0x1, 0x194d, 0x1000}, {0x2, 0x5, 0x800}, {0x2, 0x7d, 0x1000}, {0x2, 0x7, 0x800}, {0x4}, {0x795f3c252bf8c024, 0x9}], 0x2) [ 360.265558] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 360.273274] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 360.280546] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 360.280555] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 360.280564] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 360.280573] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:27 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000000040)={0x2, 0x2}) r5 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet_udp_encap(r9, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) ioctl$CAPI_INSTALLED(r7, 0x80024322) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r5) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$sock_ax25_SIOCDELRT(r11, 0x890c, &(0x7f00000000c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) 06:42:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) [ 360.452767] protocol 88fb is buggy, dev hsr_slave_0 [ 360.457897] protocol 88fb is buggy, dev hsr_slave_1 [ 360.463056] protocol 88fb is buggy, dev hsr_slave_0 [ 360.468122] protocol 88fb is buggy, dev hsr_slave_1 [ 360.473305] protocol 88fb is buggy, dev hsr_slave_0 [ 360.478378] protocol 88fb is buggy, dev hsr_slave_1 06:42:27 executing program 4 (fault-call:6 fault-nth:51): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:27 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xf3b8613464367c7d, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f00000002c0)=""/4096, &(0x7f0000000040)=0x1000) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:27 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x3f00}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept4$unix(r4, 0x0, &(0x7f0000000000), 0x800) semop(r0, &(0x7f00000000c0)=[{0x3, 0x0, 0x3f00}], 0x1) 06:42:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = gettid() tkill(r6, 0x1c) ptrace$cont(0x1f, r6, 0x8, 0x1f) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x54) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000064073ac3a522dd966e6308aa4006f01d5538606416dd03e6eb8105a25dbfb474ca00cd2a6aef7ea80300000000000000aefb90137001c3dcf46674c6a21b8dc47dd080028a87e18141199a076ab8f3044e515b522d7e9f644684d9df1d5993f759ca55084f4c56b8cbb563dc37dd3280b6833c362ccac26fd82f556cda291cff1c9fa31738cb860f5e267f29b003e5c8c00d24b42504f07692ca21d041ccca255f170b124bd95234f7f01f511d0ba661bb1d4a5f3e8493304674ba6fce7907995a6ddcd032f1135afb7f799b5cd70a6a448ca9188b8ec8fa4db86b98bd2692df16c395a3a9f04bf6a4d0c5c7b3ac", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x10, &(0x7f000059aff8)={r8}, &(0x7f0000000180)=0x8) 06:42:27 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000540)={0x0, 0x7fff, 0x1, 0x9, 0xe, 0x3, 0xfd, 0x0, 0x8, 0x2}) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r7, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xfffffffffffffff9, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1, 0x2}, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1, 0x4, 0x8}, &(0x7f0000000280)=0x20200000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1f1a}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r5, 0x10, &(0x7f00000004c0)={&(0x7f0000000000)=""/197, 0xc5, r8}}, 0x10) 06:42:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:27 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x5, 0x1000}) 06:42:27 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x18b82, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@empty, @in6=@ipv4={[], [], @multicast2}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000140)=0xe8) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) [ 360.814898] FAULT_INJECTION: forcing a failure. [ 360.814898] name failslab, interval 1, probability 0, space 0, times 0 [ 360.860138] CPU: 0 PID: 28536 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 360.867125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.876492] Call Trace: [ 360.879102] dump_stack+0x172/0x1f0 [ 360.882755] should_fail.cold+0xa/0x1b [ 360.886666] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 360.891797] ? lock_downgrade+0x880/0x880 [ 360.895971] __should_failslab+0x121/0x190 [ 360.900226] should_failslab+0x9/0x14 [ 360.904046] kmem_cache_alloc_node+0x26c/0x710 [ 360.908644] ? __lock_acquire+0x6ee/0x49c0 [ 360.912891] ? __dev_queue_xmit+0x1757/0x2fe0 [ 360.917397] ? find_held_lock+0x35/0x130 [ 360.921476] __alloc_skb+0xd5/0x5f0 [ 360.925122] ? skb_scrub_packet+0x490/0x490 [ 360.929457] ? mark_held_locks+0x100/0x100 [ 360.933709] ? trace_hardirqs_on+0x67/0x220 [ 360.938049] alloc_skb_with_frags+0x93/0x590 [ 360.942468] ? mark_held_locks+0x100/0x100 [ 360.946718] ? avc_has_perm+0x379/0x610 [ 360.950715] ? find_held_lock+0x35/0x130 [ 360.954796] sock_alloc_send_pskb+0x72d/0x8a0 06:42:27 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x40100) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x1, 0xc}) [ 360.959312] ? packet_cached_dev_get+0x148/0x260 [ 360.964092] ? sock_wmalloc+0x120/0x120 [ 360.968082] ? lock_downgrade+0x880/0x880 [ 360.972252] ? kasan_check_read+0x11/0x20 [ 360.976422] packet_sendmsg+0x1a16/0x6440 [ 360.980587] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 360.986144] ? rw_copy_check_uvector+0x2a6/0x330 [ 360.990916] ? sock_has_perm+0x209/0x2a0 [ 360.995184] ? packet_notifier+0x840/0x840 [ 360.999447] ? selinux_socket_sendmsg+0x36/0x40 [ 361.004134] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 06:42:28 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x40100) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x1, 0xc}) 06:42:28 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) clock_gettime(0xb, &(0x7f0000000000)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) [ 361.009698] ? security_socket_sendmsg+0x8d/0xc0 [ 361.014678] ? packet_notifier+0x840/0x840 [ 361.018929] sock_sendmsg+0xd7/0x130 [ 361.022842] ___sys_sendmsg+0x3e2/0x920 [ 361.022857] ? copy_msghdr_from_user+0x430/0x430 [ 361.022879] ? mark_held_locks+0x100/0x100 [ 361.022895] ? kasan_check_read+0x11/0x20 [ 361.022914] ? __might_fault+0x12b/0x1e0 [ 361.022933] ? find_held_lock+0x35/0x130 [ 361.048430] ? __might_fault+0x12b/0x1e0 [ 361.052525] __sys_sendmmsg+0x1bf/0x4e0 [ 361.056529] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 361.060874] ? kasan_check_write+0x14/0x20 [ 361.065141] ? __sb_end_write+0xd9/0x110 [ 361.069230] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 361.074785] ? fput+0x128/0x1a0 [ 361.078084] ? ksys_write+0x1f1/0x2d0 [ 361.081909] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 361.086770] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 361.091551] ? do_syscall_64+0x26/0x620 [ 361.095554] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.100934] ? do_syscall_64+0x26/0x620 [ 361.105061] __x64_sys_sendmmsg+0x9d/0x100 06:42:28 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x40100) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x1, 0xc}) [ 361.109326] do_syscall_64+0xfd/0x620 [ 361.113157] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.118361] RIP: 0033:0x459a59 [ 361.121563] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 361.140589] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 361.148437] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 361.155852] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 361.163136] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 361.170513] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 361.177789] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:28 executing program 4 (fault-call:6 fault-nth:52): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) 06:42:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:28 executing program 3: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 06:42:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/246) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000080)) r7 = syz_open_pts(r6, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x5) r8 = fcntl$dupfd(r6, 0x0, r7) write$P9_RSYMLINK(r8, &(0x7f0000000180)={0x14}, 0x10000015a) r9 = socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000001240)={@can={0x1d, r10}, {0x0}, &(0x7f0000001200), 0x40}, 0xa0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x8, 0x6, 0xb225, 0x4, 0x738, r4, 0xfff, [], r10, 0xffffffffffffffff, 0x5, 0x2}, 0x3c) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, r11, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c) fcntl$getown(r12, 0x9) fcntl$setlease(r12, 0x400, 0x9e220333817ac508) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r14, 0x9) signalfd(r14, &(0x7f0000000600)={0x1745}, 0x8) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) getpeername$inet6(r13, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) r15 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, r16}}) syz_mount_image$iso9660(&(0x7f00000006c0)='iso9660\x00', &(0x7f00000001c0)='./file0\x00', 0x8001, 0x3, &(0x7f0000000880)=[{&(0x7f0000000700)="4c97d977d879e92edff1dc0139a79d2c62bda8d9dcf31331157ae3", 0x1b, 0x6}, {&(0x7f0000000740)="4fa171456d500e4e32cb00f29c6df54cfc37caa9250ca2be6430a20acfe84036400519c48c436e8d13e5fc5503e7f9b1f9457ee8dc47ca27a6298bdf3446c04bbe49c5903e81eb07c1f45d9223d0c15d8f00f6b6874eae5c9fb0021ff1272d020d2f74d33d02fc56b7", 0x69, 0x100}, {&(0x7f00000007c0)="1cc92db1efc90a8d449e0ec6509f66651853c9f7b2e66eef9bde6c95a930d68798fc93d1934700d82434ffef34a6ac9ff2695d6c5983a926d87c50ebd03b8675b58e67f55ee49a3febc5b2e0319b91b9ef2e0e5261d0681a2d4e175b76d55285114c9a85b15603a5690d904d5c6a7edf84bd792a5d3395d34f809246c8f2b67acfd51ec1f977b62a106d518e4d98d69025c4169f9e595f3c", 0x98, 0x1d}], 0x89894, &(0x7f0000000540)) 06:42:28 executing program 5: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0305602, &(0x7f0000000280)={0x1, 0xc}) 06:42:28 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) [ 361.384751] FAULT_INJECTION: forcing a failure. [ 361.384751] name failslab, interval 1, probability 0, space 0, times 0 [ 361.411697] CPU: 1 PID: 28775 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 361.418680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.428170] Call Trace: [ 361.428197] dump_stack+0x172/0x1f0 [ 361.428218] should_fail.cold+0xa/0x1b [ 361.428236] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 361.428251] ? lock_downgrade+0x880/0x880 [ 361.428274] __should_failslab+0x121/0x190 [ 361.438528] should_failslab+0x9/0x14 [ 361.438549] kmem_cache_alloc_node_trace+0x274/0x720 [ 361.447909] ? __alloc_skb+0xd5/0x5f0 [ 361.455937] __kmalloc_node_track_caller+0x3d/0x80 [ 361.455958] __kmalloc_reserve.isra.0+0x40/0xf0 [ 361.455976] __alloc_skb+0x10b/0x5f0 [ 361.474693] ? skb_scrub_packet+0x490/0x490 [ 361.474712] ? mark_held_locks+0x100/0x100 [ 361.474726] ? trace_hardirqs_on+0x67/0x220 [ 361.474744] alloc_skb_with_frags+0x93/0x590 [ 361.491610] ? mark_held_locks+0x100/0x100 [ 361.491627] ? avc_has_perm+0x379/0x610 [ 361.491642] ? find_held_lock+0x35/0x130 [ 361.491661] sock_alloc_send_pskb+0x72d/0x8a0 [ 361.512834] ? packet_cached_dev_get+0x148/0x260 [ 361.512857] ? sock_wmalloc+0x120/0x120 [ 361.512873] ? lock_downgrade+0x880/0x880 [ 361.512890] ? kasan_check_read+0x11/0x20 [ 361.521650] packet_sendmsg+0x1a16/0x6440 [ 361.521668] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 361.530039] ? rw_copy_check_uvector+0x2a6/0x330 [ 361.530066] ? sock_has_perm+0x209/0x2a0 [ 361.530091] ? packet_notifier+0x840/0x840 [ 361.539871] ? selinux_socket_sendmsg+0x36/0x40 [ 361.539886] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.539900] ? security_socket_sendmsg+0x8d/0xc0 [ 361.539916] ? packet_notifier+0x840/0x840 [ 361.548872] sock_sendmsg+0xd7/0x130 [ 361.548889] ___sys_sendmsg+0x3e2/0x920 [ 361.548904] ? copy_msghdr_from_user+0x430/0x430 [ 361.548926] ? mark_held_locks+0x100/0x100 [ 361.557964] ? kasan_check_read+0x11/0x20 [ 361.557987] ? __might_fault+0x12b/0x1e0 [ 361.558002] ? find_held_lock+0x35/0x130 [ 361.558020] ? __might_fault+0x12b/0x1e0 [ 361.568532] __sys_sendmmsg+0x1bf/0x4e0 [ 361.568550] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 361.568567] ? kasan_check_write+0x14/0x20 [ 361.576510] ? __sb_end_write+0xd9/0x110 [ 361.576530] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 361.576547] ? fput+0x128/0x1a0 06:42:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:28 executing program 5: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0305602, &(0x7f0000000280)={0x1, 0xc}) 06:42:28 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x2, 0x1, 0x0, 0xe9c9ba9b18bd992b, 0x7fffffff, 0x100, 0x16}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0xc0305602, &(0x7f0000000280)={0x8001004, 0xc}) [ 361.585504] ? ksys_write+0x1f1/0x2d0 [ 361.593878] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 361.593892] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 361.593904] ? do_syscall_64+0x26/0x620 [ 361.593922] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.598190] mkiss: ax0: crc mode is auto. [ 361.602097] ? do_syscall_64+0x26/0x620 [ 361.602118] __x64_sys_sendmmsg+0x9d/0x100 [ 361.602135] do_syscall_64+0xfd/0x620 [ 361.602153] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.610277] RIP: 0033:0x459a59 [ 361.610294] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 361.610302] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 361.610320] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 361.619024] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 361.619033] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 06:42:28 executing program 5: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0305602, &(0x7f0000000280)={0x1, 0xc}) [ 361.619042] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 361.619050] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:28 executing program 5: r0 = syz_open_dev$video4linux(0x0, 0x90a9, 0x40100) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x1, 0xc}) 06:42:29 executing program 4 (fault-call:6 fault-nth:53): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:29 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @initdev}}}, 0x0) r4 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, r4) keyctl$get_persistent(0x16, r3, r4) r5 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, r4) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r5) 06:42:29 executing program 5: r0 = syz_open_dev$video4linux(0x0, 0x90a9, 0x40100) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x1, 0xc}) 06:42:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:29 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet6_udp_int(r1, 0x11, 0xfd, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000f862b98c7f05cfdce09d89b1e9f5edf6fa000000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x9b, @mcast2, 0xfffffff7}}, 0x1b, 0x1, 0x4, 0x8000, 0x1}, &(0x7f0000000000)=0x98) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x121880, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x10, &(0x7f000059aff8)={r5, 0x40}, &(0x7f000034f000)=0x2059b1d6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r9, 0xc0a85322, &(0x7f00000001c0)) [ 362.165275] FAULT_INJECTION: forcing a failure. [ 362.165275] name failslab, interval 1, probability 0, space 0, times 0 [ 362.180903] CPU: 0 PID: 28925 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 362.180913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.180918] Call Trace: [ 362.180954] dump_stack+0x172/0x1f0 [ 362.180972] should_fail.cold+0xa/0x1b [ 362.180990] ? fault_create_debugfs_attr+0x1e0/0x1e0 06:42:29 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/\xdc\xc6\x1e%<\xd3\xb7Fun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet6_tcp_int(r6, 0x6, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000000000)) [ 362.212980] ? check_preemption_disabled+0x48/0x290 [ 362.218150] __should_failslab+0x121/0x190 [ 362.222409] should_failslab+0x9/0x14 [ 362.226232] kmem_cache_alloc+0x47/0x700 [ 362.230324] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.236099] ? check_preemption_disabled+0x48/0x290 [ 362.241118] ? lock_acquire+0x16f/0x3f0 [ 362.241136] skb_clone+0x156/0x3e0 [ 362.248658] dev_queue_xmit_nit+0x309/0xa10 [ 362.252997] ? validate_xmit_xfrm+0x1f7/0xda0 [ 362.257566] dev_hard_start_xmit+0xa7/0x980 [ 362.257591] __dev_queue_xmit+0x2704/0x2fe0 [ 362.257603] ? refcount_add_checked+0x33/0x70 [ 362.257623] ? netdev_pick_tx+0x300/0x300 [ 362.274917] ? packet_cached_dev_get+0x148/0x260 [ 362.279778] ? sock_wmalloc+0x120/0x120 [ 362.279797] ? lock_downgrade+0x880/0x880 [ 362.279809] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.279826] ? skb_copy_datagram_from_iter+0x441/0x660 [ 362.299098] ? kasan_check_read+0x11/0x20 [ 362.303270] dev_queue_xmit+0x18/0x20 [ 362.303285] ? dev_queue_xmit+0x18/0x20 [ 362.303301] packet_sendmsg+0x3bb0/0x6440 [ 362.303317] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 362.303331] ? rw_copy_check_uvector+0x2a6/0x330 [ 362.303366] ? packet_notifier+0x840/0x840 [ 362.303389] ? selinux_socket_sendmsg+0x36/0x40 [ 362.315305] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.315324] ? security_socket_sendmsg+0x8d/0xc0 [ 362.315340] ? packet_notifier+0x840/0x840 [ 362.315357] sock_sendmsg+0xd7/0x130 [ 362.315371] ___sys_sendmsg+0x3e2/0x920 [ 362.329900] ? copy_msghdr_from_user+0x430/0x430 [ 362.329925] ? mark_held_locks+0x100/0x100 [ 362.329941] ? kasan_check_read+0x11/0x20 [ 362.329959] ? __might_fault+0x12b/0x1e0 [ 362.353215] ? find_held_lock+0x35/0x130 [ 362.353235] ? __might_fault+0x12b/0x1e0 [ 362.353273] __sys_sendmmsg+0x1bf/0x4e0 [ 362.353292] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 362.353314] ? kasan_check_write+0x14/0x20 [ 362.353337] ? __sb_end_write+0xd9/0x110 [ 362.366467] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 362.366482] ? fput+0x128/0x1a0 [ 362.366498] ? ksys_write+0x1f1/0x2d0 [ 362.366519] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 362.366535] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 362.382868] ? do_syscall_64+0x26/0x620 [ 362.382885] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.382899] ? do_syscall_64+0x26/0x620 [ 362.382919] __x64_sys_sendmmsg+0x9d/0x100 [ 362.382936] do_syscall_64+0xfd/0x620 [ 362.382954] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.382964] RIP: 0033:0x459a59 [ 362.382976] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 362.382986] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 [ 362.395495] ORIG_RAX: 0000000000000133 [ 362.395504] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 362.395512] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 362.395520] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 362.395528] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 362.395537] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:29 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000805, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x2ce) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000000)={r3, 0x0, 0x800, 0x2, 0xff}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r3, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, 0x0, 0x0) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$TIOCSPTLCK(r10, 0x40045431, &(0x7f0000000180)=0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x10, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b000) 06:42:29 executing program 5: r0 = syz_open_dev$video4linux(0x0, 0x90a9, 0x40100) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x1, 0xc}) 06:42:29 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) r1 = gettid() ptrace$poke(0x5, r1, &(0x7f0000000000), 0x1000) 06:42:29 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x40100) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x1, 0xc}) 06:42:29 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) 06:42:29 executing program 4 (fault-call:6 fault-nth:54): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:29 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'gretap0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x500, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000020) r5 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000000)) getdents64(r7, &(0x7f0000000380)=""/4096, 0x1000) 06:42:29 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x40100) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x1, 0xc}) 06:42:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="60de0000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:29 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x240000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000180)={0x5, {0x0, 0x400, 0x80000000, 0xfff}, {0x81, 0x80000001, 0x7, 0xfffffa7e}, {0x4, 0x3}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000100)={0x80, 0x5, 0x7, 0x80, 0x91, 0x3}) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x5, @sliced={0xfffa, [0x20, 0x4, 0x5, 0xbff, 0x2, 0xfffc, 0x2, 0x9, 0x0, 0x1, 0x101, 0x6, 0xd3aa, 0x7, 0x40, 0x8, 0x8, 0x6, 0x0, 0x9, 0x9, 0x1f, 0x2, 0x40, 0x6, 0x200, 0x401, 0x9, 0xffe0, 0x8, 0x669c, 0x4, 0x100, 0xffc1, 0x20e0, 0x9, 0x101, 0x8, 0x5841, 0xffff, 0x81, 0x2, 0x1000, 0x2, 0x80, 0x8b, 0x9]}}) 06:42:30 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x40100) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x1, 0xc}) [ 362.983290] Failed to obtain node identity [ 362.987673] Enabling of bearer rejected, failed to enable media [ 363.029633] FAULT_INJECTION: forcing a failure. [ 363.029633] name failslab, interval 1, probability 0, space 0, times 0 [ 363.070928] CPU: 0 PID: 29161 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 363.078032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.078039] Call Trace: [ 363.078065] dump_stack+0x172/0x1f0 [ 363.078086] should_fail.cold+0xa/0x1b [ 363.078106] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 363.102710] ? lock_downgrade+0x880/0x880 [ 363.106894] __should_failslab+0x121/0x190 [ 363.111152] should_failslab+0x9/0x14 [ 363.114981] kmem_cache_alloc_node+0x26c/0x710 [ 363.119586] ? __lock_acquire+0x6ee/0x49c0 [ 363.123834] ? __dev_queue_xmit+0x1757/0x2fe0 [ 363.123853] ? find_held_lock+0x35/0x130 [ 363.123873] __alloc_skb+0xd5/0x5f0 [ 363.123889] ? skb_scrub_packet+0x490/0x490 [ 363.123903] ? mark_held_locks+0x100/0x100 [ 363.123917] ? trace_hardirqs_on+0x67/0x220 [ 363.123934] alloc_skb_with_frags+0x93/0x590 [ 363.123947] ? mark_held_locks+0x100/0x100 [ 363.123961] ? avc_has_perm+0x379/0x610 [ 363.123975] ? find_held_lock+0x35/0x130 [ 363.123994] sock_alloc_send_pskb+0x72d/0x8a0 [ 363.136177] ? packet_cached_dev_get+0x148/0x260 [ 363.144739] ? sock_wmalloc+0x120/0x120 [ 363.144759] ? lock_downgrade+0x880/0x880 [ 363.144776] ? kasan_check_read+0x11/0x20 [ 363.144796] packet_sendmsg+0x1a16/0x6440 [ 363.144811] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 363.144825] ? rw_copy_check_uvector+0x2a6/0x330 [ 363.144848] ? sock_has_perm+0x209/0x2a0 [ 363.144871] ? packet_notifier+0x840/0x840 [ 363.144894] ? selinux_socket_sendmsg+0x36/0x40 [ 363.153611] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.153629] ? security_socket_sendmsg+0x8d/0xc0 [ 363.153645] ? packet_notifier+0x840/0x840 [ 363.153665] sock_sendmsg+0xd7/0x130 [ 363.153685] ___sys_sendmsg+0x3e2/0x920 [ 363.153702] ? copy_msghdr_from_user+0x430/0x430 [ 363.153723] ? mark_held_locks+0x100/0x100 [ 363.165990] ? kasan_check_read+0x11/0x20 [ 363.166011] ? __might_fault+0x12b/0x1e0 [ 363.166028] ? find_held_lock+0x35/0x130 [ 363.166045] ? __might_fault+0x12b/0x1e0 [ 363.166082] __sys_sendmmsg+0x1bf/0x4e0 [ 363.166101] ? __ia32_sys_sendmsg+0xb0/0xb0 06:42:30 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x1, 0xc}) [ 363.166117] ? kasan_check_write+0x14/0x20 [ 363.166141] ? __sb_end_write+0xd9/0x110 [ 363.166158] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 363.179516] ? fput+0x128/0x1a0 [ 363.179532] ? ksys_write+0x1f1/0x2d0 [ 363.179553] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 363.179566] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 363.179583] ? do_syscall_64+0x26/0x620 [ 363.187874] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.187890] ? do_syscall_64+0x26/0x620 [ 363.187912] __x64_sys_sendmmsg+0x9d/0x100 06:42:30 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/98, 0x62) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000080)={0x0, @reserved}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x0, 0x400) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={r5, 0x2}, &(0x7f00000001c0)=0x8) [ 363.187932] do_syscall_64+0xfd/0x620 [ 363.197604] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.197616] RIP: 0033:0x459a59 [ 363.197629] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 363.197637] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 363.197653] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 06:42:30 executing program 4 (fault-call:6 fault-nth:55): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x8005, &(0x7f0000618000)={0x2, 0x4e20, @rand_addr=0x10001}, 0x10) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r8, 0x42, 0x30}, &(0x7f00000000c0)=0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r9, 0x9) fadvise64(r9, 0x0, 0x0, 0x2) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x140040, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a8a000)=0xffffffffffffff06) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) [ 363.197661] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 363.197670] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 363.197684] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 363.197692] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:30 executing program 5: syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0305602, &(0x7f0000000280)={0x1, 0xc}) [ 363.490622] Failed to obtain node identity [ 363.496030] Enabling of bearer rejected, failed to enable media 06:42:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCCBRK(r1, 0x5428) r2 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:30 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400440, 0x0) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) r3 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000007c0)={0x4, &(0x7f0000000780)=[{0x0, 0x80, 0x9, 0x1ff}, {0x3, 0x2, 0xff, 0x3}, {0x1ff, 0x5, 0xff, 0x4683}, {0x6, 0xff, 0x0, 0x83e}]}, 0x10) r6 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TUNSETVNETBE(r8, 0x400454de, &(0x7f0000000800)) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/fscreate\x00') sendmsg$nfc_llcp(r9, &(0x7f0000000180)={&(0x7f0000000080)={0x27, 0x0, 0x2, 0x1, 0x12, 0xb4, "5b5aebd2f2804700f81b2fffd1e1ac1f3af51d67c563df3f6307877ec4d75f1c0da396c1857954aaba09754d3a0a41684b53b6f74ae1eecfe3dd0dae9185d8", 0x401}, 0x60, &(0x7f0000000100)=[{&(0x7f0000000240)="3f164f0228eba7643d9be35cad3f4ae8d5870584e4914ea493f60aec887771c95c65eb35d71d013a5aa1d2e3ca280072d3679bd5ff0fefbedc3b16d968f44b5ca8c3ba257e1bb9ed2ef7cc4bbf1b51a0585eb75fd13e2f420850ece5e9ac5e7ac90d98883f9a9abc2dbe3bac87ba", 0x6e}, {&(0x7f0000000380)="67f46beab3074910ef5d169c8014e45d98ef9b72514b07134ec040204e55bd1ac3196040eb033cd0191d2697a146c69797c056475dbb7d493378544e4acd3fe7863d10487ba179c2ce9fac62ad292f10ce63885b4040002ba06a718c54f038e546c00c19a0c8a8b70da305429ee076120aa2bdd7e8a2d78aaae3d1115c77b69a05541673832221d049fe96938bc736621786fc16ac26a491935a3e7156163bf290d95c37ea2a7ef1113fbfff57abf90a69eb77556dff61d0c96c162e7fb8b7173623de6f7a653fd243972cd7f8ea", 0xce}, {&(0x7f0000000480)="51494e4ed20429d0bd12836fb19663c137e45d162e375d4d7ad4250d5efbeff5c5032fdb223c99d51bbcf1d762b4938a2e27796851c1d8fa9aef6de795745b051cdc8dcc532069b32808342db180ada390b20419de60945a4e2b9c437c306ee976a3f3c43958b000aad82ccdc2ba3725da7d967e0e31d7ecde8f1070bf37db5d473a392c1cb07913ba624eb33a52c0ea83f370d922dad203abfd7d261055a270e02dd2d0321bbdb86138e59f8e75bc1075fabdebc64f9694c51c71d3fe78dee05d097877f5d2646063fb23354bd692bd0359ee96f4269dacc2591052023575e8ae40219ac969e1f899bd83d6b7c807ae", 0xf0}, {&(0x7f0000000580)="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", 0xfd}], 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="e000000000000000010100001f000000d3a9a7c27dc2ec3a966aaa4f15c8ee5c265781619e4b72397f2146e4d1859333980c7ba40e311b20113c647d4b6254d081850ffb4bfa836c7d1200a980bf6a019d6e6ccf1793df4f7e9fbaf023ed1ab8f43d5d2e80aaba75f0fad7b55d020d555a2e40296abd81b400199110ffae15ed1b7c4c2624fbf6635ad234cb7b000000cb53297723045fa017c359d86be63fdb15f6f726816af214368a02064ddf97d893bbac55fd4161dee0c7df5e8494e3463b7b628a0f231c759077de000000000000"], 0xe0, 0x400c0}, 0x40008) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r6) [ 363.532051] FAULT_INJECTION: forcing a failure. [ 363.532051] name failslab, interval 1, probability 0, space 0, times 0 [ 363.583403] CPU: 1 PID: 29320 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 363.590382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.599884] Call Trace: [ 363.602622] dump_stack+0x172/0x1f0 [ 363.606380] should_fail.cold+0xa/0x1b [ 363.610293] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 363.615606] ? lock_downgrade+0x880/0x880 [ 363.619799] __should_failslab+0x121/0x190 [ 363.624060] should_failslab+0x9/0x14 [ 363.628017] kmem_cache_alloc_node_trace+0x274/0x720 [ 363.633226] ? __alloc_skb+0xd5/0x5f0 [ 363.637277] __kmalloc_node_track_caller+0x3d/0x80 [ 363.642226] __kmalloc_reserve.isra.0+0x40/0xf0 [ 363.646920] __alloc_skb+0x10b/0x5f0 [ 363.650647] ? skb_scrub_packet+0x490/0x490 [ 363.655106] ? mark_held_locks+0x100/0x100 [ 363.659350] ? trace_hardirqs_on+0x67/0x220 [ 363.663694] alloc_skb_with_frags+0x93/0x590 [ 363.668217] ? mark_held_locks+0x100/0x100 [ 363.672452] ? avc_has_perm+0x379/0x610 [ 363.676424] ? find_held_lock+0x35/0x130 [ 363.680489] sock_alloc_send_pskb+0x72d/0x8a0 [ 363.684998] ? packet_cached_dev_get+0x148/0x260 [ 363.689782] ? sock_wmalloc+0x120/0x120 [ 363.693748] ? lock_downgrade+0x880/0x880 [ 363.697893] ? kasan_check_read+0x11/0x20 [ 363.702040] packet_sendmsg+0x1a16/0x6440 [ 363.706440] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 363.712213] ? rw_copy_check_uvector+0x2a6/0x330 [ 363.716979] ? sock_has_perm+0x209/0x2a0 [ 363.721044] ? packet_notifier+0x840/0x840 [ 363.725283] ? selinux_socket_sendmsg+0x36/0x40 [ 363.729941] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.735469] ? security_socket_sendmsg+0x8d/0xc0 [ 363.740220] ? packet_notifier+0x840/0x840 [ 363.744576] sock_sendmsg+0xd7/0x130 [ 363.748317] ___sys_sendmsg+0x3e2/0x920 [ 363.752289] ? copy_msghdr_from_user+0x430/0x430 [ 363.757061] ? mark_held_locks+0x100/0x100 [ 363.761289] ? kasan_check_read+0x11/0x20 [ 363.765432] ? __might_fault+0x12b/0x1e0 [ 363.769487] ? find_held_lock+0x35/0x130 [ 363.773546] ? __might_fault+0x12b/0x1e0 [ 363.777619] __sys_sendmmsg+0x1bf/0x4e0 [ 363.781589] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 363.785905] ? kasan_check_write+0x14/0x20 [ 363.790139] ? __sb_end_write+0xd9/0x110 [ 363.794194] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 363.799725] ? fput+0x128/0x1a0 [ 363.803000] ? ksys_write+0x1f1/0x2d0 [ 363.806800] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 363.811569] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 363.816322] ? do_syscall_64+0x26/0x620 [ 363.820295] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.825650] ? do_syscall_64+0x26/0x620 [ 363.829654] __x64_sys_sendmmsg+0x9d/0x100 [ 363.833886] do_syscall_64+0xfd/0x620 [ 363.837685] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.842868] RIP: 0033:0x459a59 [ 363.846144] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 363.865160] RSP: 002b:00007fc5a08e8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 363.872867] RAX: ffffffffffffffda RBX: 00007fc5a08e8c90 RCX: 0000000000459a59 06:42:30 executing program 5: syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0305602, &(0x7f0000000280)={0x1, 0xc}) [ 363.880130] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 363.887395] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 363.894743] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a08e96d4 [ 363.902003] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:30 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x2180040, &(0x7f0000000380)={'trans=unix,', {[{@access_any='access=any'}, {@noextend='noextend'}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@seclabel='seclabel'}, {@appraise='appraise'}, {@smackfsroot={'smackfsroot', 0x3d, ':'}}, {@hash='hash'}, {@obj_role={'obj_role', 0x3d, 'selinux]^{vboxnet1./'}}]}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$rds(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/19, 0x13}], 0x1, &(0x7f0000000600)=[@cswp={0x58, 0x114, 0x7, {{0x40, 0x23}, &(0x7f0000000180)=0x7711a720, &(0x7f0000000240)=0x81, 0x0, 0x3, 0x62e, 0x5, 0xa763cf759c37c301, 0x80000001}}, @mask_cswp={0x58, 0x114, 0x9, {{0xdf29, 0x1}, &(0x7f0000000280)=0x4, &(0x7f0000000440)=0x1, 0x400, 0x6, 0x6, 0x2, 0xc, 0x699}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000480)=""/181, 0xb5}, &(0x7f0000000540), 0x8}}, @fadd={0x58, 0x114, 0x6, {{0x4, 0x80000000}, &(0x7f0000000580)=0xbf, &(0x7f00000005c0)=0x1, 0xffffffffffffff00, 0x7, 0x0, 0x1, 0x22, 0x5}}], 0x138}, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r5) 06:42:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x20}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000180)={r6, @in6={{0xa, 0x705, 0x53, @remote, 0x2}}}, 0x84) r7 = dup3(r4, r5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$smack_current(r9, &(0x7f0000000300)='eth1\x89selinux\x00', 0xd) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$EVIOCGBITSW(r11, 0x80404525, &(0x7f0000000240)=""/125) r12 = syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x0, 0x20500) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x1, @ipv4={[], [], @multicast1}, 0x8000}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}], 0x48) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ptrace$poke(0x5, 0xffffffffffffffff, &(0x7f0000000400), 0x1f) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000064a12dcad2bc1087e4423158ac3e2f39b489c3d22d9f1dcb3ce3844c90d1c36eba3f245d9e172ee2ec869de08e75b95a0693ec92f745920fa241b9fac60ca503cbb08472ab60f14a842f6e4e266d3a452de56b41b15aae00644fccd4df5a1fda52f8a4ec0bb67de06cea3668aa9ced7d2d6e", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x10, &(0x7f0000000000)={r13, 0x1}, &(0x7f000034f000)=0xfffffffffffffee4) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_to_hsr\x00', 0x1}, 0x18) 06:42:31 executing program 5: syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0305602, &(0x7f0000000280)={0x1, 0xc}) 06:42:31 executing program 3: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) r0 = gettid() ptrace$peekuser(0x3, r0, 0xfffffffffffffffc) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xa00000, 0x7975, 0x7fffffff, [], &(0x7f0000000080)={0x990af5, 0x617, [], @p_u32=&(0x7f0000000040)=0x2}}) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x200082) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000140)=0x5) socket$caif_seqpacket(0x25, 0x5, 0x2) 06:42:31 executing program 4 (fault-call:6 fault-nth:56): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:31 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, 0x0) 06:42:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) [ 364.228284] FAULT_INJECTION: forcing a failure. [ 364.228284] name failslab, interval 1, probability 0, space 0, times 0 [ 364.239877] CPU: 0 PID: 29415 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 364.246903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.256282] Call Trace: [ 364.258891] dump_stack+0x172/0x1f0 [ 364.262650] should_fail.cold+0xa/0x1b [ 364.266555] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 364.271682] ? check_preemption_disabled+0x48/0x290 [ 364.276823] __should_failslab+0x121/0x190 [ 364.281086] should_failslab+0x9/0x14 [ 364.285049] kmem_cache_alloc+0x47/0x700 [ 364.289129] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.294922] ? check_preemption_disabled+0x48/0x290 [ 364.299959] ? lock_acquire+0x16f/0x3f0 [ 364.304082] skb_clone+0x156/0x3e0 [ 364.307643] dev_queue_xmit_nit+0x309/0xa10 [ 364.312070] ? validate_xmit_xfrm+0x1f7/0xda0 [ 364.316595] dev_hard_start_xmit+0xa7/0x980 [ 364.320955] __dev_queue_xmit+0x2704/0x2fe0 06:42:31 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, 0x0) [ 364.325295] ? refcount_add_checked+0x33/0x70 [ 364.329934] ? netdev_pick_tx+0x300/0x300 [ 364.334254] ? packet_cached_dev_get+0x148/0x260 [ 364.339034] ? sock_wmalloc+0x120/0x120 [ 364.343032] ? lock_downgrade+0x880/0x880 [ 364.347193] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.352750] ? skb_copy_datagram_from_iter+0x441/0x660 [ 364.358154] ? kasan_check_read+0x11/0x20 [ 364.362335] dev_queue_xmit+0x18/0x20 [ 364.366140] ? dev_queue_xmit+0x18/0x20 [ 364.366154] packet_sendmsg+0x3bb0/0x6440 [ 364.366170] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 364.366184] ? rw_copy_check_uvector+0x2a6/0x330 [ 364.366218] ? packet_notifier+0x840/0x840 [ 364.366244] ? selinux_socket_sendmsg+0x36/0x40 [ 364.366256] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.366271] ? security_socket_sendmsg+0x8d/0xc0 [ 364.366283] ? packet_notifier+0x840/0x840 [ 364.366299] sock_sendmsg+0xd7/0x130 [ 364.366311] ___sys_sendmsg+0x3e2/0x920 [ 364.366326] ? copy_msghdr_from_user+0x430/0x430 [ 364.408277] ? mark_held_locks+0x100/0x100 [ 364.408294] ? kasan_check_read+0x11/0x20 [ 364.408315] ? __might_fault+0x12b/0x1e0 [ 364.424986] ? find_held_lock+0x35/0x130 [ 364.425005] ? __might_fault+0x12b/0x1e0 [ 364.425044] __sys_sendmmsg+0x1bf/0x4e0 [ 364.425064] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 364.425082] ? kasan_check_write+0x14/0x20 [ 364.425108] ? __sb_end_write+0xd9/0x110 [ 364.441437] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 364.441449] ? fput+0x128/0x1a0 [ 364.441464] ? ksys_write+0x1f1/0x2d0 [ 364.463608] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 364.463628] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 364.463642] ? do_syscall_64+0x26/0x620 [ 364.463657] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.463670] ? do_syscall_64+0x26/0x620 [ 364.463689] __x64_sys_sendmmsg+0x9d/0x100 [ 364.463706] do_syscall_64+0xfd/0x620 [ 364.463724] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.480315] RIP: 0033:0x459a59 [ 364.480331] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:42:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)=""/201, &(0x7f0000000080)=0xc9) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {0x5, 0x1}, 0x1, 0x1, &(0x7f00000000c0)={0x66, 0x0, 0x8, 0x8000, 0x7fff}, 0x8, 0x20, 0x80, 0x0, 0x81, 0x20, &(0x7f0000000280)="e6348ae20ac5dcfcc511ea1bfe8ed81e5057a38157ef9a05868ab28325589a16f65c351ecc8018dfbe5be229eb6ca6ed76464e021b547bacb33dfa81d7abb930caa857086d718ba759ccf3bda049797f5811f844ef61b61e9a368a2d596aa1a8c2958f5442940464f8048bfa130f84c5c2ea7886183a8480925653e94cc118a6952e0fbfbbfc901e26dfcee9c1de12ab21d4711e317a621bff6a6336bd9efc5b3f86beeabfe3b795454f2ec1fd597485455093a49c6a38cf529531b22b3ab4b794d725881d92c6b7f17ebffd2f2e0f37663eda98ea175586ee14355d6591f7a19bfb579dec58198acd4d8cbf9d76aa29cc53031be30c0443f6a3aa768eae485c500f0a2d9562a012503e83ff40f5dcb48b3d808f64f7068f06869a3a4c2e1467ecf597b454eb3c2b0c5d42488f8b37a4dd59fc3c3d9fe030ffa026a185120fb19e8a8307b808294d99e4cadaf626a18399596e166fe511fa547110eb1b9180822f8d753d14e69ae0352b61b828c2708ef059c1903e8ce4ffbc5fe757ae50b39cf253642c979af7293de854c219da8a2c17cbd79b3d5ef3d915e8949ef3cb832c16249d626af3a34cab6ed5bbc7cf0931d59bcedc93ba5d38cf6a1a5c8ca2917ceb576ee9264cfdc8d0addf79116522c01a9a6ccfff1c606744ac8aa75a10a0ba839472ccb3cb15ebc05856ffe7994e485f53d030d0e515c2ed1909aa097500baf8eca85a3ffdbdf9e22e5a3feb2125b1755e8d61537bafee539d0c6afd883fb8a75bef6655a2bf57969b67329ba746e9359a05ca2ae38b5bc28cebf7537c06fc555db8791e8b6e648d82672acfa1bbe7c969a77bdb128ecc6534103df0bdb987b7233c79dc4be1d60c3f8c0f79f3b0d1dad30ecd2caeeb206ae8ae8610c2d967ea25778d11576ba25b9f89d3c3553e29e2405580801347ab67376a2b6dd30a55d56ed3440dc9064da608a535e86c4adb3e0e698cc421113d83359b2f256877cbc764f01170971f563d5a652d6b1067546663de8724aacc901e23972b3b2a0cb8ee2a5927cb903a864613954b856dbbc28ef5b2a34716e61456248e139de4f48ecf1d3e8f14887b5b121cdb06037dfa450a8c9145c577cc0f8e13e1857a9fd8ba889ae7aaf41932a16d139a3c980dc0a6f681f3da7daa28ae6bccf8ccc39348e2e48c37f122446e58a94e4b886efea5d35058799c8522ce640837f9f5d817fe0bf7d4963cdd7c25df0ae8345133cc7145c537b3a071e2dae85da679d93d8e5b9cc6718763b969d9f87ead313e124766b6c1e762b52df1886b4281400ee5d306dcb466470d88a961e090311260520f56a3ae4485422a1ec45abeb6f3c0c769ef7a68b44c7e725e024768e4edc3f296f7672488f52f9d5497dbb524b2137e1ead5aa7cb8f76221cd4097973e5b106c5572383c5c59786bf6a506fdab18816099ad2e62c571d97ea6291822cdf55e3a616ca299ef9d14971c14bc62c7867a894fae69d7975b791c33f9cbd6e8cf3eb9c60f254f569e7c75480764df7baf54c39c7433a694ea7a59296e806c2cbe06612dba735b4bd08d738075b72b2f854fe6fb99dbff8b3b899421bb1936277e416fec9736a8436e9b78c6a797c165331d9738419a0b49e0842313a7183c4d9158084779036cb3bb24644c59b846aa585ba1944bb13796080409b5615eda9ab10b0a1bacf455be122201776c614a16f021e0c960ec6eabd618d0cf4d09a4bc66db4783ac94d7782782c5e7f6d2f176bfe86cbfde18d9c16068709f7f37a3ef87669bc488f9afc4b108969c73b41e39e5384101a2c92570ad2608c0c1058141099f560e4d9e150b81b3ea828e5c71e5b05be5a72dd2f1aaf6a6968c7fea62b5ae37810e861497c019a625e545ebf549ac71df7544e1dae1d357702dbc789e242406208fb5538ed0d95bd8ca7ec0c95d669c55ba0abc47444d191529319774db9fbd2f9b5c429503e79306551aac474e8f284efb8510d522f2a03e92dd78c1652eb3e991a7b9b948e1cb26bdfa63d7c919ca8c9665c1d6ebd5ef6b49d6fead0f313845fed94148c15e5a20f005e4de69e8428aeadb1a4dc97be9f45f680af48f2a2cf8f515c467a8b2e4468f45177142403fc0f14013bd4da3be20657fd1a61567e46ed81bfc9ef5143f70f743974bb4dde496f99fcf6e209d4b9eb4a586c5444f162dbb4c870189934f025e7cac74cd5d803e4db4c8d2dce2b7941ef91cab4e24d9bb5c2976524494dbe00437d23593fd901256b8f2cd9f223b63668cdd1a505a08d741bd814e245a3f4e1524aa13b6b5849fcdae282900aa47f201d2a18ecebb90fdb25ca49be458d42529e5946efb56290ccdf523d9f08cf3c70010e195167d38ee4e20d467739f67f84607acf470b9f2505dd54e5e93c34af4853e668095cf8af84719c11da779596fd0f0f21e325f1823dfdad8dc745ae28bec093c1c5cab583f1221736dac54e4a09be7297027acc1654a9f211e582cd5f7fd977165029a48874a04bcd76862080a7a2db67bfe611988aa99539296f92de4d2562e320ccfe7f043fde57d70529ec2fb15efadc5662fdf9ea7bb32d792740e5f681158db98a503dae28c410a5fb8af9ae1fa836b3681899974f337b2ad057b5f3bebc1bcfa8964ab5058c78ea7c8d7d72a9b170f88ab1a7a0ad2f1eb4a63000f2aa5fb2d460b92ed5bb323aac494ca806e44874f1a91382b954e4f928aff60a514485a1d32e73792e29ce3f396a2d91cec163b41985cae333ffbb63adb1f85a4be95d11886ea7215b1642f27ffac05635607b3f722253502f351055ab09e82a17875ddbdff7ea370127fecb40761479698407a9b74fa43b43306a6504c93877e14b89eaeeb96530d04487a00135383f2517f3a7edd26eeed1bdb98ad57dd41d178dac5bd36a70851fbd224e0f12a2deac724882a5f4ac2cb6e3baef96a46fe2b061a7ec7e26f24f5530f53e5cbe8f34366d963991b699643fe9fd9e4b8802e1f7c880ffb4f9569a58613e85bf22dfcbef687909f919172f46ace8964ca467d7d6dffef5615a65657011c5c953a4cb17cbb9f7358ad745947b63e80166268a3c39d0992bc28d5fd5191f792d46e7af3a87749dc57ad454de085a03c162f0a0965ea0676954a6f9e6bb47e10107a2934aa5ed24c86ad16b8203dda64d96ff1ade814e4d67f882fe791a79f456e3ee5b86845d77133d70c4c98a3fc7069b7de6168882d66f7d463386488aa7a45b834e98f2b092948a14bf4385b52ec3d4b07e8c258e20509f9d56df8be29731206b7be42d3970d14c55a86e32ad8567fd37d062726d38133728e6cf44ecbd803ee0ae2d55486422b8957b9b416615770cbc3d69ac4dbebfde192a3aaf0c6083becb30a4bd5f8867104d84ff2f918bae189d6f042ed3894507781e560e9e83edc038d31936d0bb54575f534fe0233f3ff0948ac199e147b0bfdb15f3bd3f738efdf01f385be2074d93da26f7254d9aa4fe9d9da3f8438f6d6d111e09e495d2ed3df06e133f101060f3064d9a93ea6696a737a285f505a0f9292400413d36185396e2a720c3cac23e110c04b7ceff721c06daf8adca09fe4a41b0e9f2f2587e0070c90eb5d8ec36eff44829668504ee555554de9a814fc21a0331351b59c7a7adbd9507b3eda1cd9272f3ed86159c38433a0896926c8b1450c8368daa963079c6de12b139e77a17ef63dc6429ffae51c24a76588f78de3353dc1ec54be0c80617ad44fb63809ff5ac924c08fbf76997350193e9473169ba5cd281d2a4bc51e09ac0ba7c1c7777562f3ab4a5d43ac88d19922f1b847adebc3a7b4aaea980d5629bfe80c9c02f2f1ad866593f54ddbaddbf16ffd21601dce1bb46e9757f5863d359c6dd698c0c724d8987854065b5cc2b1f91a4c844f23d0572ba596bbdac59b3b93b734e6e3eec3a2ad16eb97ba426377e79211fe0f15df584cb70e21ed6472db903b514802168cf791f958ff24df519e1f1115f6d553f558b95ee2ee4ae6705f5f7e99f8488a6182dec6eb338f900153eadd87388013a08c615706c07ff09f31b31968e1af0e39e51c08d0017e95d361443c4283abcbde994359662adb4a753ad45980e4b400b72bd679b614b010f8cdbc72bd121f2a0f09549e82c93dd8e9ab7a17c781780a23a06b17aef045142b9ded2911cef89af8b8d582084e9c0f749ccfa405d70cdde0175cff6e6ef0f964d6e583ce9750eeeeff9f19193ef613e3e9c8a47a38f758a44f109cbe9a510e312ebf735e2986096b85501a5dc4e0439baeb5865bdfe14ad925dd10ea94be1eb99a44ec535e84f859dfa06e66276ba18b5346f98597ac2f8aa895ff268076c71eb2b57a0590dc4b1d63d8a3d9f738720e357d15f249f7d669f4991e389c2cf14fdad2c9a6e9489289f4151ecaff16f1153ab2154f93652c47819d31a283a067226f9f52a435924ee2ddf02a97ff370685ea6dd527a0026f3acdedd5efde8b2a2fca9012432909b022576ee9cb6bb13a9bd4a70cedfbec2c0336288376e412f16d2d5c0370fe4a294f2033d3f248634ca0897f083ca0469a19eee6abc4a839812ba934253d0d64f0031dd949541c7b816adfab3539f6915039b8146fa8c8a58f9743f2f748ed5f82fe61673db6fa6f7f17ed2a57451590fb6c5f20aa77a171792534d1a74e937ddd1e70ea780b8292143879824178564176a5e0453453b403098d7cb3341af5b57a4b4f072d571c16b3fcbb109c12d6680123a5dc2cba35540b24074fb9aa317dd83d85aa2fda0351c83ce38207b08ad81c45371af0a685418a690cccc4035ea934849448ab539fe81342b2aaf0aab65c2f3684c74929bcde98a4a4fb83dc0cf407c7e42cd0b43ab4fb797f392a0a8ba37b33012e4a2d5b0bb28e76a22e357e1f8cb8748d3f53e6e4b2331046b4f51ffc740e6b3903d560ee36bde4c5c18bd87c25236d484cc6afe2becbf002b519e10e1c1bd9978f6e043d644f17426847592090598e569728d6a19f3b116bca78b0e773336989063dfc0e8b0cf5064c263db099a441d138e913a0f605e4d8d77e5b716de47b7048e70c7bf6eb2dfd40d8c945306635095e6359d7e6f346212d7d025e59b96bdbb5c7a82a57d2ac2e7eb598dfc38673c039f19a78efb9d98d9b898b8c470e0aa694b488221b5271cfd556357331ebe59581180226ccddbff6526bbf8e33ed1a836f3bda5706d5f82ca08176f179830f28a130523edcce11caedcdc3e36dfc5102556ce12bf4c64c48d003532e3d7f481ff939444c10ed308be1b1aaaa571e55a63fc2f45e0711c272eafa976eef520e95d1031c6764112bc9ed619e47a6f31133282b51ca02895c0245ee139130738ac362fb1f3ec938e6143054237523d68211cd8b4bd81ebc8714dcc8c2da26a3673d7b4e9148af048c0d42ec7cc7da788aeda5d12294cc9f3a0a05e4e34b748bbdb4c465528dd6d6965337476a297ef87aa4a22718d96f3ae64d6a1acc954cbb109982b0271732350d03739456844c12a72e37db63139e148b80dc3f07689ac7e882a21756ac6a84d4b3383ba7bc19123129e9351b1bb43980f411581129c972e447da7b429e43b1f6944f86e978151f6f3bd2d6846d52d40dcb651f3bac10e3a680dc68cea958d85854096adb7f63648a48b67e7aceb52dba049f306aef2efb56f109cfbb1790c9bcb32da146b695641947bf9dd1a50c190cafa5fa65960f8b1fe1f762d05d4381b2761cd1919ed44191c4e0bdf6c1bd3fdb1459ae73a03d9863c165b47ffe0b2ef33c09fcc536e891ec7b02dc2cc7f69"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$RNDZAPENTCNT(r9, 0x5204, &(0x7f0000001280)=0x7) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:31 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, 0x0) [ 364.480339] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 364.493735] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 364.493744] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 364.493752] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 364.493761] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 364.493770] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:31 executing program 3: syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x20, r2, 0x701, 0x0, 0x0, {0x13, 0x0, 0xfffffffffffff000}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x5}]}]}, 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x74, r3, 0x100, 0x7, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd0d}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x79}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x200400c0) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0xc0305602, &(0x7f0000000000)={0x8001001, 0xd}) 06:42:31 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x204000, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="e7172fdabdbb767e300ebde4220524c8", 0x10) 06:42:31 executing program 4 (fault-call:6 fault-nth:57): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 364.612760] net_ratelimit: 18 callbacks suppressed [ 364.612769] protocol 88fb is buggy, dev hsr_slave_0 [ 364.623108] protocol 88fb is buggy, dev hsr_slave_1 [ 364.628592] protocol 88fb is buggy, dev hsr_slave_0 [ 364.633712] protocol 88fb is buggy, dev hsr_slave_1 [ 364.638829] protocol 88fb is buggy, dev hsr_slave_0 [ 364.643939] protocol 88fb is buggy, dev hsr_slave_1 06:42:31 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:31 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r5, 0x9) read(r5, &(0x7f0000000080)=""/35, 0x23) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f0000000100)={0xf2, 0x40, 0x7, 0x8, 0x1, 0x5}) r7 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r7) [ 364.807015] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 364.826941] FAULT_INJECTION: forcing a failure. [ 364.826941] name failslab, interval 1, probability 0, space 0, times 0 [ 364.872168] CPU: 0 PID: 29446 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 364.879156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.888646] Call Trace: [ 364.888674] dump_stack+0x172/0x1f0 [ 364.895003] should_fail.cold+0xa/0x1b [ 364.895022] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 364.895039] ? lock_downgrade+0x880/0x880 [ 364.895062] __should_failslab+0x121/0x190 [ 364.895077] should_failslab+0x9/0x14 [ 364.895095] kmem_cache_alloc_node+0x26c/0x710 [ 364.920970] ? __lock_acquire+0x6ee/0x49c0 [ 364.925228] ? __dev_queue_xmit+0x1757/0x2fe0 [ 364.929751] ? find_held_lock+0x35/0x130 [ 364.933841] __alloc_skb+0xd5/0x5f0 [ 364.937494] ? skb_scrub_packet+0x490/0x490 [ 364.941836] ? mark_held_locks+0x100/0x100 [ 364.946089] ? trace_hardirqs_on+0x67/0x220 [ 364.950525] alloc_skb_with_frags+0x93/0x590 [ 364.954952] ? mark_held_locks+0x100/0x100 [ 364.959198] ? avc_has_perm+0x379/0x610 [ 364.963183] ? find_held_lock+0x35/0x130 [ 364.963203] sock_alloc_send_pskb+0x72d/0x8a0 [ 364.963224] ? packet_cached_dev_get+0x148/0x260 [ 364.963242] ? sock_wmalloc+0x120/0x120 [ 364.963256] ? lock_downgrade+0x880/0x880 [ 364.963271] ? kasan_check_read+0x11/0x20 [ 364.963290] packet_sendmsg+0x1a16/0x6440 [ 364.963309] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 364.998690] ? rw_copy_check_uvector+0x2a6/0x330 [ 364.998714] ? sock_has_perm+0x209/0x2a0 [ 365.007530] ? packet_notifier+0x840/0x840 [ 365.007555] ? selinux_socket_sendmsg+0x36/0x40 [ 365.016441] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 06:42:31 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={r7, 0x100, 0x9, [0x0, 0x7, 0x2, 0x3, 0x2, 0x3, 0x1, 0x380, 0x8]}, &(0x7f0000000040)=0x1a) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x8006, 0x3, 0x3ff, 0x5, 0x9, 0x20, r8}, &(0x7f00000000c0)=0x20) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) getsockopt$inet_dccp_int(r6, 0x21, 0x8d27935e7ac058bf, &(0x7f0000000100), &(0x7f0000000180)=0x4) 06:42:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x4, 0x70, 0x40, 0x7, 0x8, 0x6, 0x0, 0x1000, 0x400, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x7, 0x80000001}, 0x20000, 0x81, 0x101, 0x6, 0x694, 0x401, 0x400}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x2, 0x2, 0x2}}, 0x14) r2 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:32 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) [ 365.022002] ? security_socket_sendmsg+0x8d/0xc0 [ 365.026782] ? packet_notifier+0x840/0x840 [ 365.031045] sock_sendmsg+0xd7/0x130 [ 365.034781] ___sys_sendmsg+0x3e2/0x920 [ 365.038782] ? copy_msghdr_from_user+0x430/0x430 [ 365.043567] ? mark_held_locks+0x100/0x100 [ 365.047828] ? kasan_check_read+0x11/0x20 [ 365.052003] ? __might_fault+0x12b/0x1e0 [ 365.056085] ? find_held_lock+0x35/0x130 [ 365.060163] ? __might_fault+0x12b/0x1e0 [ 365.064367] __sys_sendmmsg+0x1bf/0x4e0 [ 365.068459] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 365.072803] ? kasan_check_write+0x14/0x20 [ 365.077214] ? __sb_end_write+0xd9/0x110 [ 365.081300] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 365.087078] ? fput+0x128/0x1a0 [ 365.090372] ? ksys_write+0x1f1/0x2d0 [ 365.094310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 365.099084] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 365.103862] ? do_syscall_64+0x26/0x620 [ 365.107857] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 365.113364] ? do_syscall_64+0x26/0x620 [ 365.117361] __x64_sys_sendmmsg+0x9d/0x100 [ 365.121624] do_syscall_64+0xfd/0x620 [ 365.125563] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 365.125574] RIP: 0033:0x459a59 [ 365.125592] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 365.125600] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 365.125615] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 06:42:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:32 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0xa14299dfb58b47a, 0x6000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) write$rfkill(r2, &(0x7f0000000040)={0x1, 0x1f, 0x3}, 0x8) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:32 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:32 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, 0x0) 06:42:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000000)=[0x3, 0x2], 0x2) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) [ 365.125622] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 365.125630] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 365.125641] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 365.134105] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:32 executing program 4 (fault-call:6 fault-nth:58): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:32 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x1}) 06:42:32 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) getpeername$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000080)={'gretap0\x00', {0x2, 0x4e21, @broadcast}}) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000040)={0x16, 0x1, &(0x7f0000000280)="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", {0x401, 0x5, 0x3234564e, 0x6, 0xa8, 0x8, 0x0, 0x9}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0xc}) 06:42:32 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) r4 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x803) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x20000, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000080)={0x0, r5}) [ 365.412797] protocol 88fb is buggy, dev hsr_slave_0 [ 365.418371] protocol 88fb is buggy, dev hsr_slave_1 06:42:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x0, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:32 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x1}) [ 365.452651] FAULT_INJECTION: forcing a failure. [ 365.452651] name failslab, interval 1, probability 0, space 0, times 0 [ 365.502785] CPU: 1 PID: 29599 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 365.509980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.519461] Call Trace: [ 365.522073] dump_stack+0x172/0x1f0 [ 365.525838] should_fail.cold+0xa/0x1b [ 365.529746] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 365.534859] ? lock_downgrade+0x880/0x880 [ 365.534880] __should_failslab+0x121/0x190 [ 365.534896] should_failslab+0x9/0x14 [ 365.543383] kmem_cache_alloc_node_trace+0x274/0x720 [ 365.543400] ? __alloc_skb+0xd5/0x5f0 [ 365.543421] __kmalloc_node_track_caller+0x3d/0x80 [ 365.543457] __kmalloc_reserve.isra.0+0x40/0xf0 [ 365.552479] __alloc_skb+0x10b/0x5f0 [ 365.552496] ? skb_scrub_packet+0x490/0x490 [ 365.552513] ? mark_held_locks+0x100/0x100 [ 365.561316] ? trace_hardirqs_on+0x67/0x220 [ 365.561336] alloc_skb_with_frags+0x93/0x590 [ 365.561351] ? mark_held_locks+0x100/0x100 [ 365.569840] ? avc_has_perm+0x379/0x610 [ 365.569857] ? find_held_lock+0x35/0x130 [ 365.569876] sock_alloc_send_pskb+0x72d/0x8a0 [ 365.578511] ? packet_cached_dev_get+0x148/0x260 [ 365.578531] ? sock_wmalloc+0x120/0x120 [ 365.578554] ? lock_downgrade+0x880/0x880 [ 365.587264] ? kasan_check_read+0x11/0x20 [ 365.587289] packet_sendmsg+0x1a16/0x6440 [ 365.595484] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 365.595499] ? rw_copy_check_uvector+0x2a6/0x330 [ 365.595524] ? sock_has_perm+0x209/0x2a0 [ 365.595553] ? packet_notifier+0x840/0x840 [ 365.604092] ? selinux_socket_sendmsg+0x36/0x40 06:42:32 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='\xa5\xaf\aiev#\x00', 0x90a9, 0x412c02) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000040)={0x1, 0x2, [0x1, 0x1, 0xf26, 0xe741, 0x2], 0x3}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x10c}) [ 365.604106] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.604122] ? security_socket_sendmsg+0x8d/0xc0 [ 365.604138] ? packet_notifier+0x840/0x840 [ 365.612869] sock_sendmsg+0xd7/0x130 [ 365.612885] ___sys_sendmsg+0x3e2/0x920 [ 365.612902] ? copy_msghdr_from_user+0x430/0x430 [ 365.612923] ? mark_held_locks+0x100/0x100 [ 365.621460] ? kasan_check_read+0x11/0x20 [ 365.621483] ? __might_fault+0x12b/0x1e0 [ 365.631325] ? find_held_lock+0x35/0x130 [ 365.631341] ? __might_fault+0x12b/0x1e0 [ 365.631374] __sys_sendmmsg+0x1bf/0x4e0 06:42:32 executing program 4 (fault-call:6 fault-nth:59): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 365.640173] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 365.640192] ? kasan_check_write+0x14/0x20 [ 365.640216] ? __sb_end_write+0xd9/0x110 [ 365.649107] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 365.649122] ? fput+0x128/0x1a0 [ 365.649137] ? ksys_write+0x1f1/0x2d0 [ 365.649156] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 365.659749] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 365.659765] ? do_syscall_64+0x26/0x620 [ 365.659780] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 365.659795] ? do_syscall_64+0x26/0x620 [ 365.667740] __x64_sys_sendmmsg+0x9d/0x100 06:42:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="aaa5dd40", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) [ 365.667760] do_syscall_64+0xfd/0x620 [ 365.667781] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 365.676486] RIP: 0033:0x459a59 [ 365.676501] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 365.676508] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 365.676523] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 06:42:32 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r1, 0x9) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r3) 06:42:32 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x1}) [ 365.676532] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 365.676544] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 365.676556] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 365.684924] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 [ 365.874952] FAULT_INJECTION: forcing a failure. [ 365.874952] name failslab, interval 1, probability 0, space 0, times 0 [ 365.886249] CPU: 0 PID: 29698 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 365.893185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.902882] Call Trace: [ 365.905575] dump_stack+0x172/0x1f0 [ 365.909344] should_fail.cold+0xa/0x1b [ 365.913327] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 365.918450] ? check_preemption_disabled+0x48/0x290 06:42:32 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r5, 0x9) read(r5, &(0x7f0000000080)=""/35, 0x23) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f0000000100)={0xf2, 0x40, 0x7, 0x8, 0x1, 0x5}) r7 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r7) [ 365.923502] __should_failslab+0x121/0x190 [ 365.927760] should_failslab+0x9/0x14 [ 365.931696] kmem_cache_alloc+0x47/0x700 [ 365.935770] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.941467] ? check_preemption_disabled+0x48/0x290 [ 365.946509] ? lock_acquire+0x16f/0x3f0 [ 365.950510] skb_clone+0x156/0x3e0 [ 365.954155] dev_queue_xmit_nit+0x309/0xa10 [ 365.958582] ? validate_xmit_xfrm+0x1f7/0xda0 [ 365.958607] dev_hard_start_xmit+0xa7/0x980 [ 365.958628] __dev_queue_xmit+0x2704/0x2fe0 [ 365.972004] ? refcount_add_checked+0x33/0x70 [ 365.972035] ? netdev_pick_tx+0x300/0x300 [ 365.972053] ? packet_cached_dev_get+0x148/0x260 [ 365.972071] ? sock_wmalloc+0x120/0x120 [ 365.976688] protocol 88fb is buggy, dev hsr_slave_0 [ 365.980709] ? lock_downgrade+0x880/0x880 [ 365.985526] protocol 88fb is buggy, dev hsr_slave_1 [ 365.989569] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.009472] ? skb_copy_datagram_from_iter+0x441/0x660 [ 366.014851] ? kasan_check_read+0x11/0x20 [ 366.019130] dev_queue_xmit+0x18/0x20 [ 366.022943] ? dev_queue_xmit+0x18/0x20 [ 366.027058] packet_sendmsg+0x3bb0/0x6440 [ 366.031235] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 366.036876] ? rw_copy_check_uvector+0x2a6/0x330 [ 366.041674] ? packet_notifier+0x840/0x840 [ 366.045939] ? selinux_socket_sendmsg+0x36/0x40 [ 366.050736] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.056480] ? security_socket_sendmsg+0x8d/0xc0 [ 366.061253] ? packet_notifier+0x840/0x840 [ 366.065594] sock_sendmsg+0xd7/0x130 [ 366.069610] ___sys_sendmsg+0x3e2/0x920 [ 366.073607] ? copy_msghdr_from_user+0x430/0x430 [ 366.078392] ? mark_held_locks+0x100/0x100 [ 366.082660] ? kasan_check_read+0x11/0x20 [ 366.086836] ? __might_fault+0x12b/0x1e0 [ 366.090912] ? find_held_lock+0x35/0x130 [ 366.094989] ? __might_fault+0x12b/0x1e0 [ 366.099094] __sys_sendmmsg+0x1bf/0x4e0 [ 366.103213] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 366.107555] ? kasan_check_write+0x14/0x20 [ 366.111957] ? __sb_end_write+0xd9/0x110 [ 366.116043] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 366.121595] ? fput+0x128/0x1a0 06:42:33 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r5, 0x9) read(r5, &(0x7f0000000080)=""/35, 0x23) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f0000000100)={0xf2, 0x40, 0x7, 0x8, 0x1, 0x5}) r7 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r7) 06:42:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x0, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) [ 366.124891] ? ksys_write+0x1f1/0x2d0 [ 366.128718] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 366.133633] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 366.138405] ? do_syscall_64+0x26/0x620 [ 366.142394] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 366.147779] ? do_syscall_64+0x26/0x620 [ 366.151896] __x64_sys_sendmmsg+0x9d/0x100 [ 366.151915] do_syscall_64+0xfd/0x620 [ 366.151933] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 366.165461] RIP: 0033:0x459a59 [ 366.168695] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 366.187890] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 366.187905] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 366.187913] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 366.187922] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 366.187929] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 06:42:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f0000000000)="378b3052a2bb26095439e996c757d4a4d74a86c7cb", 0x15, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @rand_addr=0x7f}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r5, 0x9) fcntl$setflags(r5, 0x2, 0x3) r6 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x9, 0x20000) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) r11 = socket$inet(0x2, 0x4000000805, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) r13 = dup3(r11, r12, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r13, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r12, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x7a, &(0x7f000059aff8)={r14}, &(0x7f000034f000)=0x2059b000) r15 = socket$inet(0x2, 0x4000000805, 0x0) r16 = socket$inet_sctp(0x2, 0x5, 0x84) r17 = dup3(r15, r16, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r16, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r17, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r16, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r16, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r17, 0x84, 0x7a, &(0x7f000059aff8)={r18}, &(0x7f000034f000)=0x2059b000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r20 = dup(r19) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r20, 0x84, 0x76, &(0x7f0000000a00)={0x0, 0x7f44}, &(0x7f0000000a40)=0x8) sendmmsg$inet_sctp(r6, &(0x7f0000000b40)=[{&(0x7f0000000100)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000180)="236dcb14c54b126df94013283164a56d0b3b9048a1c818b4bea948e89ed71dfd800b59696d7ea624e1698bf7cc466c817698c049b5f09f39c08308c727b026cf1a4d36ae93", 0x45}, {&(0x7f0000000200)="7b32c7e4d274bb3e7b48d38ec1d0c4228580c9e8ef3f53fc75f901231741f9bbf3b8b47a40bc9aabbf215e1aa4c4af2d9a4776701a9b3030778fec06be80b8a17187b76c448bb7d6e145f2cce1965329be70199030674110c376adb31ef9b2ec23ebe1cbf6c9084d00390a7a39c6de6f814ca869e7c732ed9cce3dd33dd75526cafae5950acb5fcd704f507cacd6e1caed581693c20970217508e72533d7b12896aad0419ac85e60f440f6f0aff01d138dd060b1211450d0d9877b49237299db212c71494e4d50a89b02acfd2872b767e6e7467a5dad799ab795eeb394c925738c78c3b0", 0xe4}, {&(0x7f0000000300)="8960638d223b587f47e806fc2b8267a05ebea5de6acfbf27d44e632ff6b131587b264acfe5b9ef11b03bc86811bb2fcae1bdd06c5fb2f55f", 0x38}], 0x3, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x1ff, 0x8001, 0x209, 0x2, 0x6, 0x7fffffff, 0x6, 0xcf41, r10}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0xff}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x8010}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0xff}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x3ff, 0x4, 0xdef, 0x0, 0x4, 0xff, 0x4, r14}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x2, 0xfff, 0x3, r18}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}], 0x100, 0x10000}, {&(0x7f0000000480)=@in={0x2, 0x4e23, @rand_addr=0x9}, 0x10, &(0x7f0000000600)=[{&(0x7f00000004c0)="317f70ba4cfc017dbf9462b668b28cc18889f6692a28f564a72eecf75e1d800efeb94c7de12167aa57157f42a8beab3223147d1908c8880f32d14160b33708b9", 0x40}, {&(0x7f0000000500)="792460b63b77a8551b905b045c65a580090d9c0abfdfd24bf2d054b18f4d56a6f84a607da3108bcab404fe76f83d7d369e3b0c9177fccdd0117e1f2d5605e08354fd376c2d38f4aaf56d3a0d481089942060aa3c486db449faaadb284c2a54944527fff3d4c26811ec7506ba247fb6622fcda4226c3e35890d6d41fee1b40bc5a915bb0c5875464a996cd894a016512fdf98f64ad14f64655b1dfd967ae3e57e0e1b00c3cacc060dc3df8eaff31e7a100f5ac41804e372c49a0889787ee01cb14c4c8e5e", 0xc4}], 0x2, &(0x7f0000000640)=[@authinfo={0x18, 0x84, 0x6, {0x1ae7}}], 0x18, 0x80c0}, {&(0x7f0000000680)=@in={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000980)=[{&(0x7f00000006c0)="5081667197a2898647eaf38ecd6e667e9831acf53d0bac859323e50f1cb769e8d677ccb5c1e5df321fb428c59081dbf288f41509a2cc5b699a8565f61dcc3aba3744e27b98128bdfa9f3dca13b0f24e6f0fd452729a98cd85f7d4d7e0c0b9214131ac11e58b7196a0156ddd44b2a3df810b6c446f5", 0x75}, {&(0x7f0000000740)="83a9a74bf952a16e9c95cba2180b9ba5434f0d0667f98631ded6298c", 0x1c}, {&(0x7f0000000780)="cea2bc55610644e14dcec7bdf88048", 0xf}, {&(0x7f00000007c0)="2ff3f6dfe7bb4556c2", 0x9}, {&(0x7f0000000800)="e932e7b1fe5d077c2fec79ce5cda57dfd06c69c228568c3c5f65cad91befe16965774e709a3af700ffe891d0566ffaa22a485b532b755645709f7cba21fc57f420bad5e4f69c3f7ae57b32158a7608d2d72c684f2b4287ccd1184ee05db5c2420229b9e19b8206c530943a4a0a207f3b553cc3bb0264168f8d72b5e5d7f48c4a249c47e5ac75b14e86ea051b7e58bd378fc4ba861b9464af69491bdb9eee39911755349e542600b5b8282dae790d77f96a09400f6837a68fd185b775ca5639c6aed3a9c605b3427acc334b941b76a31940d0b2713439f5a19f4bebce1939dc2ee3bf9fa3b9474a849d98", 0xea}, {&(0x7f0000000900)="4e265ac03c8deecf135a428a99de853af4f5ec2b3e2bcd1778037f74071cf0920b09e434e4ddc3d94a875b10751479c2319cc0f0bde1707d4dd6429f8e326efb872d17f272e48f6e7cef03c5a9fd4dddafe440ecc4b533e8cc8ba8754f377304f34cbb5a7bd8d37b718024f8f39632", 0x6f}], 0x6, &(0x7f0000000a80)=[@dstaddrv4={0x18, 0x84, 0x7, @empty}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x100}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x1000}}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0xdb16, 0x8200, 0x7fff, 0x6, 0x22d6, 0x6630, 0xfffffff8, r21}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xc0, 0x1}], 0x3, 0xc000004) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="020004002f7ff21e021e1ba572918a18678b99e5bfdfe2e7eac1bda9ce57923dd1cffdad91ca876c2a1000e4c7f68c051d05962a9887fd6ead441d5593f4111e3fa45ba5dc6a04", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r22}, &(0x7f000034f000)=0x2059b000) 06:42:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x10, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) 06:42:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:33 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x20, 0x100) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/a\xffc/cachw_\x01tats\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000040)={0x1f, 0x0, [], {0x0, @bt={0x40, 0x8, 0xc503652ec1e71fde, 0x5c44927789cec45e, 0x3000, 0x5, 0x1, 0x0, 0x4, 0x7fff, 0x3, 0xda4, 0xe12, 0x5, 0x2, 0x1}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$char_usb(r3, &(0x7f0000000140)="6b89f2314f9250552423e563cb74afd33a1949884536002068cdc058200ccbb8559d4a46e32afa3452a1bbcb4b9187a2f226d36a1486e6dd90c512e8937e77e5db8e2ed51b5284a7f40767be2b89a01ea0", 0x51) [ 366.187936] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:33 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r5, 0x9) read(r5, &(0x7f0000000080)=""/35, 0x23) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f0000000100)={0xf2, 0x40, 0x7, 0x8, 0x1, 0x5}) r7 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='z', 0x1, r7) 06:42:33 executing program 4 (fault-call:6 fault-nth:60): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:33 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90ac, 0x800) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x20, r2, 0x739, 0x4, 0x0, {0x13, 0x0, 0xfffffffffffff000}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x3008c0d4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84080040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x100, 0x70bd2b, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x48010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000140)={0x3, 0x0, 0x6, 0x0, 0x8001}, 0xc) 06:42:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x0, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:33 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x20, 0x100) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/a\xffc/cachw_\x01tats\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000040)={0x1f, 0x0, [], {0x0, @bt={0x40, 0x8, 0xc503652ec1e71fde, 0x5c44927789cec45e, 0x3000, 0x5, 0x1, 0x0, 0x4, 0x7fff, 0x3, 0xda4, 0xe12, 0x5, 0x2, 0x1}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$char_usb(r3, &(0x7f0000000140)="6b89f2314f9250552423e563cb74afd33a1949884536002068cdc058200ccbb8559d4a46e32afa3452a1bbcb4b9187a2f226d36a1486e6dd90c512e8937e77e5db8e2ed51b5284a7f40767be2b89a01ea0", 0x51) 06:42:33 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r5, 0x9) read(r5, &(0x7f0000000080)=""/35, 0x23) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f0000000100)={0xf2, 0x40, 0x7, 0x8, 0x1, 0x5}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 06:42:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r3, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r4, 0x9) r5 = dup3(r4, r3, 0x140000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x10, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 06:42:33 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0905664, &(0x7f0000000280)={0x0, 0xc}) 06:42:33 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r5, 0x9) read(r5, &(0x7f0000000080)=""/35, 0x23) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f0000000100)={0xf2, 0x40, 0x7, 0x8, 0x1, 0x5}) [ 366.726657] FAULT_INJECTION: forcing a failure. [ 366.726657] name failslab, interval 1, probability 0, space 0, times 0 [ 366.772495] CPU: 1 PID: 29947 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 366.779570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.788942] Call Trace: [ 366.791559] dump_stack+0x172/0x1f0 [ 366.795334] should_fail.cold+0xa/0x1b [ 366.799367] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 366.804646] ? lock_downgrade+0x880/0x880 [ 366.808828] __should_failslab+0x121/0x190 [ 366.813085] should_failslab+0x9/0x14 [ 366.816901] kmem_cache_alloc_node+0x26c/0x710 [ 366.821491] ? __lock_acquire+0x6ee/0x49c0 [ 366.825743] ? __dev_queue_xmit+0x1757/0x2fe0 [ 366.830259] ? find_held_lock+0x35/0x130 [ 366.834358] __alloc_skb+0xd5/0x5f0 [ 366.838004] ? skb_scrub_packet+0x490/0x490 [ 366.842517] ? mark_held_locks+0x100/0x100 [ 366.846769] ? trace_hardirqs_on+0x67/0x220 [ 366.851113] alloc_skb_with_frags+0x93/0x590 [ 366.855695] ? mark_held_locks+0x100/0x100 [ 366.859954] ? avc_has_perm+0x379/0x610 [ 366.864036] ? find_held_lock+0x35/0x130 [ 366.868121] sock_alloc_send_pskb+0x72d/0x8a0 [ 366.872644] ? packet_cached_dev_get+0x148/0x260 [ 366.877429] ? sock_wmalloc+0x120/0x120 [ 366.881425] ? lock_downgrade+0x880/0x880 [ 366.885750] ? kasan_check_read+0x11/0x20 [ 366.890044] packet_sendmsg+0x1a16/0x6440 [ 366.894325] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 366.894340] ? rw_copy_check_uvector+0x2a6/0x330 [ 366.894363] ? sock_has_perm+0x209/0x2a0 [ 366.894387] ? packet_notifier+0x840/0x840 [ 366.909108] ? selinux_socket_sendmsg+0x36/0x40 [ 366.909127] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.923665] ? security_socket_sendmsg+0x8d/0xc0 [ 366.928532] ? packet_notifier+0x840/0x840 [ 366.928552] sock_sendmsg+0xd7/0x130 [ 366.928567] ___sys_sendmsg+0x3e2/0x920 [ 366.940724] ? copy_msghdr_from_user+0x430/0x430 [ 366.945522] ? mark_held_locks+0x100/0x100 [ 366.949778] ? kasan_check_read+0x11/0x20 [ 366.949798] ? __might_fault+0x12b/0x1e0 [ 366.949816] ? find_held_lock+0x35/0x130 [ 366.962297] ? __might_fault+0x12b/0x1e0 [ 366.966520] __sys_sendmmsg+0x1bf/0x4e0 [ 366.966540] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 366.966557] ? kasan_check_write+0x14/0x20 [ 366.966579] ? __sb_end_write+0xd9/0x110 [ 366.983168] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 366.983181] ? fput+0x128/0x1a0 [ 366.983195] ? ksys_write+0x1f1/0x2d0 [ 366.983213] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 366.996071] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 366.996084] ? do_syscall_64+0x26/0x620 [ 366.996103] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.014952] ? do_syscall_64+0x26/0x620 [ 367.014973] __x64_sys_sendmmsg+0x9d/0x100 [ 367.014988] do_syscall_64+0xfd/0x620 [ 367.015006] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.027007] RIP: 0033:0x459a59 [ 367.027022] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 367.027035] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 [ 367.035510] ORIG_RAX: 0000000000000133 [ 367.063751] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 06:42:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xffff, 0x840) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000100)=0x5, 0x4) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$EVIOCGBITSW(r7, 0x80404525, &(0x7f0000000040)=""/95) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x18) sendfile(0xffffffffffffffff, r5, &(0x7f0000000000), 0x6) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="51800000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x10, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) 06:42:33 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0905664, &(0x7f0000000280)={0x0, 0xc}) 06:42:33 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0905664, &(0x7f0000000280)={0x0, 0xc}) [ 367.071029] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 367.071038] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 367.071047] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 367.071056] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:34 executing program 4 (fault-call:6 fault-nth:61): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:34 executing program 5: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0905664, &(0x7f0000000280)={0x0, 0xc}) 06:42:34 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) fchmod(r2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000000)=0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="a307e900", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:34 executing program 5: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0905664, &(0x7f0000000280)={0x0, 0xc}) 06:42:34 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r5, 0x9) read(r5, &(0x7f0000000080)=""/35, 0x23) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 06:42:34 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x783380, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000040)) r1 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x988380) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000180)={0x0, 0x32315559, 0x3, @discrete={0x8, 0x48b7}}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000080)={0x80000000, 0x0, [], {0x0, @reserved}}) [ 367.260486] FAULT_INJECTION: forcing a failure. [ 367.260486] name failslab, interval 1, probability 0, space 0, times 0 [ 367.349965] CPU: 1 PID: 30172 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 367.357120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.366578] Call Trace: [ 367.369198] dump_stack+0x172/0x1f0 [ 367.373021] should_fail.cold+0xa/0x1b [ 367.376936] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 367.382184] ? lock_downgrade+0x880/0x880 [ 367.386513] __should_failslab+0x121/0x190 [ 367.390760] should_failslab+0x9/0x14 [ 367.394718] kmem_cache_alloc_node_trace+0x274/0x720 [ 367.399838] ? __alloc_skb+0xd5/0x5f0 [ 367.403666] __kmalloc_node_track_caller+0x3d/0x80 [ 367.408611] __kmalloc_reserve.isra.0+0x40/0xf0 [ 367.408631] __alloc_skb+0x10b/0x5f0 [ 367.408647] ? skb_scrub_packet+0x490/0x490 [ 367.421344] ? mark_held_locks+0x100/0x100 [ 367.421360] ? trace_hardirqs_on+0x67/0x220 [ 367.421378] alloc_skb_with_frags+0x93/0x590 [ 367.421393] ? mark_held_locks+0x100/0x100 [ 367.438713] ? avc_has_perm+0x379/0x610 [ 367.442700] ? find_held_lock+0x35/0x130 [ 367.446933] sock_alloc_send_pskb+0x72d/0x8a0 [ 367.451609] ? packet_cached_dev_get+0x148/0x260 [ 367.456553] ? sock_wmalloc+0x120/0x120 [ 367.456569] ? lock_downgrade+0x880/0x880 [ 367.456586] ? kasan_check_read+0x11/0x20 [ 367.456609] packet_sendmsg+0x1a16/0x6440 [ 367.476415] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.482219] ? rw_copy_check_uvector+0x2a6/0x330 [ 367.487004] ? sock_has_perm+0x209/0x2a0 [ 367.491223] ? packet_notifier+0x840/0x840 [ 367.495482] ? selinux_socket_sendmsg+0x36/0x40 [ 367.500169] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.505739] ? security_socket_sendmsg+0x8d/0xc0 [ 367.510623] ? packet_notifier+0x840/0x840 [ 367.514876] sock_sendmsg+0xd7/0x130 [ 367.518613] ___sys_sendmsg+0x3e2/0x920 [ 367.522605] ? copy_msghdr_from_user+0x430/0x430 [ 367.527386] ? mark_held_locks+0x100/0x100 [ 367.531652] ? kasan_check_read+0x11/0x20 [ 367.531672] ? __might_fault+0x12b/0x1e0 [ 367.531689] ? find_held_lock+0x35/0x130 [ 367.540017] ? __might_fault+0x12b/0x1e0 [ 367.540055] __sys_sendmmsg+0x1bf/0x4e0 [ 367.552388] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 367.556740] ? kasan_check_write+0x14/0x20 [ 367.561008] ? __sb_end_write+0xd9/0x110 [ 367.565294] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 367.570835] ? fput+0x128/0x1a0 [ 367.570850] ? ksys_write+0x1f1/0x2d0 [ 367.570868] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 367.582828] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 367.587721] ? do_syscall_64+0x26/0x620 [ 367.591769] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.591783] ? do_syscall_64+0x26/0x620 [ 367.591802] __x64_sys_sendmmsg+0x9d/0x100 [ 367.605475] do_syscall_64+0xfd/0x620 [ 367.609394] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.614603] RIP: 0033:0x459a59 [ 367.617941] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 367.636904] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 06:42:34 executing program 5: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0905664, &(0x7f0000000280)={0x0, 0xc}) 06:42:34 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/vOllsubdev#\x02', 0x90a9, 0x400) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:34 executing program 5: r0 = syz_open_dev$video4linux(0x0, 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0905664, &(0x7f0000000280)={0x0, 0xc}) 06:42:34 executing program 3: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x5a368231acb35950}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0x4e22, 0x3, @ipv4={[], [], @empty}, 0x4}, r1}}, 0x38) r2 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) [ 367.644632] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 367.652155] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 367.659522] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 367.666905] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 367.674183] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:34 executing program 4 (fault-call:6 fault-nth:62): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:34 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r3, 0xf01, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0xb8, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) finit_module(r0, &(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x7) 06:42:34 executing program 5: r0 = syz_open_dev$video4linux(0x0, 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0905664, &(0x7f0000000280)={0x0, 0xc}) 06:42:34 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r5, 0x9) read(r5, &(0x7f0000000080)=""/35, 0x23) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) 06:42:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r1, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r2, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r3, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r4, 0x9) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x540208) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, 0x0, 0x0) sendto$inet(r8, &(0x7f0000000000)="f62243353ad08afb89eb00b5d8e8d1f258e630466a2c521fc2024a50c728dace1ada1050ae25b058a02242fc2720474a91e9568a325415637f425475a6ef2bee11aabdb61c41f241f2fe", 0x4a, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x10, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) 06:42:34 executing program 5: r0 = syz_open_dev$video4linux(0x0, 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0905664, &(0x7f0000000280)={0x0, 0xc}) [ 367.878918] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 367.919864] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 367.920474] FAULT_INJECTION: forcing a failure. [ 367.920474] name failslab, interval 1, probability 0, space 0, times 0 [ 367.938720] CPU: 0 PID: 30317 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 367.945792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.955155] Call Trace: [ 367.957884] dump_stack+0x172/0x1f0 [ 367.961536] should_fail.cold+0xa/0x1b [ 367.965444] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 367.970563] ? check_preemption_disabled+0x48/0x290 [ 367.975720] __should_failslab+0x121/0x190 [ 367.979989] should_failslab+0x9/0x14 [ 367.983813] kmem_cache_alloc+0x47/0x700 [ 367.987903] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.993479] ? check_preemption_disabled+0x48/0x290 [ 367.998516] ? lock_acquire+0x16f/0x3f0 [ 368.002507] skb_clone+0x156/0x3e0 [ 368.006186] dev_queue_xmit_nit+0x309/0xa10 [ 368.010549] ? validate_xmit_xfrm+0x1f7/0xda0 [ 368.015081] dev_hard_start_xmit+0xa7/0x980 [ 368.019513] __dev_queue_xmit+0x2704/0x2fe0 [ 368.023854] ? refcount_add_checked+0x33/0x70 [ 368.028373] ? netdev_pick_tx+0x300/0x300 [ 368.032544] ? packet_cached_dev_get+0x148/0x260 [ 368.037323] ? sock_wmalloc+0x120/0x120 [ 368.041334] ? lock_downgrade+0x880/0x880 [ 368.045591] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.051151] ? skb_copy_datagram_from_iter+0x441/0x660 [ 368.056599] ? kasan_check_read+0x11/0x20 [ 368.060978] dev_queue_xmit+0x18/0x20 [ 368.064782] ? dev_queue_xmit+0x18/0x20 06:42:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) 06:42:35 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0xc}) 06:42:35 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0905664, &(0x7f0000000280)={0x0, 0xc}) [ 368.064796] packet_sendmsg+0x3bb0/0x6440 [ 368.064813] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 368.064826] ? rw_copy_check_uvector+0x2a6/0x330 [ 368.064858] ? packet_notifier+0x840/0x840 [ 368.087589] ? selinux_socket_sendmsg+0x36/0x40 [ 368.092415] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.097978] ? security_socket_sendmsg+0x8d/0xc0 [ 368.102774] ? packet_notifier+0x840/0x840 [ 368.107029] sock_sendmsg+0xd7/0x130 [ 368.110764] ___sys_sendmsg+0x3e2/0x920 [ 368.114761] ? copy_msghdr_from_user+0x430/0x430 06:42:35 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r5, 0x9) read(r5, &(0x7f0000000080)=""/35, 0x23) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 06:42:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) [ 368.119635] ? mark_held_locks+0x100/0x100 [ 368.123901] ? kasan_check_read+0x11/0x20 [ 368.128077] ? __might_fault+0x12b/0x1e0 [ 368.132250] ? find_held_lock+0x35/0x130 [ 368.136335] ? __might_fault+0x12b/0x1e0 [ 368.140437] __sys_sendmmsg+0x1bf/0x4e0 [ 368.144521] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 368.149386] ? kasan_check_write+0x14/0x20 [ 368.153646] ? __sb_end_write+0xd9/0x110 [ 368.157727] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 368.163393] ? fput+0x128/0x1a0 [ 368.166689] ? ksys_write+0x1f1/0x2d0 [ 368.170525] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 368.175498] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 368.175514] ? do_syscall_64+0x26/0x620 [ 368.175529] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 368.175544] ? do_syscall_64+0x26/0x620 [ 368.184368] __x64_sys_sendmmsg+0x9d/0x100 [ 368.184387] do_syscall_64+0xfd/0x620 [ 368.184405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 368.184417] RIP: 0033:0x459a59 [ 368.184430] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 368.184438] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 368.184456] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 368.229709] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 368.229718] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 368.229726] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 368.229734] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:35 executing program 4 (fault-call:6 fault-nth:63): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:35 executing program 5: syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0905664, &(0x7f0000000280)={0x0, 0xc}) 06:42:35 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x3, 0xc}) 06:42:35 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r4, 0x9) read(r4, &(0x7f0000000080)=""/35, 0x23) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) 06:42:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="02000003", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:35 executing program 5: syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0905664, &(0x7f0000000280)={0x0, 0xc}) 06:42:35 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000140)={0x8691a2d5568f005d, 0x0, 0x3, {0xc8b, 0x4eedd89a, 0x4, 0x1ff}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$smack_current(r7, &(0x7f00000002c0)='/dev/v4l-subdev#\x00', 0x11) ioctl$VIDIOC_G_JPEGCOMP(r5, 0x808c563d, &(0x7f0000000180)) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000040)={0x3bcb572cc1b8e898, 0x102, "ed8eb04caad34d0f7c9892fe2e297dff1fa13f98ade111e19bf6a29136a6dbb7", 0x6, 0x0, 0x7, 0x3e, 0x0, 0x7, 0xfffff801, 0x7fffffff, [0x9, 0xa0000000, 0x7fff]}) 06:42:35 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r4, 0x9) read(r4, &(0x7f0000000080)=""/35, 0x23) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 368.672520] FAULT_INJECTION: forcing a failure. [ 368.672520] name failslab, interval 1, probability 0, space 0, times 0 06:42:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getpeername$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000040)=0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) [ 368.738739] CPU: 0 PID: 30554 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 368.745732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.755108] Call Trace: [ 368.757856] dump_stack+0x172/0x1f0 [ 368.761513] should_fail.cold+0xa/0x1b [ 368.765430] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 368.770553] ? lock_downgrade+0x880/0x880 [ 368.774899] __should_failslab+0x121/0x190 [ 368.779267] should_failslab+0x9/0x14 [ 368.783177] kmem_cache_alloc_node+0x26c/0x710 06:42:35 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4a4a80, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000080)={{0xa}, 0x40, 0x9, 0x8, 0x5, &(0x7f0000000040)="249c15554b1af3fb"}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) [ 368.787778] ? __lock_acquire+0x6ee/0x49c0 [ 368.792123] ? __dev_queue_xmit+0x1757/0x2fe0 [ 368.796715] ? find_held_lock+0x35/0x130 [ 368.800802] __alloc_skb+0xd5/0x5f0 [ 368.804450] ? skb_scrub_packet+0x490/0x490 [ 368.808960] ? mark_held_locks+0x100/0x100 [ 368.813213] ? trace_hardirqs_on+0x67/0x220 [ 368.817561] alloc_skb_with_frags+0x93/0x590 [ 368.821987] ? mark_held_locks+0x100/0x100 [ 368.826251] ? avc_has_perm+0x379/0x610 [ 368.830248] ? find_held_lock+0x35/0x130 [ 368.834331] sock_alloc_send_pskb+0x72d/0x8a0 06:42:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) [ 368.838855] ? packet_cached_dev_get+0x148/0x260 [ 368.843636] ? sock_wmalloc+0x120/0x120 [ 368.847634] ? lock_downgrade+0x880/0x880 [ 368.851806] ? kasan_check_read+0x11/0x20 [ 368.855981] packet_sendmsg+0x1a16/0x6440 [ 368.860152] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 368.865716] ? rw_copy_check_uvector+0x2a6/0x330 [ 368.870501] ? sock_has_perm+0x209/0x2a0 [ 368.874722] ? packet_notifier+0x840/0x840 [ 368.878986] ? selinux_socket_sendmsg+0x36/0x40 [ 368.883673] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.889231] ? security_socket_sendmsg+0x8d/0xc0 [ 368.894008] ? packet_notifier+0x840/0x840 [ 368.898268] sock_sendmsg+0xd7/0x130 [ 368.901997] ___sys_sendmsg+0x3e2/0x920 [ 368.905987] ? copy_msghdr_from_user+0x430/0x430 [ 368.910768] ? mark_held_locks+0x100/0x100 [ 368.915026] ? kasan_check_read+0x11/0x20 [ 368.919204] ? __might_fault+0x12b/0x1e0 [ 368.923376] ? find_held_lock+0x35/0x130 [ 368.927463] ? __might_fault+0x12b/0x1e0 [ 368.931564] __sys_sendmmsg+0x1bf/0x4e0 [ 368.935559] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 368.935580] ? kasan_check_write+0x14/0x20 [ 368.935603] ? __sb_end_write+0xd9/0x110 [ 368.944165] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 368.953741] ? fput+0x128/0x1a0 [ 368.953756] ? ksys_write+0x1f1/0x2d0 [ 368.953775] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 368.953789] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 368.953802] ? do_syscall_64+0x26/0x620 [ 368.953815] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 368.953831] ? do_syscall_64+0x26/0x620 [ 368.970641] __x64_sys_sendmmsg+0x9d/0x100 [ 368.970666] do_syscall_64+0xfd/0x620 [ 368.992144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 368.997469] RIP: 0033:0x459a59 [ 369.000669] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 369.019630] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 369.019643] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 369.019651] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 369.019658] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 369.019665] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 369.019673] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:36 executing program 4 (fault-call:6 fault-nth:64): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:36 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x9089, 0x84000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) recvfrom$ax25(r0, &(0x7f0000000040)=""/89, 0x59, 0x20, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null]}, 0x48) 06:42:36 executing program 5: syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0905664, &(0x7f0000000280)={0x0, 0xc}) 06:42:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$netrom_NETROM_T2(r8, 0x103, 0x2, &(0x7f0000000000)=0x8, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x98, r9, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd10b}]}, @TIPC_NLA_NET={0x0, 0x7, [@TIPC_NLA_NET_ID={0x0, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID={0xfee2, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID={0x0, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0x0, 0x4, 0x9f10}, @TIPC_NLA_NET_ID={0x0, 0x1, 0x800}, @TIPC_NLA_NET_ADDR={0x0, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x50}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x800) fsetxattr$security_smack_transmute(r7, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) 06:42:36 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r3, 0x9) read(r3, &(0x7f0000000080)=""/35, 0x23) 06:42:36 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0905664, 0x0) 06:42:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) [ 369.241143] FAULT_INJECTION: forcing a failure. [ 369.241143] name failslab, interval 1, probability 0, space 0, times 0 06:42:36 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f00000001c0)=0xc6) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000180)={0x0, 0x20, 0x1, &(0x7f0000000140)=0x8}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r7, 0xf01, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r7, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 06:42:36 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) read(r3, &(0x7f0000000080)=""/35, 0x23) [ 369.322462] CPU: 0 PID: 30887 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 369.329628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.339212] Call Trace: [ 369.341831] dump_stack+0x172/0x1f0 [ 369.345494] should_fail.cold+0xa/0x1b [ 369.349640] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 369.354969] ? lock_downgrade+0x880/0x880 [ 369.359263] __should_failslab+0x121/0x190 [ 369.363609] should_failslab+0x9/0x14 [ 369.367429] kmem_cache_alloc_node_trace+0x274/0x720 06:42:36 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r2) read(0xffffffffffffffff, &(0x7f0000000080)=""/35, 0x23) [ 369.372564] ? __alloc_skb+0xd5/0x5f0 [ 369.376393] __kmalloc_node_track_caller+0x3d/0x80 [ 369.381340] __kmalloc_reserve.isra.0+0x40/0xf0 [ 369.386028] __alloc_skb+0x10b/0x5f0 [ 369.389984] ? skb_scrub_packet+0x490/0x490 [ 369.394462] ? kasan_check_read+0x11/0x20 [ 369.396986] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 369.398634] alloc_skb_with_frags+0x93/0x590 [ 369.398649] ? rcu_read_unlock_special+0x679/0xea0 [ 369.398671] sock_alloc_send_pskb+0x72d/0x8a0 [ 369.419877] ? packet_cached_dev_get+0x148/0x260 [ 369.424658] ? sock_wmalloc+0x120/0x120 [ 369.428657] ? lock_downgrade+0x880/0x880 [ 369.432993] ? calibrate_delay.cold+0x42f/0x4a7 [ 369.437689] packet_sendmsg+0x1a16/0x6440 [ 369.441856] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 369.447409] ? rw_copy_check_uvector+0x2a6/0x330 [ 369.452195] ? sock_has_perm+0x209/0x2a0 [ 369.456447] ? packet_notifier+0x840/0x840 [ 369.460818] ? selinux_socket_sendmsg+0x36/0x40 [ 369.465644] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.465659] ? security_socket_sendmsg+0x8d/0xc0 [ 369.465676] ? packet_notifier+0x840/0x840 [ 369.476069] sock_sendmsg+0xd7/0x130 [ 369.476084] ___sys_sendmsg+0x3e2/0x920 [ 369.487999] ? copy_msghdr_from_user+0x430/0x430 [ 369.492767] ? mark_held_locks+0x100/0x100 [ 369.492782] ? kasan_check_read+0x11/0x20 [ 369.492801] ? __might_fault+0x12b/0x1e0 [ 369.492814] ? find_held_lock+0x35/0x130 [ 369.492830] ? __might_fault+0x12b/0x1e0 [ 369.501343] __sys_sendmmsg+0x1bf/0x4e0 [ 369.513723] ? __ia32_sys_sendmsg+0xb0/0xb0 06:42:36 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r2) read(0xffffffffffffffff, &(0x7f0000000080)=""/35, 0x23) 06:42:36 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400000, 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) [ 369.513741] ? kasan_check_write+0x14/0x20 [ 369.522028] ? __sb_end_write+0xd9/0x110 [ 369.530313] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 369.535863] ? fput+0x128/0x1a0 [ 369.539157] ? ksys_write+0x1f1/0x2d0 [ 369.542993] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 369.547769] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 369.552542] ? do_syscall_64+0x26/0x620 [ 369.556653] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 369.556666] ? do_syscall_64+0x26/0x620 [ 369.556685] __x64_sys_sendmmsg+0x9d/0x100 [ 369.570250] do_syscall_64+0xfd/0x620 [ 369.574068] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 369.579266] RIP: 0033:0x459a59 [ 369.582472] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 369.601372] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 369.601386] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 369.601395] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 369.601402] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 369.601410] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 369.601417] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:36 executing program 4 (fault-call:6 fault-nth:65): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:36 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0905664, 0x0) 06:42:36 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0xf0, 0x208, 0x208, 0x208, 0xf0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000180), {[{{@ipv6={@rand_addr="1b38f2129e91ff2bdab19ccdef40c851", @empty, [0x0, 0xff, 0xff0001fe, 0xffffffff], [0x0, 0xff000000, 0xffffff00, 0xff0000ff], 'bridge0\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x62, 0x7f, 0x1, 0x40}, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@ipv4={[], [], @loopback}, @remote, [0xff, 0xffffff00, 0xffffffff], [0xff, 0xffffff, 0xffffff00, 0xfffffe01], 'team0\x00', 'ifb0\x00', {}, {0xff}, 0x31, 0x3, 0x5, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$inet6_tcp_int(r8, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, &(0x7f00000000c0)=0x3, &(0x7f0000000100)=0x4) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000000)=0x1000) setitimer(0x0, &(0x7f00000001c0)={{0x0, 0x7530}}, &(0x7f0000000200)) r11 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x241) ioctl$EVIOCSREP(r12, 0x40084503, &(0x7f0000000080)=[0x2, 0x2]) ioctl$NBD_CLEAR_QUE(r11, 0xab05) [ 369.732750] net_ratelimit: 20 callbacks suppressed [ 369.732756] protocol 88fb is buggy, dev hsr_slave_0 [ 369.743080] protocol 88fb is buggy, dev hsr_slave_1 06:42:36 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0905664, 0x0) 06:42:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:36 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r2) read(0xffffffffffffffff, &(0x7f0000000080)=""/35, 0x23) [ 369.833548] FAULT_INJECTION: forcing a failure. [ 369.833548] name failslab, interval 1, probability 0, space 0, times 0 [ 369.845160] CPU: 0 PID: 31118 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 369.852097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.861459] Call Trace: [ 369.864203] dump_stack+0x172/0x1f0 [ 369.867985] should_fail.cold+0xa/0x1b [ 369.871901] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 369.877026] ? check_preemption_disabled+0x48/0x290 [ 369.882068] __should_failslab+0x121/0x190 [ 369.886480] should_failslab+0x9/0x14 [ 369.890294] kmem_cache_alloc+0x47/0x700 [ 369.897243] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.902952] ? check_preemption_disabled+0x48/0x290 [ 369.907979] ? lock_acquire+0x16f/0x3f0 [ 369.911985] skb_clone+0x156/0x3e0 [ 369.915542] dev_queue_xmit_nit+0x309/0xa10 [ 369.919878] ? validate_xmit_xfrm+0x1f7/0xda0 [ 369.924507] dev_hard_start_xmit+0xa7/0x980 [ 369.928851] __dev_queue_xmit+0x2704/0x2fe0 06:42:37 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000000)=0x7, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000040)={0x8001002, 0xc}) [ 369.933188] ? refcount_add_checked+0x33/0x70 [ 369.937802] ? netdev_pick_tx+0x300/0x300 [ 369.942052] ? packet_cached_dev_get+0x148/0x260 [ 369.946829] ? sock_wmalloc+0x120/0x120 [ 369.950820] ? lock_downgrade+0x880/0x880 [ 369.954983] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.960539] ? skb_copy_datagram_from_iter+0x441/0x660 [ 369.965835] ? kasan_check_read+0x11/0x20 [ 369.970020] dev_queue_xmit+0x18/0x20 [ 369.973965] ? dev_queue_xmit+0x18/0x20 [ 369.978062] packet_sendmsg+0x3bb0/0x6440 06:42:37 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0905664, &(0x7f0000000280)) [ 369.982344] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 369.987893] ? rw_copy_check_uvector+0x2a6/0x330 [ 369.992797] ? packet_notifier+0x840/0x840 [ 369.997058] ? selinux_socket_sendmsg+0x36/0x40 [ 370.001861] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.007504] ? security_socket_sendmsg+0x8d/0xc0 [ 370.012284] ? packet_notifier+0x840/0x840 [ 370.016555] sock_sendmsg+0xd7/0x130 [ 370.020290] ___sys_sendmsg+0x3e2/0x920 [ 370.030451] ? copy_msghdr_from_user+0x430/0x430 [ 370.035262] ? mark_held_locks+0x100/0x100 [ 370.039521] ? kasan_check_read+0x11/0x20 [ 370.043706] ? __might_fault+0x12b/0x1e0 [ 370.047787] ? find_held_lock+0x35/0x130 [ 370.051870] ? __might_fault+0x12b/0x1e0 [ 370.056219] __sys_sendmmsg+0x1bf/0x4e0 [ 370.060223] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 370.064581] ? kasan_check_write+0x14/0x20 [ 370.068846] ? __sb_end_write+0xd9/0x110 [ 370.073068] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 370.078621] ? fput+0x128/0x1a0 [ 370.082059] ? ksys_write+0x1f1/0x2d0 [ 370.085885] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 370.090665] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 370.095445] ? do_syscall_64+0x26/0x620 [ 370.099437] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.104820] ? do_syscall_64+0x26/0x620 [ 370.108915] __x64_sys_sendmmsg+0x9d/0x100 [ 370.113265] do_syscall_64+0xfd/0x620 [ 370.117273] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.122480] RIP: 0033:0x459a59 [ 370.125690] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 370.132783] protocol 88fb is buggy, dev hsr_slave_0 [ 370.144866] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 370.144882] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 370.144890] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 370.144899] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 370.144908] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 370.144917] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 [ 370.150294] protocol 88fb is buggy, dev hsr_slave_1 [ 370.195056] protocol 88fb is buggy, dev hsr_slave_0 [ 370.205029] protocol 88fb is buggy, dev hsr_slave_1 06:42:37 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) read(r2, &(0x7f0000000080)=""/35, 0x23) 06:42:37 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0905664, &(0x7f0000000280)) 06:42:37 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x400000000, 0x2000) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f0000000040)={0x0, 0x2, 0x1, [], &(0x7f0000000000)=0xf4}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:37 executing program 4 (fault-call:6 fault-nth:66): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:37 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) read(r2, &(0x7f0000000080)=""/35, 0x23) 06:42:37 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0905664, &(0x7f0000000280)) 06:42:37 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x801, 0xc0002) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x200) ioctl$SIOCRSSCAUSE(r4, 0x89e1, &(0x7f0000000000)=0x2) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000180)={0x2, {0x7fffffff, 0x2, 0x5, 0x7}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCLINUX5(r4, 0x541c, &(0x7f0000000100)={0x5, 0x7, 0x7fffffff, 0xf220}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x1}, 0x3c) fcntl$getown(r5, 0x9) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000340)={'filter\x00', 0x0, 0x4, 0x65, [], 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f00000002c0)=""/101}, &(0x7f0000000200)=0x78) bind$unix(r6, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) 06:42:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) [ 370.661375] FAULT_INJECTION: forcing a failure. [ 370.661375] name failslab, interval 1, probability 0, space 0, times 0 [ 370.708634] CPU: 1 PID: 31154 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 370.715618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.725124] Call Trace: [ 370.727733] dump_stack+0x172/0x1f0 [ 370.731393] should_fail.cold+0xa/0x1b [ 370.735305] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 370.740422] ? lock_downgrade+0x880/0x880 [ 370.744591] __should_failslab+0x121/0x190 [ 370.748841] should_failslab+0x9/0x14 [ 370.752655] kmem_cache_alloc_node+0x26c/0x710 [ 370.757255] ? __lock_acquire+0x6ee/0x49c0 [ 370.761514] ? __dev_queue_xmit+0x1757/0x2fe0 [ 370.766030] ? find_held_lock+0x35/0x130 [ 370.770361] __alloc_skb+0xd5/0x5f0 [ 370.773998] ? skb_scrub_packet+0x490/0x490 [ 370.774012] ? mark_held_locks+0x100/0x100 [ 370.774026] ? trace_hardirqs_on+0x67/0x220 [ 370.774043] alloc_skb_with_frags+0x93/0x590 [ 370.791312] ? mark_held_locks+0x100/0x100 [ 370.795561] ? avc_has_perm+0x379/0x610 [ 370.799649] ? find_held_lock+0x35/0x130 [ 370.803731] sock_alloc_send_pskb+0x72d/0x8a0 [ 370.808246] ? packet_cached_dev_get+0x148/0x260 [ 370.813023] ? sock_wmalloc+0x120/0x120 [ 370.817009] ? lock_downgrade+0x880/0x880 [ 370.817025] ? kasan_check_read+0x11/0x20 [ 370.817045] packet_sendmsg+0x1a16/0x6440 [ 370.829598] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 370.829616] ? rw_copy_check_uvector+0x2a6/0x330 [ 370.840046] ? sock_has_perm+0x209/0x2a0 [ 370.844134] ? packet_notifier+0x840/0x840 [ 370.848391] ? selinux_socket_sendmsg+0x36/0x40 [ 370.853064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.853081] ? security_socket_sendmsg+0x8d/0xc0 [ 370.853095] ? packet_notifier+0x840/0x840 [ 370.853114] sock_sendmsg+0xd7/0x130 [ 370.863402] ___sys_sendmsg+0x3e2/0x920 [ 370.863418] ? copy_msghdr_from_user+0x430/0x430 [ 370.863439] ? mark_held_locks+0x100/0x100 [ 370.863456] ? kasan_check_read+0x11/0x20 [ 370.871663] ? __might_fault+0x12b/0x1e0 [ 370.871681] ? find_held_lock+0x35/0x130 [ 370.880392] ? __might_fault+0x12b/0x1e0 [ 370.880427] __sys_sendmmsg+0x1bf/0x4e0 [ 370.888791] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 370.888807] ? kasan_check_write+0x14/0x20 [ 370.888830] ? __sb_end_write+0xd9/0x110 [ 370.896931] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 370.896944] ? fput+0x128/0x1a0 [ 370.896961] ? ksys_write+0x1f1/0x2d0 [ 370.904987] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 370.905002] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 370.905016] ? do_syscall_64+0x26/0x620 [ 370.905034] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.913566] ? do_syscall_64+0x26/0x620 [ 370.913587] __x64_sys_sendmmsg+0x9d/0x100 06:42:37 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) read(r0, &(0x7f0000000080)=""/35, 0x23) [ 370.913604] do_syscall_64+0xfd/0x620 [ 370.913623] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.923204] RIP: 0033:0x459a59 [ 370.923219] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 370.923227] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 370.923242] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 06:42:38 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 06:42:38 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) read(r0, &(0x7f0000000080)=""/35, 0x23) [ 370.923250] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 370.923262] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 370.930320] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 370.930329] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 [ 370.930551] protocol 88fb is buggy, dev hsr_slave_0 [ 370.953613] protocol 88fb is buggy, dev hsr_slave_1 [ 370.961647] protocol 88fb is buggy, dev hsr_slave_0 [ 370.988995] protocol 88fb is buggy, dev hsr_slave_1 06:42:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:38 executing program 4 (fault-call:6 fault-nth:67): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:38 executing program 3: syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400) read$rfkill(r1, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0xc0305602, &(0x7f0000000040)={0x8001008, 0xc, 0x1}) 06:42:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000024001505000000408003000000000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000800027a3152b644c891c296fa9c8dace6992a0000000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000002500070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000280008001c000100000000000000000000000000000000000000000002000000080002000000000032d3fc0c9300a6a5b790ae0d8dbf095ba0496f34165c2ed11dbf61345ffd2f93f7937307f0f7e236d60f22d6e3b341fc8722137427e5d9fa6d2f765fe91fbcdd9e3eb3457075b75184ff51119cdf900fd6ce1363e76374b969e0e0a83e61a81ccff2f5bc36e592ce7ce23e64579eb3f60b1578517fe0f7b06adb5f1a55c2dcf3505774814357"], 0x4c}}, 0x0) 06:42:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) read(r0, &(0x7f0000000080)=""/35, 0x23) [ 371.300402] FAULT_INJECTION: forcing a failure. [ 371.300402] name failslab, interval 1, probability 0, space 0, times 0 [ 371.337476] CPU: 1 PID: 31183 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 371.344450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.344459] Call Trace: [ 371.356419] dump_stack+0x172/0x1f0 [ 371.360210] should_fail.cold+0xa/0x1b [ 371.364112] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 371.369222] ? lock_downgrade+0x880/0x880 [ 371.373369] __should_failslab+0x121/0x190 [ 371.373383] should_failslab+0x9/0x14 [ 371.373398] kmem_cache_alloc_node_trace+0x274/0x720 [ 371.373416] ? __alloc_skb+0xd5/0x5f0 [ 371.381425] __kmalloc_node_track_caller+0x3d/0x80 [ 371.390297] __kmalloc_reserve.isra.0+0x40/0xf0 [ 371.390324] __alloc_skb+0x10b/0x5f0 [ 371.390341] ? skb_scrub_packet+0x490/0x490 [ 371.399900] ? mark_held_locks+0x100/0x100 [ 371.399915] ? trace_hardirqs_on+0x67/0x220 [ 371.399934] alloc_skb_with_frags+0x93/0x590 [ 371.407930] ? mark_held_locks+0x100/0x100 [ 371.407943] ? avc_has_perm+0x379/0x610 [ 371.407958] ? find_held_lock+0x35/0x130 [ 371.416487] sock_alloc_send_pskb+0x72d/0x8a0 [ 371.416508] ? packet_cached_dev_get+0x148/0x260 [ 371.416526] ? sock_wmalloc+0x120/0x120 [ 371.425121] ? lock_downgrade+0x880/0x880 [ 371.425138] ? kasan_check_read+0x11/0x20 [ 371.425162] packet_sendmsg+0x1a16/0x6440 [ 371.433152] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 371.433164] ? rw_copy_check_uvector+0x2a6/0x330 [ 371.433187] ? sock_has_perm+0x209/0x2a0 [ 371.442391] ? packet_notifier+0x840/0x840 [ 371.450475] ? selinux_socket_sendmsg+0x36/0x40 [ 371.450487] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 371.450503] ? security_socket_sendmsg+0x8d/0xc0 [ 371.458749] ? packet_notifier+0x840/0x840 [ 371.458768] sock_sendmsg+0xd7/0x130 06:42:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/35, 0x23) 06:42:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) [ 371.458782] ___sys_sendmsg+0x3e2/0x920 [ 371.469042] ? copy_msghdr_from_user+0x430/0x430 [ 371.469063] ? mark_held_locks+0x100/0x100 [ 371.469082] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 371.477344] ? __might_fault+0x12b/0x1e0 [ 371.477359] ? find_held_lock+0x35/0x130 [ 371.477375] ? __might_fault+0x12b/0x1e0 [ 371.487561] __sys_sendmmsg+0x1bf/0x4e0 [ 371.487579] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 371.487596] ? kasan_check_write+0x14/0x20 [ 371.496653] ? __sb_end_write+0xd9/0x110 [ 371.496671] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 371.504316] ? fput+0x128/0x1a0 [ 371.504331] ? ksys_write+0x1f1/0x2d0 [ 371.504350] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 371.504366] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 371.513316] ? do_syscall_64+0x26/0x620 [ 371.513331] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.513344] ? do_syscall_64+0x26/0x620 [ 371.513363] __x64_sys_sendmmsg+0x9d/0x100 [ 371.522149] do_syscall_64+0xfd/0x620 [ 371.522165] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.522177] RIP: 0033:0x459a59 [ 371.530257] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 371.530265] RSP: 002b:00007fc5a0909c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 371.530284] RAX: ffffffffffffffda RBX: 00007fc5a0909c90 RCX: 0000000000459a59 [ 371.538531] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 371.538539] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 06:42:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/35, 0x23) 06:42:38 executing program 4 (fault-call:6 fault-nth:68): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 371.538548] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a090a6d4 [ 371.538556] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/35, 0x23) [ 371.773288] FAULT_INJECTION: forcing a failure. [ 371.773288] name failslab, interval 1, probability 0, space 0, times 0 [ 371.784584] CPU: 0 PID: 31284 Comm: syz-executor.4 Not tainted 4.19.80 #0 [ 371.791512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.800867] Call Trace: [ 371.803469] dump_stack+0x172/0x1f0 [ 371.807116] should_fail.cold+0xa/0x1b [ 371.811014] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 371.816143] ? check_preemption_disabled+0x48/0x290 [ 371.821178] __should_failslab+0x121/0x190 [ 371.825437] should_failslab+0x9/0x14 [ 371.829245] kmem_cache_alloc+0x47/0x700 [ 371.833347] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 371.838895] ? check_preemption_disabled+0x48/0x290 [ 371.843934] ? lock_acquire+0x16f/0x3f0 [ 371.847919] skb_clone+0x156/0x3e0 [ 371.851471] dev_queue_xmit_nit+0x309/0xa10 [ 371.855799] ? validate_xmit_xfrm+0x1f7/0xda0 [ 371.860305] dev_hard_start_xmit+0xa7/0x980 [ 371.864647] __dev_queue_xmit+0x2704/0x2fe0 [ 371.868971] ? refcount_add_checked+0x33/0x70 [ 371.873660] ? netdev_pick_tx+0x300/0x300 [ 371.877927] ? packet_cached_dev_get+0x148/0x260 [ 371.882692] ? sock_wmalloc+0x120/0x120 [ 371.886691] ? lock_downgrade+0x880/0x880 [ 371.890969] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 371.896512] ? skb_copy_datagram_from_iter+0x441/0x660 [ 371.901798] ? kasan_check_read+0x11/0x20 [ 371.905964] dev_queue_xmit+0x18/0x20 [ 371.909764] ? dev_queue_xmit+0x18/0x20 [ 371.913743] packet_sendmsg+0x3bb0/0x6440 [ 371.917983] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 371.923526] ? rw_copy_check_uvector+0x2a6/0x330 [ 371.928309] ? packet_notifier+0x840/0x840 [ 371.932556] ? selinux_socket_sendmsg+0x36/0x40 [ 371.937229] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 371.942779] ? security_socket_sendmsg+0x8d/0xc0 [ 371.947539] ? packet_notifier+0x840/0x840 [ 371.951770] sock_sendmsg+0xd7/0x130 [ 371.955471] ___sys_sendmsg+0x3e2/0x920 [ 371.959436] ? copy_msghdr_from_user+0x430/0x430 [ 371.964194] ? mark_held_locks+0x100/0x100 [ 371.968413] ? kasan_check_read+0x11/0x20 [ 371.972548] ? __might_fault+0x12b/0x1e0 [ 371.976593] ? find_held_lock+0x35/0x130 [ 371.980641] ? __might_fault+0x12b/0x1e0 [ 371.984714] __sys_sendmmsg+0x1bf/0x4e0 [ 371.988677] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 371.992980] ? kasan_check_write+0x14/0x20 [ 371.997221] ? __sb_end_write+0xd9/0x110 [ 372.001273] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 372.006792] ? fput+0x128/0x1a0 [ 372.010063] ? ksys_write+0x1f1/0x2d0 [ 372.013851] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 372.018597] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 372.024122] ? do_syscall_64+0x26/0x620 [ 372.028083] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 372.033430] ? do_syscall_64+0x26/0x620 [ 372.037391] __x64_sys_sendmmsg+0x9d/0x100 [ 372.041619] do_syscall_64+0xfd/0x620 [ 372.045406] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 372.050588] RIP: 0033:0x459a59 [ 372.053768] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 372.072666] RSP: 002b:00007fc5a08e8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 372.080454] RAX: ffffffffffffffda RBX: 00007fc5a08e8c90 RCX: 0000000000459a59 [ 372.087794] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 372.095047] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 372.102299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5a08e96d4 [ 372.109564] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000007 06:42:39 executing program 3: syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0305602, &(0x7f0000000000)={0x0, 0xc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x4000, 0x2000}) 06:42:39 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001440)=ANY=[@ANYBLOB="200000006800130800000000a90300000200000000000000080005000700000000000001f36b6744254ffe2e4173a157dcd8d2476d04795b93bfc6afb407dcb7d4380144abbbb4bc9481b435845656e6f859b78cc7d5ece9a6f60d9485b06f1ffb80abb4b5010000edd147fe757a3cc10ed9abb12edfa687bd902808a5605d1b73d76ea549e2012287087c9acc01ec20b742f700000000000000f6dc99132f0800007f302b0130919f3f4889eead5a8bb1be110c149cd634197c9ff810d6f56c338fe8f6f900f8a14c6f015aa5a0e80a088ea01a35d1379de0190f43ea540e", @ANYRES32=0x0], 0x20}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x3, &(0x7f0000000100)}], 0x492492492492805, 0x0) 06:42:39 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) read(r0, &(0x7f0000000080)=""/35, 0x23) 06:42:39 executing program 3: syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) setuid(0xee00) [ 372.323375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=104 sclass=netlink_route_socket pig=31321 comm=syz-executor.5 06:42:39 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) read(r0, &(0x7f0000000080)=""/35, 0x23) 06:42:39 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000014c0)={0x0, 0x5}) 06:42:39 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000040)=0x9) 06:42:39 executing program 4 (fault-call:6 fault-nth:69): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:39 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) read(r0, &(0x7f0000000080)=""/35, 0x23) 06:42:39 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) gettid() ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 06:42:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x0, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) read(r0, &(0x7f0000000080)=""/35, 0x23) 06:42:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 06:42:39 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x6, 0x8000) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x4000) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01c0cf8e0f0000000000000000080000000c0001000800010000"], 0x20}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00002cbd7000fcdbdf250f00000008000400090000000800043599a1f5fd0005000000ccaa776876bb7513e453802dc12c6dff6e9ad17babe99ff52db14b6e911c45bcacd2560fadf5e94c70953117f90f0cf18f3c24380975a3845855ac9312eeaa8144a2efbff490eaa5e0bf0f97dd502d5cd724b8919f620e6222b1dc37dbd45004283ce44a010e74f522bc041ecc4e00601183958a8e0f8792c58392fa65e3432c7119120758a6f7808828faf578494796a2811a55ffae7cb75bed2cd289baa66019fae199a288f77687"], 0x24}, 0x1, 0x0, 0x0, 0x10040}, 0x40c4070) 06:42:39 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:40 executing program 5: clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1bcd0f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000006c00)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {}], 0x3}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x16d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 06:42:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x0, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) read(r0, &(0x7f0000000080)=""/35, 0x23) 06:42:40 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x0, @rand_addr="55c823f1ebbb28477d60a7af0cc5846b", 0x101}}, 0x0, 0x800, 0x0, "0fd7fcba233fc2550696cb3b635a543a3220742a357f9cbca98a239bdb28899e3854e8fbbfcd0f5541038bde74584797454e5a8156f8672eb48f5e75ec695c0c324b709736cb0a25c32057a5d094fff7"}, 0xd8) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x0, 0x6, 0x2, 0x7, 0x8}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3}, 0x8) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x2, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 06:42:40 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:42:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x0, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) read(r0, &(0x7f0000000080)=""/35, 0x23) 06:42:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 06:42:40 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90aa, 0x3be48fe758718db8) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040)=0x1, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) r4 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x70, 0x7, 0xfd, 0x5, 0x8, 0x0, 0x80000001, 0x2000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x8000, 0xa0000000000000, 0x0, 0x6, 0x1, 0x9, 0x8f2c}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x3e) io_setup(0x4, &(0x7f00000002c0)=0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-control\x00', 0x80, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r8, 0x9) io_submit(r5, 0x7, &(0x7f0000000880)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x6, r4, &(0x7f0000000300)="4460a83fca5850dcbfc8c4718fa8e7440d5f2b92b54aa73dedc0ffe3cf41512aaf795a", 0x23, 0x26f9, 0x0, 0x4}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x4, r3, &(0x7f0000000380)="10cca97bcdf6f70477205ab21353cdb5a5fef410bf26b79f59eb1d701fab98e51193b347c8cafa21b916dc18dc9f150aabbc23a147d5107ff7c9313ab4ef17d2b15caca7f44c07", 0x47, 0xffffffffffffff7f, 0x0, 0x0, r6}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x100, r7, &(0x7f0000000480)="dd46eb7ab1a519f7aa9487db3843f43a9f22a7893bbeb1ece8acc9ab50c7facb73510b3e55f295555c92bdcfd56383ee5c307ac89b633bb0ab36df373553422a14302ee84e7f18bb16cc8e3b6eddce7a9f288a1074b61234f97ecff572e1277f5d2268", 0x63, 0x400, 0x0, 0x0, r3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f0000000540)="d5951c42eb8ea7fbdf9868e17342574c81415b2017bd35d2a8b8051b8ad54b97e5110756c1a765dd9db189df01d66167ef1c90a488c24802c9c720f771c06f8f35180da9c3c1fccf42d5da8791bc964138c16b711e0114deb347d5cedfbde772dc4b6ebcb6067da9461c19", 0x6b, 0x65e6a14d}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x9, r1, &(0x7f0000000600)="b1a7a9440de7d90aab", 0x9, 0x2, 0x0, 0x2}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x6, 0x30, r2, &(0x7f0000000680)="8234ea1ab0281de170d150bfebffcbe78acce6dd2082164afe7b3732e4ae9ac884f7f5601482a7fb74dbeb4a75bf200a690d3d91dc8bd3d7d7f9f94d04b39e7fe129d387730a002aa8b976e44a9d33f96b2996001c422d9db3ab223d3322d758969400112de0d1aa58f359a43a139089ecb36367e799438814c07cb13bb0bf437d962701973ccd2da0d5c0b245602bd723e8761c5bfb40", 0x97, 0x7fffffff, 0x0, 0x1, r3}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x6, 0x5801, r8, &(0x7f0000000780)="e9bb8597aab627cc97e978be0469ae2cf3065bac45ad2665d69f4e6008091da41d8ceb8573f75409e07222afa731130112e596e091512394d6db3ec3ef988a1a6b2575a2d9fc37e92771fac364113532ce75685e614b6091b6bccffc22b20d0f4b8b38ce08ba196dccdca45abcf3e93f758d60a2ae500c66bfe0edcc879e33a5c305a31c83ade11a4912a380c29f9dddbbeb7d9058a27cad45f526", 0x9b, 0x5, 0x0, 0x2}]) bind$x25(r3, &(0x7f00000000c0)={0x9, @remote={[], 0x0}}, 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r10 = dup(r9) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$kcm_KCM_RECV_DISABLE(r10, 0x119, 0x1, &(0x7f0000000000)=0x3, 0x4) 06:42:40 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x0, @rand_addr="55c823f1ebbb28477d60a7af0cc5846b", 0x101}}, 0x0, 0x800, 0x0, "0fd7fcba233fc2550696cb3b635a543a3220742a357f9cbca98a239bdb28899e3854e8fbbfcd0f5541038bde74584797454e5a8156f8672eb48f5e75ec695c0c324b709736cb0a25c32057a5d094fff7"}, 0xd8) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x0, 0x6, 0x2, 0x7, 0x8}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3}, 0x8) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x2, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 06:42:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x0, 0x80000000000004, 0x0, 0x0}, 0x2c) read(r0, &(0x7f0000000080)=""/35, 0x23) 06:42:40 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x0, @rand_addr="55c823f1ebbb28477d60a7af0cc5846b", 0x101}}, 0x0, 0x800, 0x0, "0fd7fcba233fc2550696cb3b635a543a3220742a357f9cbca98a239bdb28899e3854e8fbbfcd0f5541038bde74584797454e5a8156f8672eb48f5e75ec695c0c324b709736cb0a25c32057a5d094fff7"}, 0xd8) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x0, 0x6, 0x2, 0x7, 0x8}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3}, 0x8) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x2, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:40 executing program 3: lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)) r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000340)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x7ff, 0x1, 0x4, 0x10000, {r3, r4/1000+30000}, {0x3, 0x1, 0x80, 0x34, 0x6, 0x5, "2a5cd854"}, 0x3f, 0x4, @fd=r1, 0x4}) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f00000001c0)=0x6) fchmodat(r1, &(0x7f0000000180)='./file0\x00', 0x1e8) 06:42:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x0, 0x80000000000004, 0x0, 0x0}, 0x2c) read(r0, &(0x7f0000000080)=""/35, 0x23) 06:42:40 executing program 3: syz_open_dev$video4linux(&(0x7f0000000240)='?`\xa1\x1d\v\xb6\x00', 0x0, 0x10000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x66a007, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x200000c, 0xe0734e5e8e8c4d8e}) 06:42:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 06:42:40 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x4) 06:42:40 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x0, @rand_addr="55c823f1ebbb28477d60a7af0cc5846b", 0x101}}, 0x0, 0x800, 0x0, "0fd7fcba233fc2550696cb3b635a543a3220742a357f9cbca98a239bdb28899e3854e8fbbfcd0f5541038bde74584797454e5a8156f8672eb48f5e75ec695c0c324b709736cb0a25c32057a5d094fff7"}, 0xd8) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x0, 0x6, 0x2, 0x7, 0x8}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3}, 0x8) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x2, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x0, 0x80000000000004, 0x0, 0x0}, 0x2c) read(r0, &(0x7f0000000080)=""/35, 0x23) 06:42:41 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x10ab, 0x121041) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) 06:42:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 06:42:41 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x0, 0x0, 0x0}, 0x2c) read(r0, &(0x7f0000000080)=""/35, 0x23) 06:42:41 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x0, @rand_addr="55c823f1ebbb28477d60a7af0cc5846b", 0x101}}, 0x0, 0x800, 0x0, "0fd7fcba233fc2550696cb3b635a543a3220742a357f9cbca98a239bdb28899e3854e8fbbfcd0f5541038bde74584797454e5a8156f8672eb48f5e75ec695c0c324b709736cb0a25c32057a5d094fff7"}, 0xd8) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x0, 0x6, 0x2, 0x7, 0x8}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3}, 0x8) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:41 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000000)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:41 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x0, 0x0, 0x0}, 0x2c) read(r0, &(0x7f0000000080)=""/35, 0x23) 06:42:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:42:41 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x200000000007, 0x385402) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0x200000c}) pause() 06:42:41 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x0, @rand_addr="55c823f1ebbb28477d60a7af0cc5846b", 0x101}}, 0x0, 0x800, 0x0, "0fd7fcba233fc2550696cb3b635a543a3220742a357f9cbca98a239bdb28899e3854e8fbbfcd0f5541038bde74584797454e5a8156f8672eb48f5e75ec695c0c324b709736cb0a25c32057a5d094fff7"}, 0xd8) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x0, 0x6, 0x2, 0x7, 0x8}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3}, 0x8) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:41 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0xa) 06:42:41 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x0, 0x0, 0x0}, 0x2c) read(r0, &(0x7f0000000080)=""/35, 0x23) 06:42:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:42:41 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x0, @rand_addr="55c823f1ebbb28477d60a7af0cc5846b", 0x101}}, 0x0, 0x800, 0x0, "0fd7fcba233fc2550696cb3b635a543a3220742a357f9cbca98a239bdb28899e3854e8fbbfcd0f5541038bde74584797454e5a8156f8672eb48f5e75ec695c0c324b709736cb0a25c32057a5d094fff7"}, 0xd8) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x0, 0x6, 0x2, 0x7, 0x8}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3}, 0x8) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x2b6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$CAPI_SET_FLAGS(0xffffffffffffffff, 0x80044324, &(0x7f00000000c0)=0x1) ioctl$TUNGETFILTER(r6, 0x801054db, &(0x7f0000000000)=""/175) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r7 = syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000180)={0xfffffff7, 0x36359c04e8f0e189, 0x9, 0x100, 0x4, 0x4, 0x4}) sendto$inet(r3, &(0x7f00003cef9f)='7', 0xffffff03, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = dup(r8) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r10, &(0x7f0000000200)={0x2b, 0x3, 0x0, {0x0, 0x212e2a79ad131b6d, 0x0, '/dev/dsp#\x00'}}, 0x2b) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r11 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x20080, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r9, 0x10, &(0x7f00000003c0)={&(0x7f0000000380)=""/23, 0x17, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r11, 0x10, &(0x7f0000000440)={&(0x7f0000000280)=""/212, 0xd4, r12}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xffffffffffffff07) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r13}, &(0x7f000034f000)=0x2059b000) 06:42:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) read(0xffffffffffffffff, &(0x7f0000000080)=""/35, 0x23) 06:42:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:42:41 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x0, @rand_addr="55c823f1ebbb28477d60a7af0cc5846b", 0x101}}, 0x0, 0x800, 0x0, "0fd7fcba233fc2550696cb3b635a543a3220742a357f9cbca98a239bdb28899e3854e8fbbfcd0f5541038bde74584797454e5a8156f8672eb48f5e75ec695c0c324b709736cb0a25c32057a5d094fff7"}, 0xd8) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x0, 0x6, 0x2, 0x7, 0x8}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3}, 0x8) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) dup3(r0, r1, 0x0) 06:42:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmctl$IPC_RMID(r4, 0x0) shmctl$SHM_LOCK(r4, 0xb) r5 = getuid() lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r6) setfsgid(r6) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xffffffffffffffad) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) getpeername$inet6(r9, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x0) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000200)=0x0) r11 = gettid() tkill(r11, 0x1c) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000240)={{0x0, r5, r6, r7, r8, 0x20c, 0x1}, 0xe37, 0x3, 0x58, 0x8, r10, r11, 0xfff}) r12 = socket$inet_sctp(0x2, 0x5, 0x84) r13 = dup3(r3, r12, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r15 = dup(r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) ioctl$KDGETMODE(r15, 0x4b3b, &(0x7f00000002c0)) sendto$inet(r13, &(0x7f0000fa3fff)='\t', 0x1, 0x4040021, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r12, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x10, &(0x7f000059aff8)={r16}, &(0x7f000034f000)=0x2059b000) 06:42:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) read(0xffffffffffffffff, &(0x7f0000000080)=""/35, 0x23) [ 375.092755] net_ratelimit: 20 callbacks suppressed [ 375.092764] protocol 88fb is buggy, dev hsr_slave_0 [ 375.102880] protocol 88fb is buggy, dev hsr_slave_1 [ 375.107941] protocol 88fb is buggy, dev hsr_slave_0 [ 375.114591] protocol 88fb is buggy, dev hsr_slave_1 [ 375.119643] protocol 88fb is buggy, dev hsr_slave_0 [ 375.124712] protocol 88fb is buggy, dev hsr_slave_1 06:42:42 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x169000, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1000, 0x4000) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000000c0)={0x0, 0x0, [0x3e8ba824, 0xfffffffffffffffd, 0x33, 0xffffffff]}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000040)={0x8001009, 0x4}) 06:42:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x0, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:42 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x0, @rand_addr="55c823f1ebbb28477d60a7af0cc5846b", 0x101}}, 0x0, 0x800, 0x0, "0fd7fcba233fc2550696cb3b635a543a3220742a357f9cbca98a239bdb28899e3854e8fbbfcd0f5541038bde74584797454e5a8156f8672eb48f5e75ec695c0c324b709736cb0a25c32057a5d094fff7"}, 0xd8) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x0, 0x6, 0x2, 0x7, 0x8}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3}, 0x8) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) dup3(r0, r1, 0x0) 06:42:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) read(0xffffffffffffffff, &(0x7f0000000080)=""/35, 0x23) 06:42:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="020000004c4b9e93cbf97bedf1bf54408ce8fcf82f25b86c43c6088870f501a874be536cb46150d46936507ec3da687c412e74603d33cb81798382000000000000698d2806f6695c936d124e3b7e7e4752f5ab060458b2a2f05c4b707eee7562d658f90592af6749f00559", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x4000, 0x0) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000000c0)={0x80, 0x1, 0x810e, 0x3, 0x3, 0x7, 0xffff, 0x7, r10}, 0x20) 06:42:42 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0xe) 06:42:42 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) read(r0, 0x0, 0x0) 06:42:42 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x0, @rand_addr="55c823f1ebbb28477d60a7af0cc5846b", 0x101}}, 0x0, 0x800, 0x0, "0fd7fcba233fc2550696cb3b635a543a3220742a357f9cbca98a239bdb28899e3854e8fbbfcd0f5541038bde74584797454e5a8156f8672eb48f5e75ec695c0c324b709736cb0a25c32057a5d094fff7"}, 0xd8) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x0, 0x6, 0x2, 0x7, 0x8}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3}, 0x8) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) dup3(r0, r1, 0x0) 06:42:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x0, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:42 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x82, 0x0) 06:42:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/102400, 0x19000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 06:42:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x381, 0x24080) 06:42:42 executing program 3: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0xc0305602, &(0x7f0000000040)={0x8001000, 0x8}) 06:42:42 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x0, @rand_addr="55c823f1ebbb28477d60a7af0cc5846b", 0x101}}, 0x0, 0x800, 0x0, "0fd7fcba233fc2550696cb3b635a543a3220742a357f9cbca98a239bdb28899e3854e8fbbfcd0f5541038bde74584797454e5a8156f8672eb48f5e75ec695c0c324b709736cb0a25c32057a5d094fff7"}, 0xd8) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x0, 0x6, 0x2, 0x7, 0x8}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x0, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:42 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280), 0x4) listen(r0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) listen(r1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@ipv4={[], [], @loopback}, @in6=@initdev}}, {{@in6=@local}}}, &(0x7f0000000300)=0xfffffffffffffe6d) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000001c0)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) stat(&(0x7f0000000000)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) rmdir(&(0x7f0000000100)='./file1\x00') perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f00000002c0)) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) 06:42:42 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/`ev/\xf0I\x1c9^\xf4!\xdd\x00-\x00', 0x6, 0x311040) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x1, 0xc, 0x2}) [ 375.972764] protocol 88fb is buggy, dev hsr_slave_0 [ 375.977906] protocol 88fb is buggy, dev hsr_slave_1 06:42:43 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x11) 06:42:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r5) setfsgid(r5) setregid(r4, r5) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r6, &(0x7f0000000080)="7c20fa5c9c17a6eef6bd681a248f77bc35a6dd19b8aefebee004b2c1c0b3c05e479b0c2b5b07e644e6f5dc24b8f98ad2657ce437abad23a3a5365685e6b8f686e0e5a3fe8d88439a77ef3762da7a0ce218ab6715cb65f425ca3c9562", 0x5c, 0x40, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r2, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, 0x0, 0x0) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000ccf863dde9684c780a906bddb7d188a000825de8fea1303e2d3585851571a6dc08c831912a2fa90c030650e8a0ac5da0295bfe758dace4f5105298f769591571741613dfd119e56ea37a004aa64ce49cec1dd4", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x10, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) 06:42:43 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x0, @rand_addr="55c823f1ebbb28477d60a7af0cc5846b", 0x101}}, 0x0, 0x800, 0x0, "0fd7fcba233fc2550696cb3b635a543a3220742a357f9cbca98a239bdb28899e3854e8fbbfcd0f5541038bde74584797454e5a8156f8672eb48f5e75ec695c0c324b709736cb0a25c32057a5d094fff7"}, 0xd8) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x0, 0x6, 0x2, 0x7, 0x8}, &(0x7f00000001c0)=0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:43 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000040)={0x8001000, 0x7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={r7, 0x34}, &(0x7f0000000080)=0x8) r8 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x2, 0x1f, 0x100a, 0x1, 0xc, 0x0, 0x0, 0x6}}) ioctl$KDENABIO(r8, 0x4b36) 06:42:43 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0x4, 0x4, 0x1}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000400)="82", &(0x7f00000001c0)=""/88}, 0x20) 06:42:43 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x20000) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x10001, 0x148) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000040)={0x3, 0x3, 0x33, "62017da9b8523b76b4a095f800f37c266375e2963325429b7d6e2602a7c91bdb9df6ee13960a7c9418595542383ee42303ab5285ed796c4eba3a0122", 0xb, "4a1456a7cd034d87ceabbe468250e3a641877efba63d99593e21e090ffe89bf337bbaa4d05a546c246bde3e2034a32acbcc27c9b82d9be6e70d6de73", 0x80}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_WRITE(r5, &(0x7f0000000140)={0x18, 0x0, 0x2, {0x2}}, 0x18) 06:42:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5ce1621ef3b09ab7d8f0f52e487ffd64d0a423ffec54ac5150aadf495b1d99f818be5711f85810dc5b7075e7f14508f32c38e4e8464811e1bb0e37bdb188fffa094e78bfa50db2862da2febc3f37bf02973e691e01cff6d466b1be23642cedefb2da798d8a7291fe96fcb65fff3d76bd306c5a15cb37df589fc8f933f7ba739a7c398d49987b8d58", 0x88}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/218, 0xda}], 0x1}}], 0x1, 0x0, 0x0) 06:42:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:43 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x0, @rand_addr="55c823f1ebbb28477d60a7af0cc5846b", 0x101}}, 0x0, 0x800, 0x0, "0fd7fcba233fc2550696cb3b635a543a3220742a357f9cbca98a239bdb28899e3854e8fbbfcd0f5541038bde74584797454e5a8156f8672eb48f5e75ec695c0c324b709736cb0a25c32057a5d094fff7"}, 0xd8) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x0, 0x6, 0x2, 0x7, 0x8}, &(0x7f00000001c0)=0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) write$P9_RFSYNC(r4, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_int(r7, 0x0, 0x6, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:43 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x100) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000040)) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) [ 376.372766] protocol 88fb is buggy, dev hsr_slave_0 [ 376.377936] protocol 88fb is buggy, dev hsr_slave_1 06:42:43 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x48) 06:42:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x5}, 0x10) r2 = socket$inet6(0xa, 0x4000000080002, 0x0) dup3(r2, r0, 0x0) 06:42:43 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x0, @rand_addr="55c823f1ebbb28477d60a7af0cc5846b", 0x101}}, 0x0, 0x800, 0x0, "0fd7fcba233fc2550696cb3b635a543a3220742a357f9cbca98a239bdb28899e3854e8fbbfcd0f5541038bde74584797454e5a8156f8672eb48f5e75ec695c0c324b709736cb0a25c32057a5d094fff7"}, 0xd8) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x0, 0x6, 0x2, 0x7, 0x8}, &(0x7f00000001c0)=0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 06:42:43 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) 06:42:43 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x180000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000180)="b5c6b5c7949a1189e98a442b794aaa32c01386946c99d9f88674f40aad2fb9fd86ae0fa052a8a53695706bd8a4bc773ccf951db7a79d81a1946849487f7d7ffd0e467c81361c547739fc3cb8a4960bfce523a87114760fb0f426359cfc71be2dedca784678070e7c6d795391828e0d8e5dd8a7e47afae0e441f706d8487185abeeaa56a3a7d06d33429199fed038dd1ab78e5c0a0ac6e9d9dd3ac62b5e865bec5b0f8429408929bc7959249bcb49a0a3927617537e0c742f273cf86e762357bfe47bd16a5de14922694652389f3f9075a6c76d88ba7df3c739c6349b8897335831e56014d1f4487c79357f3cc328f437235e3009d582235cbb684ab5747bb3cdfca90cc7ac08e5c79fee7f7b87a511e521a70795c073a1174ff3d73287fc8226a464cdad415c149f77b19cfdb60c343e012bb9b19bcb2fbdd1d77915405f636f8cc96e036028d3135a8f0809df42ab5b04aad39d84c857be7fea7a8d34bcd924031246657dbe981206c4965dab92d5c9183650", 0x12e, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x80, &(0x7f0000618000)={0x2, 0x4e21, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) arch_prctl$ARCH_SET_GS(0x1001, 0x401) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:43 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000000)={r5, 0x20}, 0x8) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) 06:42:43 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x0, @rand_addr="55c823f1ebbb28477d60a7af0cc5846b", 0x101}}, 0x0, 0x800, 0x0, "0fd7fcba233fc2550696cb3b635a543a3220742a357f9cbca98a239bdb28899e3854e8fbbfcd0f5541038bde74584797454e5a8156f8672eb48f5e75ec695c0c324b709736cb0a25c32057a5d094fff7"}, 0xd8) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:43 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) close(r0) 06:42:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_TSC_KHZ(r6, 0xaea2, 0x6bd9) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="020000007e5a9883b22e227a104fd65ab427522f566bad9f99d93dd92e6b838e6388aaf291c14f85a5736391579fec442a68e230983c313b4d242edb331dfef295218fae5554240665c90ab02a2657f0adf440ca3235966086c8e617f2c8bb0d067a7e15f65b043ad4943ed48004232f5829ba2fee537250957e471a0005efc9c2115c7f8b1a66feba13a88fe70f2fecd22ba56e547b5d7a6761421201e30e41fb2bf3709aec938b2c0773d3a012a62c542d9ae38e454eb12241b346df07b1931c9c03bb66454659da3efc81cf3edcf951c569ffdd9f4fcc84e8de89c4020ddac5a5ea3128e9", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) 06:42:44 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0x4, 0x4, 0x2}, 0x3c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000380), 0x0}, 0x20) 06:42:44 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x4c) 06:42:44 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x860400, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0xd01fc04a48ef6831) clock_gettime(0x0, &(0x7f0000000080)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x2000, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x3, 0x12, 0x4, 0x10000, {0x0, 0x2710}, {0x1, 0x8, 0x1f, 0x1e, 0x63, 0x7, "28d4390b"}, 0xe, 0x2, @fd=r1, 0x4}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0305602, &(0x7f0000000280)={0x0, 0x9, 0x2}) 06:42:44 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x0, @rand_addr="55c823f1ebbb28477d60a7af0cc5846b", 0x101}}, 0x0, 0x800, 0x0, "0fd7fcba233fc2550696cb3b635a543a3220742a357f9cbca98a239bdb28899e3854e8fbbfcd0f5541038bde74584797454e5a8156f8672eb48f5e75ec695c0c324b709736cb0a25c32057a5d094fff7"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tee(r2, r2, 0x32, 0xc) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'veth1_to_bond\x00', 0x71}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffe, @remote}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x2, 0x46a}) 06:42:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) 06:42:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r3, 0x9) r4 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x200, 0x0) sendto$inet(r5, &(0x7f0000000180)="37fa2ad535abf7527b2c6baf98ced81c14f431b49cd672cc8a9984fc36c4e2c12be24e595752f54a148acd8cc22f311bdfe417321c4078c0c45f5b8276c56522a7e476d0c717f56a34e03b09f1cf44134608886d3939e895458da7699455a5ebfba263e257df6e4ab7151b5dc5b5ebe6f4f360e7396517c4b3f10b1925b829183d65f96d8dae1c466b02cb327b74b4ef2857397a18737a9203bcd24fd54fa7b909f8f92d34c48e00534d33c7d0f5d9d11a1fd93676f9c3130b280bb05b0e9933a5cf93674ed447d253eab89d3dfd462e6b00d1", 0xd3, 0x40040, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000063bd680aaa0706a7f539682928cf164dc26dfffbfcb898729fd33ffb266d9de84ad2860ce9a28025e17569950cdd952085c4e18ba09463151e1205bc926855cc416e9a45108379bd1704ecfcd5a2d07ce8a87829f0d5aa8614e53147861dc34ab2f5c6baf8932d978fa0b15d1671d89973045b96eb6973bdb680f906620750c8ba986e80f930a3b913f96cb5a61c", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) 06:42:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0xfffffffb, 0x4) syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$tipc(r3, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e21}}, 0x10) socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) getpeername$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000080)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$netlink(r3, &(0x7f0000000040)=@unspec, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, 0x0, 0x44d1a2088481f0e4) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x10, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) 06:42:44 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0xfc}}, 0xe) listen(r0, 0x0) 06:42:44 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x0, @rand_addr="55c823f1ebbb28477d60a7af0cc5846b", 0x101}}, 0x0, 0x800, 0x0, "0fd7fcba233fc2550696cb3b635a543a3220742a357f9cbca98a239bdb28899e3854e8fbbfcd0f5541038bde74584797454e5a8156f8672eb48f5e75ec695c0c324b709736cb0a25c32057a5d094fff7"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x52d, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) 06:42:44 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x0, 0x1, 0x7, [], &(0x7f0000000000)=0x7}) 06:42:44 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x60) 06:42:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'batadv0\x00'}}, 0x1e) connect$rds(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 06:42:44 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x2c8582) sendfile(r0, r0, 0x0, 0x40fdf) 06:42:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB=':Y[\r', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:44 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000000)={0xd, @raw_data="9ebf8587399e469fe48f708184405fb20436ca11ca0e91acb39d9691efa6fdcba85559997ecc276888a477b32696aa5b6d531cdb07ec5100127d5f566425abdf53f3e4d0e85b0d6d66a36a05bf91b9fdd24c6e0f581975ac0a4baba6d3837dedd8e6dec8037835c1f2f1f92b383cc5261f5945f18a7f44e4d13f8ce30025d0fc7a5c7538d99a12d0d4e0f798b53c3b62afbaab63fe1f0d0b97382e6475607827338f6b191e6a4dbf9a6f8a6c9bf37787316f705b9ed72454a1e17f6a06a262c205559f4ed56c0778"}) 06:42:45 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:45 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r2, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0xfffffffffffeffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x5, 0x2}, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x10, 0x7ff, 0x7}, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x400}}, 0x10) 06:42:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r1, &(0x7f0000000200)={0x1, {&(0x7f0000000040)=""/31, 0x1f, 0x0, 0x0, 0x2}}, 0x68) write$vnet(r1, &(0x7f000046df98)={0x1, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x55) 06:42:45 executing program 3: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/~4l-\x06\x00', 0x90a9, 0x200080) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x8}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x8001005, 0x2c, 0x932b12d944221919}) 06:42:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'veth0_to_hsr\x00'}, 0x18) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) 06:42:45 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:45 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0xa00) 06:42:45 executing program 2: 06:42:45 executing program 1: 06:42:45 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdZv#\x00', 0x90a9, 0x20000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x8001007, 0xc}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0xc000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="030000000000000058cc62733c27642de26d6b9f2e7c551676b2865d339b97645fa211cb8f3723bf39f3af60d48aef6000005c376eaff80e345be1a50951a92bcb5ff21022b833151dadfa"], 0x0, 0x0) msgrcv(r3, &(0x7f00000001c0)={0x0, ""/91}, 0x63, 0x86f11fd638c96b72, 0x0) msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000180)=""/189) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) renameat(r4, &(0x7f0000000080)='./file0\x00', r5, &(0x7f00000000c0)='./file0\x00') ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 06:42:45 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) getpeername$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) mount$9p_virtio(&(0x7f0000000000)='/dev/v4l-subdev#\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x80000, &(0x7f0000000140)={'trans=virtio,', {[{@version_u='version=9p2000.u'}, {@version_L='version=9p2000.L'}, {@version_9p2000='version=9p2000'}, {@privport='privport'}, {@fscache='fscache'}, {@msize={'msize', 0x3d, 0x5}}, {@noextend='noextend'}, {@msize={'msize', 0x3d, 0x5}}], [{@context={'context', 0x3d, 'staff_u'}}, {@hash='hash'}, {@fowner_gt={'fowner>', r1}}, {@dont_appraise='dont_appraise'}]}}) r2 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:45 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:45 executing program 1: 06:42:45 executing program 2: 06:42:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r5, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r6, 0x9) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r7, 0x9) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r8, 0x9) fcntl$getownex(r8, 0x10, &(0x7f0000000200)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x2, 0x800000, "3bd87d8ca6fe452a0abaf2535250d9a6202856d68fb52bf7", {0x800}, 0x2a}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$FIONREAD(r10, 0x541b, &(0x7f0000000040)) 06:42:45 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f0000000280)={0x1, {&(0x7f00000000c0)=""/104, 0xfffffffffffffd22, 0x0, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000000200)={0x1, {&(0x7f0000000040)=""/31, 0x1f, 0x0, 0x0, 0x2}}, 0x68) 06:42:45 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000000)=0x7) 06:42:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 06:42:46 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0xe00) 06:42:46 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:46 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r1, 0x9) dup(r1) 06:42:46 executing program 1: 06:42:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="a1ed4002", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:46 executing program 2: 06:42:46 executing program 1: 06:42:46 executing program 2: 06:42:46 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:46 executing program 1: 06:42:46 executing program 2: 06:42:46 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:46 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x1100) 06:42:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000180)={r4, 0x3, &(0x7f0000000040)=[0xb92, 0xfffffffa, 0xb8], &(0x7f0000000080)=[0x0, 0x1], 0x0, 0x3, 0x8, &(0x7f00000000c0)=[0x1, 0x8, 0x3], &(0x7f0000000100)=[0x7, 0x9, 0x6]}) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0x0) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x10, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) 06:42:46 executing program 1: 06:42:46 executing program 2: 06:42:46 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:46 executing program 1: 06:42:46 executing program 2: 06:42:46 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 06:42:47 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 06:42:47 executing program 2: 06:42:47 executing program 1: 06:42:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r8, 0x4}, &(0x7f0000000000)=0x8) [ 380.132745] net_ratelimit: 20 callbacks suppressed [ 380.132754] protocol 88fb is buggy, dev hsr_slave_0 [ 380.142856] protocol 88fb is buggy, dev hsr_slave_1 [ 380.181216] sctp: [Deprecated]: syz-executor.0 (pid 1079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 380.181216] Use struct sctp_sack_info instead 06:42:47 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x4800) 06:42:47 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 06:42:47 executing program 1: 06:42:47 executing program 2: 06:42:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$selinux_create(r1, &(0x7f0000000000)=@objname={'system_u:object_r:dhcpc_exec_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x7, 0x20, './file0\x00'}, 0x6d) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="00000004a2b9f1c27903296fb9863bd86006080000b746c0ec4ee9792b62a4ec8456e8f3f0a9e93adec0c0d352b0dd938573e9cab1bb55daa790441ec608b5175b2fd7f34562e4e4e581d7c507dc75ea253ce0", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x20, r7, 0x701, 0x0, 0x0, {0x13, 0x0, 0xfffffffffffff000}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x5}]}]}, 0x20}}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r8, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x8, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000040) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:47 executing program 2: 06:42:47 executing program 1: 06:42:47 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) [ 380.406489] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 06:42:47 executing program 1: 06:42:47 executing program 2: [ 380.532758] protocol 88fb is buggy, dev hsr_slave_0 [ 380.537899] protocol 88fb is buggy, dev hsr_slave_1 [ 380.543061] protocol 88fb is buggy, dev hsr_slave_0 [ 380.548129] protocol 88fb is buggy, dev hsr_slave_1 06:42:47 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 06:42:47 executing program 2: 06:42:47 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x4c00) 06:42:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\x00', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) r5 = socket$inet(0x2, 0x4, 0x10) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x4900, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, r8}}) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r9) setfsgid(r9) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, r11}}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x8000, &(0x7f0000000180)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x5000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xda6}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x7}}, {@allow_other='allow_other'}], [{@fowner_eq={'fowner', 0x3d, r11}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@obj_user={'obj_user', 0x3d, 'securitya:vboxnet1'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'eth1^systemvmnet0'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@dont_measure='dont_measure'}, {@smackfsdef={'smackfsdef'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}}) r12 = socket$inet_sctp(0x2, 0x5, 0x84) r13 = dup3(r5, r12, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r13, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r12, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x7a, &(0x7f000059aff8)={r14}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f0000000000)={r14}, &(0x7f0000000040)=0x8) 06:42:48 executing program 1: 06:42:48 executing program 2: 06:42:48 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 06:42:48 executing program 1: 06:42:48 executing program 2: 06:42:48 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:48 executing program 1: 06:42:48 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) 06:42:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="2fc7bdb73cdd9a64dbe270d0a2e9a6e4595fae6c5c240685c321cc6da81cf8fcb18f2180735ae5fd94d748af881678124a93ed94a0a820d1e5", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r8) ioctl$sock_bt_cmtp_CMTPCONNADD(r7, 0x400443c8, &(0x7f0000000080)={r8, 0x8001}) 06:42:48 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) [ 381.332779] protocol 88fb is buggy, dev hsr_slave_0 [ 381.338053] protocol 88fb is buggy, dev hsr_slave_1 [ 381.343213] protocol 88fb is buggy, dev hsr_slave_0 [ 381.348279] protocol 88fb is buggy, dev hsr_slave_1 06:42:48 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x6000) 06:42:48 executing program 1: 06:42:48 executing program 2: 06:42:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:48 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:48 executing program 2: 06:42:48 executing program 1: 06:42:48 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:48 executing program 2: 06:42:48 executing program 1: 06:42:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:48 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:49 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0xff03) 06:42:49 executing program 2: 06:42:49 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:49 executing program 1: 06:42:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="b70000af", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:49 executing program 2: 06:42:49 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:49 executing program 1: 06:42:49 executing program 2: 06:42:49 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:49 executing program 1: 06:42:49 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:49 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x34000) 06:42:49 executing program 2: 06:42:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r0, 0x9) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_CROP(r5, 0xc038563b, &(0x7f0000000040)={0x1, 0x0, {0x20, 0x5, 0x1, 0x7ff}}) r6 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f00000000c0)=0x40, 0x4) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) read$eventfd(r11, &(0x7f0000000100), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f0000000180)={{{@in=@dev, @in=@multicast1}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0x34b) fcntl$getown(r7, 0x9) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40106614, &(0x7f0000000000)) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000015d19cbc6ffd5ab19f15c3bec3591669314ab81b3fdad7a8176b333e22c2bae2ec5896649e001f0f3a0a77d27445c12b9f0564de80652229c9160ad5f25b68ad8803bc5f2c068b0009abf623b4a07408a595344588b3bed757dc4367226fe363e96236f883c30ace63fc60ab92be39427ae1b89717cc16dd2ea6dc5a03de7aff2d26b7cff0fa5229bb1e3420d1e22801a15d111b7cc47261bec025cf29bdda0ed5b104b9d942569c3e072b16227ff806d36c70d2908312453c98761146c22de125742bbffe8cb3deffcd0106130af29d0e745304e65cea8e425b47ffa5c0fd4d98b81ca0f2ae2e48307e154fa0f2dfc89b33d54a65094f8a", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x10, &(0x7f000059aff8)={r14}, &(0x7f000034f000)=0x2059b000) 06:42:49 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:49 executing program 1: 06:42:49 executing program 2: 06:42:49 executing program 1: 06:42:49 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:49 executing program 2: 06:42:49 executing program 1: 06:42:49 executing program 2: 06:42:49 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:50 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x40000) 06:42:50 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x402000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2d06}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f00000000c0)={r2, 0xfffffffffffffffb}) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000040)={0x9, 0x4}) 06:42:50 executing program 1: 06:42:50 executing program 2: 06:42:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r5, 0x9) r6 = fcntl$dupfd(r5, 0x406, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0xc75b1b5e01678dd9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendto$inet(r10, &(0x7f0000fa3fff)="c9", 0x1, 0x20, &(0x7f00006f7000)={0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x385) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) connect$rose(r12, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x1, @bcast}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="01040000653fde68aff59cf6d35daffc67ee27b783b911627ba3"], &(0x7f0000a8a000)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$RTC_PIE_OFF(r12, 0x7006) ioctl$MON_IOCQ_URB_LEN(r14, 0x9201) 06:42:50 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:50 executing program 1: 06:42:50 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x74, 0x1, 0x1016, 0x0, 0xb, 0x3, 0x2, 0x7}}) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x4002) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x802, 0x0) fcntl$getown(r0, 0x9) fsetxattr$security_smack_transmute(r2, &(0x7f0000000140)='security.SMA\x14\xe8n\x8d\xd9\xad\x11\xa9\x00', &(0x7f0000000180)='TRUE', 0xfffffffffffffea3, 0x3) r3 = syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x491042e1, 0x400000) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000000300)=""/82, 0x308000, 0x1800, 0x9}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$CAPI_GET_PROFILE(r5, 0xc0404309, &(0x7f0000000200)) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) socket$inet_dccp(0x2, 0x6, 0x0) 06:42:50 executing program 2: socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000400)}) syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x8, 0x0) close(0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) process_vm_readv(0x0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000001980)}}], 0x1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) 06:42:50 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:50 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 06:42:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000040)=0x8000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r13}, &(0x7f000034f000)=0x2059b000) 06:42:50 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x400300) 06:42:50 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$void(r1, 0x5450) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f0000000040)={0x401, 0x0, 0x2011, 0x80, 0x8, {0x75a8, 0x200}, 0x3}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:50 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:50 executing program 2: socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000400)}) syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x8, 0x0) close(0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) process_vm_readv(0x0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000001980)}}], 0x1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) 06:42:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="dc"], 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000240)) 06:42:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 06:42:50 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x400004, 0x0, 0x0}, 0x3c) fcntl$getown(r1, 0x9) fcntl$getflags(r1, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind(r2, &(0x7f0000000000)=@ipx={0x4, 0x1, 0xffffffff, "6767dd23383d", 0x6}, 0x80) 06:42:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000200)={0x140}) 06:42:51 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000a8a000)=0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 06:42:51 executing program 2: socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000400)}) syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x8, 0x0) close(0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) process_vm_readv(0x0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000001980)}}], 0x1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) 06:42:51 executing program 3: uname(&(0x7f0000000000)=""/30) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) ustat(0x7, &(0x7f00000000c0)) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000080)) r1 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x14d114775de95e04, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x200, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000a00)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "a11fd9bb777ed6d2de013aa84c1780812dde64019c3679140f98742d991c188999137e2c0c273c01ce5ee4a98e9a5f9621977495adc63b5e42cfed5f869c9b9c3762653da39cff6f836d3d8c2f820218e7f36d69edfe4f6100003ba171580d5d229a27995ec89a2ae6ea35537a994f882cb14b30ea1e81f4ffce42d406d795b1667439abc3912178aa17fed740c80915b5df43ad2e40db2e0c07023314ebb582148f97bf4b7f329a3f160dfa8dc19707f955096b143bd08da435072e87ba883dfc7fec35c82353166a54070000004068adc33e99bed553bae5b0410241e3d969c47980bfb66acc42eae3297dadf62b3f5d48f2bbbae626416b7f89ba77f540b4", 0x0, 0x4, 0x0, 0x8, 0x100000000, 0x5, 0x3}, r2}}, 0xffffffffffffffad) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0), r2, 0x1}}, 0x18) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000180)=0x1, 0x4) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) 06:42:51 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x1000000) 06:42:51 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:51 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:51 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="e6000000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:51 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) r1 = msgget(0x2, 0x200) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r2) setfsgid(r2) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, r4}}) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r5) setfsgid(r5) r6 = gettid() tkill(r6, 0x1c) r7 = gettid() tkill(r7, 0x1c) r8 = getpgid(r7) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x6882, 0xffffffffffffffff, r2, r4, r5, 0x20, 0x1}, 0x4, 0x9, 0x80000001, 0xc, 0x4, 0x3, r6, r8}) 06:42:51 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:51 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{}, {0x0}, {}, {}, {}, {}, {}, {}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r4, 0x9) ioctl$int_out(r4, 0x5462, &(0x7f00000000c0)) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000080)={r3, 0x38}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:51 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:51 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:51 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:51 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_mount_image$gfs2(&(0x7f0000000100)='gfs2\x00', &(0x7f0000000180)='./file0\x00', 0x8d2, 0x4, &(0x7f0000000440)=[{&(0x7f00000002c0)="db07e6abc6d6c4fbea7ab5b86ea71f0bc9f4f2d2d9bbc4cf79c75583a240f002d1545df6af937b98e22051a581490426ca5d1583e60be19ca30a4b54fb7dd00e4a3d52b7ce5079b4b92f37d543a07d0f2df68f3190d7926dd727b269a2d10dbbe886a10017522a11a113193ed87e72deb2bf22e883253898ab7c82bcf6dffd2a6ae4f052b029f35ce6366029635381a2d9b0243fd9291d16", 0x98, 0x5}, {&(0x7f00000001c0)="cdc1bf619da36e46ca69d7331d428397b09c56fd14e33bfc7e7bffdee5596029c09f186e47d47e32e28858ea3a30f4c9d648a68b3555829f248beec9d88fffb686af2360c2ed7e6f", 0x48, 0x4}, {&(0x7f0000000380)="ef0810346a9faaadd2facc7ffd168c4c3eb3165f1ba48ba668f875d95b8135a700b1a96073e917175c3cf2c74e1bf6b1d5e44399e093115f1984b319a0d40cee60fa3fd763e2616b04734b2841036279ad2a65e401c797827d35c5b0a8e5efe1cfab209282417ad95b1bfb8b7c2690b5da83d5111f89888ecf", 0x79, 0x5}, {&(0x7f0000000400)="1b7e35348502935b24527b3afcea467c", 0x10, 0x7}], 0x200c018, &(0x7f00000004c0)={[{@upgrade='upgrade'}, {@norgrplvb='norgrplvb'}], [{@audit='audit'}, {@hash='hash'}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x65, 0x63, 0x65, 0x36, 0x31, 0x36, 0x5], 0x2d, [0x61, 0x35, 0x38, 0x35], 0x2d, [0x66, 0x35, 0xae, 0x65], 0x2d, [0x33, 0x30, 0x64, 0x61], 0x2d, [0x32, 0x0, 0x36, 0x31, 0x38, 0x30, 0x33, 0x64]}}}, {@permit_directio='permit_directio'}, {@fscontext={'fscontext', 0x3d, 'root'}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f00000000c0)=0xa0000000) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e20, 0x1000, @empty, 0x3ff}], 0x78) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x404080, 0x0) [ 384.796190] gfs2: invalid mount option: audit [ 384.800936] gfs2: can't parse mount arguments 06:42:51 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r1) setfsgid(r1) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r2) setfsgid(r2) setregid(r1, r2) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x10, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) 06:42:51 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x4000000) 06:42:51 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:51 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:51 executing program 3: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)=0x7) 06:42:52 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000180)='/dev,\x00', 0x8003, 0x24000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r1, 0x9) r2 = dup3(r1, r0, 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000100)={'ip6erspan0\x00', {0x2, 0x4e23, @local}}) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000040)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)="a4224896944d4ff9abbf9aa0a787b312c3ae7d24b9579125ed9f2dd8253f1b02932e71e0842242a11210aa6dd8f3689c8a1da843b178255ab2dc2449c725088f", 0x40) socket(0x3, 0x800, 0x7d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$UHID_DESTROY(r4, &(0x7f0000000240), 0x4) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ubi_ctrl\x00', 0x40000, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f00000003c0)={0x1, 0x5, 0x7ff}) getsockname$ax25(r5, &(0x7f0000000300)={{0x3, @null}, [@default, @remote, @bcast, @bcast, @default, @netrom, @netrom, @default]}, &(0x7f0000000400)=0x48) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f00000001c0)={{0xffffffffffffffff, 0x3, 0x0, 0x0, 0x2}, 0x7, 0x2, 0x9}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r6 = gettid() tkill(r6, 0x1c) ioprio_set$pid(0x3, r6, 0xffffffff00000000) 06:42:52 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:52 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f0000000180)="09c0ef8729ea4dbb62e57398d956491ef68fa4060000001d91c0b8735ce2c16f0ec210315bd3fc2e7ea0c9d13934faec15ca6d76a1d10663e5d515d0eb99378e006514c8f0816b9d2b2fc9530e36a5acbe8fea4ff792b331e7472ba1073729bfc5e9aa90d3c1cec47bb83ebc692942485cee57a94c476b86bf1f74612e86755b58c9405052629e2a9f9d9a1cbf571094eff18f0f180c424dd5a5d1e5cd6c861cfee82a99f65d8b4f4ddf25b155d2baca8ab1ef90dc251a9e25b837a1c3fd0fddf8d70901709b3831084ca8301d32323a65dbef476570f006adbb96cc580d396e3ef24c8d6d2fdc21b3c0d12dc66e85be654cf9587763e0786256bb19c4bf862715c181ddd00422803166004dd8176c0e14fe06c2652faccb496e52d7aaae02241c3077ee89e8ebc34d43b5637e9385b4889d0fc0fcd42a117c829880da892bfb3247c578e743394eeac511ee40b33bc52ad9cf7977de4ed5cf420ae3ce962e9f39e55500aa14df2df1", 0xfffffffffffffe3f, 0x10, &(0x7f0000618000)={0x2, 0x4e20, @broadcast}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:52 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:52 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:52 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:52 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) [ 385.492755] net_ratelimit: 20 callbacks suppressed [ 385.492763] protocol 88fb is buggy, dev hsr_slave_0 [ 385.502889] protocol 88fb is buggy, dev hsr_slave_1 [ 385.507985] protocol 88fb is buggy, dev hsr_slave_0 [ 385.513070] protocol 88fb is buggy, dev hsr_slave_1 [ 385.518163] protocol 88fb is buggy, dev hsr_slave_0 [ 385.523236] protocol 88fb is buggy, dev hsr_slave_1 06:42:52 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0xa000000) 06:42:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f0000000000)={0x0, 0xfffffe00, 0x7133}) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0x0) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x10, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r9, 0x84, 0x21, &(0x7f0000000580)=0x14b, 0x4) 06:42:52 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:52 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(r0, r1, 0x0) 06:42:52 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 06:42:52 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:52 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 06:42:52 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(r0, r1, 0x0) 06:42:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f0000000000)=0xe80d6d5) 06:42:53 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:53 executing program 5: socket$unix(0x1, 0x3, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 06:42:53 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(r0, r1, 0x0) 06:42:53 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0xe000000) 06:42:53 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:53 executing program 5: socket$unix(0x1, 0x3, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 06:42:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000868ebb98a3dc00444446b8fd4b002bc19f7100dd2778e77132c1b3f86760f83d2e91ce27ac457eeae36f170d265500463dff6931b1d72ae78039bd2cd5b026fb1e29590ef225d3d1298174d05efb3aab3f8d8b4f8275089534bd0049088070322f1aaf0d2d757a953498736ba78b8bef70b1a1e9f9394d4c5744dc678f1b65ab08a88a456be828c6e5acd979955fe1f27fb518", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt(r3, 0x94, 0x10, &(0x7f0000000000)=""/252, &(0x7f0000000100)=0xfc) 06:42:53 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) [ 386.372791] protocol 88fb is buggy, dev hsr_slave_0 [ 386.377958] protocol 88fb is buggy, dev hsr_slave_1 06:42:53 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:53 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:53 executing program 5: socket$unix(0x1, 0x3, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 06:42:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x958f}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:53 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:53 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:53 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) [ 386.772746] protocol 88fb is buggy, dev hsr_slave_0 [ 386.777973] protocol 88fb is buggy, dev hsr_slave_1 06:42:54 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x11000000) 06:42:54 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:54 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) sendto$inet(r3, &(0x7f0000000180)="3a3f538922c777cd82f262b1e7639a0f66b30447b79dd673c0ef8c42aeb02c829117224ca664473dc7ef39f8cc8ccc9a96362c25f6896fadcbb5c7d0d23a407b2d0fb6ddf9b4626110dde283c541ac2b606062a001edf273448e395bd18a134e60b0499eea4945190ee8f68997ce5770eaab286baf4be31057faf536221e443016fb0c27a61a55935acc4421d29182c1575d939c39e789b96a61b1db95dcc2268b6aba3c49767e59d460268eb32fcab8937a6a6a613648240d21719a76c61d5b63bdb3fffefad8b076ec9b7a7653a110b977fb4e0dad1edf8ed55800d4652491d24311efe91ce5f9d233137c394c2fdd6b662f7fd0c6ccae79d3654b8e25be10fec1e4b8013a034a233bbaad9254de5640916acddaa5b4200f3154b65dbcbe04e9e1e818cf572838132ea510597e590a36fca7c93221bb5ce1e4b64df941bfeb26053db0eee77a2f2b811861d74056d1a33e770162ece829e1d92d3080a2a2225f0cfe2c6d40e5a4a62f5818cee6048d4ae32f8ffe1759e922", 0x0, 0x40, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x0, 0x3f, 0xad, 0x7f, 0x7, 0x1f, 0x1, 0x8, 0xc0, 0x5e}, 0xb) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:54 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 06:42:54 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:54 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 06:42:54 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:54 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 06:42:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) ioctl$TCSBRK(r5, 0x5409, 0x5e) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000180)={{0x9, 0x0, 0x5, 0xc25a, 'syz1\x00', 0xdc69}, 0x6, 0x10, 0x9, 0xffffffffffffffff, 0x3, 0x7, 'syz1\x00', &(0x7f0000000040)=['-\x00', 'vboxnet0\x00', 'vxcan1\x00'], 0x12, [], [0x5, 0x1134, 0x7, 0x2]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x10, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'vxcan1\x00', 0x1000}) 06:42:54 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:54 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:54 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x48000000) 06:42:54 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:54 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 06:42:54 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:54 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 06:42:54 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 06:42:55 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:55 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 06:42:55 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 06:42:55 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:55 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 06:42:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001180)='/dev/btrfs-control\x00', 0x80000, 0x0) ioctl$PPPIOCSMRU(r5, 0x40047452, &(0x7f00000011c0)=0xfa4) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$netrom_NETROM_IDLE(r8, 0x103, 0x7, &(0x7f0000001200), &(0x7f0000001240)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r9, 0x9) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r9, &(0x7f0000000000)="67577b390ac0267bc757a645825e0bea356983f4b487f396a4892d3d086b90105deb0045976472bb421cf95a3824aa30cb53405c2734e71bc8229dae0df6f85190482bc27c7f33b5736fabf48a7d623c761d6080881646ca19a32e048cec6eb4ce5ef1d0246c0f9c08f0abd046bc4ef1d96e6edab39c887c1476d9f6536eaf453b3a7f6dd3fce03ea78d795759b53de3368026d287b919db3cd5333b991ef3a0e8923130bdf9e64a4edc9349ab39bd8282cc6338e62fd56b9cb952c08592aa2ff5df7e37", &(0x7f0000000180)=""/4096}, 0x20) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000001280), &(0x7f00000012c0)=0x8) 06:42:55 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x4c000000) 06:42:55 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 06:42:55 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:55 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 06:42:55 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 06:42:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000cfdd7644e92cbfaa677267bbed2779dc7674d6b9bec8eafb22a713539539a8516a039f07f07b61ae3372352d900af6fc4a0e81da7c7f8ddb557d9c3c515f5610154165df7356ad80ba73055d1c100d8c2b7c185e55d8277881ae29c36c0e443ad67297fd201c720f32f9d2cc9cddeeaa3e4203aeaf86a71235bc19", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 06:42:55 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:55 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 06:42:55 executing program 2: r0 = socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:55 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r5 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT(r5, 0x0, 0x12, &(0x7f0000019380)=""/102385) semctl$SEM_STAT(r5, 0x2, 0x12, &(0x7f0000000000)=""/151) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) 06:42:55 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 06:42:56 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x60000000) 06:42:56 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:56 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 06:42:56 executing program 2: r0 = socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:56 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:56 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:56 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:42:56 executing program 2: r0 = socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:56 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:56 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:42:56 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:56 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:56 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0xeffdffff) 06:42:56 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x40000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000000)={0xffffffff, 0x0, 0x201f, 0x3ff, 0x7ff, {0x7f, 0x5}, 0x1}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:56 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:56 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) dup3(r0, r1, 0x0) 06:42:56 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:56 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) dup3(r0, r1, 0x0) 06:42:56 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:56 executing program 3: syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fcntl$getown(r0, 0x9) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x5, 0xc0e26e14caf7d49a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x400001, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x0, &(0x7f0000000080)="4ed1a74c096c7a5ef5749590f1ac42e6e80a80d63729223c1496486eab4e46b7b85c8c3183d9baa3be140879f8b1aba3b1e3", 0x32) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) 06:42:56 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:57 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 06:42:57 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0xff030000) 06:42:57 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) dup3(r0, r1, 0x0) 06:42:57 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:57 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x20}, 0xc) r2 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) 06:42:57 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) dup3(r0, 0xffffffffffffffff, 0x0) 06:42:57 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:57 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:57 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0xfffffdef) 06:42:57 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 06:42:57 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='\x06\x00\x10\x00ev#\x003\v\xde\x00', 0x90a9, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0xc}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x5, 0x0) 06:42:57 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) dup3(r0, 0xffffffffffffffff, 0x0) 06:42:57 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:57 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:57 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) dup3(r0, r1, 0x0) 06:42:57 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:42:57 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) dup3(r0, 0xffffffffffffffff, 0x0) 06:42:57 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0xffffff7f) [ 390.532805] net_ratelimit: 20 callbacks suppressed [ 390.532812] protocol 88fb is buggy, dev hsr_slave_0 [ 390.542999] protocol 88fb is buggy, dev hsr_slave_1 06:42:57 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:57 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:57 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) dup3(0xffffffffffffffff, r0, 0x0) 06:42:57 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:42:57 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x4000000000000) 06:42:57 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:57 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) dup3(r0, r1, 0x0) 06:42:57 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:57 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) dup3(0xffffffffffffffff, r0, 0x0) 06:42:57 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) dup3(r0, r1, 0x0) 06:42:57 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:58 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:58 executing program 3: r0 = socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) [ 390.932785] protocol 88fb is buggy, dev hsr_slave_0 [ 390.937969] protocol 88fb is buggy, dev hsr_slave_1 [ 390.943127] protocol 88fb is buggy, dev hsr_slave_0 [ 390.948226] protocol 88fb is buggy, dev hsr_slave_1 06:42:58 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) dup3(r0, r1, 0x0) 06:42:58 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) dup3(0xffffffffffffffff, r0, 0x0) 06:42:58 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) dup3(r0, r1, 0x0) 06:42:58 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x40030000000000) 06:42:58 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:58 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:58 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) dup3(r0, 0xffffffffffffffff, 0x0) 06:42:58 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:58 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:42:58 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:58 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:42:58 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) dup3(r0, 0xffffffffffffffff, 0x0) 06:42:58 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:58 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:58 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) dup3(r0, 0xffffffffffffffff, 0x0) [ 391.732740] protocol 88fb is buggy, dev hsr_slave_0 [ 391.737908] protocol 88fb is buggy, dev hsr_slave_1 [ 391.743036] protocol 88fb is buggy, dev hsr_slave_0 [ 391.748091] protocol 88fb is buggy, dev hsr_slave_1 06:42:58 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x100000000000000) 06:42:58 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:58 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:42:58 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) dup3(0xffffffffffffffff, r0, 0x0) 06:42:58 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:58 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:59 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:59 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) dup3(0xffffffffffffffff, r0, 0x0) 06:42:59 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:42:59 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:59 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) dup3(0xffffffffffffffff, r0, 0x0) 06:42:59 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:42:59 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) dup3(0xffffffffffffffff, r0, 0x0) 06:42:59 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:59 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x400000000000000) 06:42:59 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:59 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:42:59 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:59 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:42:59 executing program 0: r0 = socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:42:59 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:59 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:59 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:42:59 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:42:59 executing program 0: r0 = socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:42:59 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:00 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0xa00000000000000) 06:43:00 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:00 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:43:00 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:00 executing program 0: r0 = socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:43:00 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:00 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, 0x0, 0x0) dup3(r0, r1, 0x0) 06:43:00 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:43:00 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:00 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:00 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(0x0, 0x0, 0x0) dup3(r0, r1, 0x0) 06:43:00 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, 0x0, 0x0) dup3(r0, r1, 0x0) 06:43:00 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0xe00000000000000) 06:43:00 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:43:00 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:43:00 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, 0x0, 0x0) dup3(r0, r1, 0x0) 06:43:00 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:00 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:00 executing program 5: socket$unix(0x1, 0x3, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) dup3(0xffffffffffffffff, r0, 0x0) 06:43:00 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:43:00 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) dup3(r0, r1, 0x0) 06:43:00 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:00 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:00 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) dup3(r0, r1, 0x0) 06:43:01 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x1100000000000000) 06:43:01 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:43:01 executing program 5: socket$unix(0x1, 0x3, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) dup3(0xffffffffffffffff, r0, 0x0) 06:43:01 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:01 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:01 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) dup3(r0, r1, 0x0) 06:43:01 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) dup3(r0, 0xffffffffffffffff, 0x0) 06:43:01 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:43:01 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:01 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:01 executing program 5: socket$unix(0x1, 0x3, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) dup3(0xffffffffffffffff, r0, 0x0) 06:43:01 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) dup3(r0, 0xffffffffffffffff, 0x0) 06:43:01 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x4800000000000000) 06:43:01 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:43:01 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, 0xffffffffffffffff, 0x0) 06:43:01 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:01 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:01 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540), 0x1000) dup3(r0, 0xffffffffffffffff, 0x0) 06:43:01 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) dup3(0xffffffffffffffff, r0, 0x0) 06:43:01 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, 0x0, 0x0) dup3(r0, r1, 0x0) 06:43:01 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:01 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:01 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, 0xffffffffffffffff, 0x0) 06:43:01 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, 0x0, 0x0) dup3(r0, r1, 0x0) 06:43:02 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:02 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x4c00000000000000) 06:43:02 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) dup3(0xffffffffffffffff, r0, 0x0) 06:43:02 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, 0xffffffffffffffff, 0x0) 06:43:02 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:02 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, 0x0, 0x0) dup3(r0, r1, 0x0) 06:43:02 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) dup3(0xffffffffffffffff, r0, 0x0) 06:43:02 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:02 executing program 0: socket$unix(0x1, 0x3, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) dup3(0xffffffffffffffff, r0, 0x0) 06:43:02 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:02 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:02 executing program 0: socket$unix(0x1, 0x3, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) dup3(0xffffffffffffffff, r0, 0x0) 06:43:02 executing program 3: r0 = socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:43:02 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x6000000000000000) 06:43:02 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:02 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:43:02 executing program 1: socket$unix(0x1, 0x3, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 06:43:02 executing program 3: r0 = socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:43:02 executing program 0: socket$unix(0x1, 0x3, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) dup3(0xffffffffffffffff, r0, 0x0) 06:43:02 executing program 2: socket$unix(0x1, 0x3, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 06:43:02 executing program 1: socket$unix(0x1, 0x3, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 06:43:02 executing program 3: r0 = socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:43:02 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, 0xffffffffffffffff, 0x0) 06:43:02 executing program 2: socket$unix(0x1, 0x3, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) [ 395.892744] net_ratelimit: 20 callbacks suppressed [ 395.892756] protocol 88fb is buggy, dev hsr_slave_0 [ 395.902911] protocol 88fb is buggy, dev hsr_slave_1 [ 395.908015] protocol 88fb is buggy, dev hsr_slave_0 [ 395.913237] protocol 88fb is buggy, dev hsr_slave_1 [ 395.918347] protocol 88fb is buggy, dev hsr_slave_0 [ 395.923445] protocol 88fb is buggy, dev hsr_slave_1 06:43:03 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) 06:43:03 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0xeffdffff00000000) [ 396.772760] protocol 88fb is buggy, dev hsr_slave_0 [ 396.777836] protocol 88fb is buggy, dev hsr_slave_1 [ 397.172743] protocol 88fb is buggy, dev hsr_slave_0 [ 397.177816] protocol 88fb is buggy, dev hsr_slave_1 [ 400.932817] net_ratelimit: 20 callbacks suppressed [ 400.932823] protocol 88fb is buggy, dev hsr_slave_0 [ 400.943033] protocol 88fb is buggy, dev hsr_slave_1 [ 401.332845] protocol 88fb is buggy, dev hsr_slave_0 [ 401.338150] protocol 88fb is buggy, dev hsr_slave_1 [ 401.343230] protocol 88fb is buggy, dev hsr_slave_0 [ 401.348342] protocol 88fb is buggy, dev hsr_slave_1 [ 402.132755] protocol 88fb is buggy, dev hsr_slave_0 [ 402.137886] protocol 88fb is buggy, dev hsr_slave_1 [ 402.142971] protocol 88fb is buggy, dev hsr_slave_0 [ 402.147998] protocol 88fb is buggy, dev hsr_slave_1 [ 406.292829] net_ratelimit: 20 callbacks suppressed [ 406.292837] protocol 88fb is buggy, dev hsr_slave_0 [ 406.302879] protocol 88fb is buggy, dev hsr_slave_1 [ 406.307934] protocol 88fb is buggy, dev hsr_slave_0 [ 406.313003] protocol 88fb is buggy, dev hsr_slave_1 [ 406.318681] protocol 88fb is buggy, dev hsr_slave_0 [ 406.323725] protocol 88fb is buggy, dev hsr_slave_1 [ 407.172818] protocol 88fb is buggy, dev hsr_slave_0 [ 407.177921] protocol 88fb is buggy, dev hsr_slave_1 [ 407.572907] protocol 88fb is buggy, dev hsr_slave_0 [ 407.578124] protocol 88fb is buggy, dev hsr_slave_1 [ 411.332780] net_ratelimit: 20 callbacks suppressed [ 411.337855] protocol 88fb is buggy, dev hsr_slave_0 [ 411.342880] protocol 88fb is buggy, dev hsr_slave_1 [ 411.732774] protocol 88fb is buggy, dev hsr_slave_0 [ 411.737856] protocol 88fb is buggy, dev hsr_slave_1 [ 411.742943] protocol 88fb is buggy, dev hsr_slave_0 [ 411.747968] protocol 88fb is buggy, dev hsr_slave_1 [ 412.532849] protocol 88fb is buggy, dev hsr_slave_0 [ 412.537966] protocol 88fb is buggy, dev hsr_slave_1 [ 412.543045] protocol 88fb is buggy, dev hsr_slave_0 [ 412.548074] protocol 88fb is buggy, dev hsr_slave_1 [ 416.692788] net_ratelimit: 20 callbacks suppressed [ 416.697770] protocol 88fb is buggy, dev hsr_slave_0 [ 416.702906] protocol 88fb is buggy, dev hsr_slave_1 [ 416.707963] protocol 88fb is buggy, dev hsr_slave_0 [ 416.713003] protocol 88fb is buggy, dev hsr_slave_1 [ 416.718039] protocol 88fb is buggy, dev hsr_slave_0 [ 416.723102] protocol 88fb is buggy, dev hsr_slave_1 [ 417.572866] protocol 88fb is buggy, dev hsr_slave_0 [ 417.577949] protocol 88fb is buggy, dev hsr_slave_1 [ 417.972760] protocol 88fb is buggy, dev hsr_slave_0 [ 417.977829] protocol 88fb is buggy, dev hsr_slave_1 [ 421.732748] net_ratelimit: 20 callbacks suppressed [ 421.732755] protocol 88fb is buggy, dev hsr_slave_0 [ 421.742794] protocol 88fb is buggy, dev hsr_slave_1 [ 422.132873] protocol 88fb is buggy, dev hsr_slave_0 [ 422.138033] protocol 88fb is buggy, dev hsr_slave_1 [ 422.143116] protocol 88fb is buggy, dev hsr_slave_0 [ 422.148164] protocol 88fb is buggy, dev hsr_slave_1 [ 422.932834] protocol 88fb is buggy, dev hsr_slave_0 [ 422.937913] protocol 88fb is buggy, dev hsr_slave_1 [ 422.943022] protocol 88fb is buggy, dev hsr_slave_0 [ 422.948048] protocol 88fb is buggy, dev hsr_slave_1 [ 427.092834] net_ratelimit: 20 callbacks suppressed [ 427.097812] protocol 88fb is buggy, dev hsr_slave_0 [ 427.102875] protocol 88fb is buggy, dev hsr_slave_1 [ 427.107953] protocol 88fb is buggy, dev hsr_slave_0 [ 427.113001] protocol 88fb is buggy, dev hsr_slave_1 [ 427.118071] protocol 88fb is buggy, dev hsr_slave_0 [ 427.123127] protocol 88fb is buggy, dev hsr_slave_1 [ 427.972801] protocol 88fb is buggy, dev hsr_slave_0 [ 427.977872] protocol 88fb is buggy, dev hsr_slave_1 [ 428.372817] protocol 88fb is buggy, dev hsr_slave_0 [ 428.377886] protocol 88fb is buggy, dev hsr_slave_1 [ 432.132774] net_ratelimit: 20 callbacks suppressed [ 432.137741] protocol 88fb is buggy, dev hsr_slave_0 [ 432.142782] protocol 88fb is buggy, dev hsr_slave_1 [ 432.532771] protocol 88fb is buggy, dev hsr_slave_0 [ 432.537860] protocol 88fb is buggy, dev hsr_slave_1 [ 432.542936] protocol 88fb is buggy, dev hsr_slave_0 [ 432.547967] protocol 88fb is buggy, dev hsr_slave_1 [ 433.332766] protocol 88fb is buggy, dev hsr_slave_0 [ 433.337847] protocol 88fb is buggy, dev hsr_slave_1 [ 433.342914] protocol 88fb is buggy, dev hsr_slave_0 [ 433.347955] protocol 88fb is buggy, dev hsr_slave_1 [ 437.492772] net_ratelimit: 20 callbacks suppressed [ 437.492778] protocol 88fb is buggy, dev hsr_slave_0 [ 437.502845] protocol 88fb is buggy, dev hsr_slave_1 [ 437.507891] protocol 88fb is buggy, dev hsr_slave_0 [ 437.512974] protocol 88fb is buggy, dev hsr_slave_1 [ 437.518019] protocol 88fb is buggy, dev hsr_slave_0 [ 437.523050] protocol 88fb is buggy, dev hsr_slave_1 [ 438.372766] protocol 88fb is buggy, dev hsr_slave_0 [ 438.377832] protocol 88fb is buggy, dev hsr_slave_1 [ 438.772767] protocol 88fb is buggy, dev hsr_slave_0 [ 438.777885] protocol 88fb is buggy, dev hsr_slave_1 [ 442.532778] net_ratelimit: 20 callbacks suppressed [ 442.537772] protocol 88fb is buggy, dev hsr_slave_0 [ 442.542876] protocol 88fb is buggy, dev hsr_slave_1 [ 442.932754] protocol 88fb is buggy, dev hsr_slave_0 [ 442.937859] protocol 88fb is buggy, dev hsr_slave_1 [ 442.942944] protocol 88fb is buggy, dev hsr_slave_0 [ 442.948074] protocol 88fb is buggy, dev hsr_slave_1 [ 443.732760] protocol 88fb is buggy, dev hsr_slave_0 [ 443.737928] protocol 88fb is buggy, dev hsr_slave_1 [ 443.743064] protocol 88fb is buggy, dev hsr_slave_0 [ 443.748088] protocol 88fb is buggy, dev hsr_slave_1 [ 447.892769] net_ratelimit: 20 callbacks suppressed [ 447.892774] protocol 88fb is buggy, dev hsr_slave_0 [ 447.902804] protocol 88fb is buggy, dev hsr_slave_1 [ 447.907857] protocol 88fb is buggy, dev hsr_slave_0 [ 447.912918] protocol 88fb is buggy, dev hsr_slave_1 [ 447.917962] protocol 88fb is buggy, dev hsr_slave_0 [ 447.923352] protocol 88fb is buggy, dev hsr_slave_1 [ 448.772767] protocol 88fb is buggy, dev hsr_slave_0 [ 448.777867] protocol 88fb is buggy, dev hsr_slave_1 [ 449.172817] protocol 88fb is buggy, dev hsr_slave_0 [ 449.177920] protocol 88fb is buggy, dev hsr_slave_1 [ 452.932798] net_ratelimit: 20 callbacks suppressed [ 452.937770] protocol 88fb is buggy, dev hsr_slave_0 [ 452.942797] protocol 88fb is buggy, dev hsr_slave_1 [ 453.332764] protocol 88fb is buggy, dev hsr_slave_0 [ 453.337858] protocol 88fb is buggy, dev hsr_slave_1 [ 453.342930] protocol 88fb is buggy, dev hsr_slave_0 [ 453.347956] protocol 88fb is buggy, dev hsr_slave_1 [ 454.132820] protocol 88fb is buggy, dev hsr_slave_0 [ 454.138105] protocol 88fb is buggy, dev hsr_slave_1 [ 454.143182] protocol 88fb is buggy, dev hsr_slave_0 [ 454.148200] protocol 88fb is buggy, dev hsr_slave_1 [ 458.292759] net_ratelimit: 20 callbacks suppressed [ 458.292765] protocol 88fb is buggy, dev hsr_slave_0 [ 458.302883] protocol 88fb is buggy, dev hsr_slave_1 [ 458.307927] protocol 88fb is buggy, dev hsr_slave_0 [ 458.312959] protocol 88fb is buggy, dev hsr_slave_1 [ 458.318030] protocol 88fb is buggy, dev hsr_slave_0 [ 458.323084] protocol 88fb is buggy, dev hsr_slave_1 [ 459.172842] protocol 88fb is buggy, dev hsr_slave_0 [ 459.177918] protocol 88fb is buggy, dev hsr_slave_1 [ 459.572786] protocol 88fb is buggy, dev hsr_slave_0 [ 459.577885] protocol 88fb is buggy, dev hsr_slave_1 [ 463.332747] net_ratelimit: 20 callbacks suppressed [ 463.332752] protocol 88fb is buggy, dev hsr_slave_0 [ 463.342771] protocol 88fb is buggy, dev hsr_slave_1 [ 463.732769] protocol 88fb is buggy, dev hsr_slave_0 [ 463.737872] protocol 88fb is buggy, dev hsr_slave_1 [ 463.742960] protocol 88fb is buggy, dev hsr_slave_0 [ 463.747985] protocol 88fb is buggy, dev hsr_slave_1 [ 464.542781] protocol 88fb is buggy, dev hsr_slave_0 [ 464.547852] protocol 88fb is buggy, dev hsr_slave_1 [ 464.552932] protocol 88fb is buggy, dev hsr_slave_0 [ 464.557949] protocol 88fb is buggy, dev hsr_slave_1 [ 468.692832] net_ratelimit: 20 callbacks suppressed [ 468.692839] protocol 88fb is buggy, dev hsr_slave_0 [ 468.702855] protocol 88fb is buggy, dev hsr_slave_1 [ 468.707926] protocol 88fb is buggy, dev hsr_slave_0 [ 468.712979] protocol 88fb is buggy, dev hsr_slave_1 [ 468.718043] protocol 88fb is buggy, dev hsr_slave_0 [ 468.723075] protocol 88fb is buggy, dev hsr_slave_1 [ 469.572789] protocol 88fb is buggy, dev hsr_slave_0 [ 469.577895] protocol 88fb is buggy, dev hsr_slave_1 [ 469.972776] protocol 88fb is buggy, dev hsr_slave_0 [ 469.977887] protocol 88fb is buggy, dev hsr_slave_1 [ 473.732788] net_ratelimit: 20 callbacks suppressed [ 473.737850] protocol 88fb is buggy, dev hsr_slave_0 [ 473.742914] protocol 88fb is buggy, dev hsr_slave_1 [ 474.132798] protocol 88fb is buggy, dev hsr_slave_0 [ 474.137903] protocol 88fb is buggy, dev hsr_slave_1 [ 474.143010] protocol 88fb is buggy, dev hsr_slave_0 [ 474.148065] protocol 88fb is buggy, dev hsr_slave_1 [ 474.932779] protocol 88fb is buggy, dev hsr_slave_0 [ 474.937889] protocol 88fb is buggy, dev hsr_slave_1 [ 474.942993] protocol 88fb is buggy, dev hsr_slave_0 [ 474.948052] protocol 88fb is buggy, dev hsr_slave_1 [ 479.092773] net_ratelimit: 20 callbacks suppressed [ 479.097747] protocol 88fb is buggy, dev hsr_slave_0 [ 479.102813] protocol 88fb is buggy, dev hsr_slave_1 [ 479.107906] protocol 88fb is buggy, dev hsr_slave_0 [ 479.112952] protocol 88fb is buggy, dev hsr_slave_1 [ 479.118063] protocol 88fb is buggy, dev hsr_slave_0 [ 479.123112] protocol 88fb is buggy, dev hsr_slave_1 [ 479.972830] protocol 88fb is buggy, dev hsr_slave_0 [ 479.977959] protocol 88fb is buggy, dev hsr_slave_1 [ 480.372791] protocol 88fb is buggy, dev hsr_slave_0 [ 480.377865] protocol 88fb is buggy, dev hsr_slave_1 [ 484.132766] net_ratelimit: 20 callbacks suppressed [ 484.132774] protocol 88fb is buggy, dev hsr_slave_0 [ 484.142927] protocol 88fb is buggy, dev hsr_slave_1 [ 484.532776] protocol 88fb is buggy, dev hsr_slave_0 [ 484.537900] protocol 88fb is buggy, dev hsr_slave_1 [ 484.542980] protocol 88fb is buggy, dev hsr_slave_0 [ 484.548029] protocol 88fb is buggy, dev hsr_slave_1 [ 485.332746] protocol 88fb is buggy, dev hsr_slave_0 [ 485.337935] protocol 88fb is buggy, dev hsr_slave_1 [ 485.343075] protocol 88fb is buggy, dev hsr_slave_0 [ 485.348135] protocol 88fb is buggy, dev hsr_slave_1 [ 489.492763] net_ratelimit: 20 callbacks suppressed [ 489.497804] protocol 88fb is buggy, dev hsr_slave_0 [ 489.502894] protocol 88fb is buggy, dev hsr_slave_1 [ 489.508145] protocol 88fb is buggy, dev hsr_slave_0 [ 489.513196] protocol 88fb is buggy, dev hsr_slave_1 [ 489.518274] protocol 88fb is buggy, dev hsr_slave_0 [ 489.523319] protocol 88fb is buggy, dev hsr_slave_1 [ 490.372775] protocol 88fb is buggy, dev hsr_slave_0 [ 490.377860] protocol 88fb is buggy, dev hsr_slave_1 [ 490.772764] protocol 88fb is buggy, dev hsr_slave_0 [ 490.778029] protocol 88fb is buggy, dev hsr_slave_1 [ 494.532792] net_ratelimit: 20 callbacks suppressed [ 494.537774] protocol 88fb is buggy, dev hsr_slave_0 [ 494.542833] protocol 88fb is buggy, dev hsr_slave_1 [ 494.932759] protocol 88fb is buggy, dev hsr_slave_0 [ 494.937902] protocol 88fb is buggy, dev hsr_slave_1 [ 494.943085] protocol 88fb is buggy, dev hsr_slave_0 [ 494.948280] protocol 88fb is buggy, dev hsr_slave_1 [ 495.732803] protocol 88fb is buggy, dev hsr_slave_0 [ 495.737877] protocol 88fb is buggy, dev hsr_slave_1 [ 495.743012] protocol 88fb is buggy, dev hsr_slave_0 [ 495.748047] protocol 88fb is buggy, dev hsr_slave_1 [ 499.892757] net_ratelimit: 20 callbacks suppressed [ 499.892763] protocol 88fb is buggy, dev hsr_slave_0 [ 499.902789] protocol 88fb is buggy, dev hsr_slave_1 [ 499.907848] protocol 88fb is buggy, dev hsr_slave_0 [ 499.912917] protocol 88fb is buggy, dev hsr_slave_1 [ 499.917964] protocol 88fb is buggy, dev hsr_slave_0 [ 499.923047] protocol 88fb is buggy, dev hsr_slave_1 [ 500.772824] protocol 88fb is buggy, dev hsr_slave_0 [ 500.777934] protocol 88fb is buggy, dev hsr_slave_1 [ 501.172814] protocol 88fb is buggy, dev hsr_slave_0 [ 501.177924] protocol 88fb is buggy, dev hsr_slave_1 [ 504.932770] net_ratelimit: 20 callbacks suppressed [ 504.937790] protocol 88fb is buggy, dev hsr_slave_0 [ 504.942862] protocol 88fb is buggy, dev hsr_slave_1 [ 505.332887] protocol 88fb is buggy, dev hsr_slave_0 [ 505.338024] protocol 88fb is buggy, dev hsr_slave_1 [ 505.343139] protocol 88fb is buggy, dev hsr_slave_0 [ 505.348275] protocol 88fb is buggy, dev hsr_slave_1 [ 506.132882] protocol 88fb is buggy, dev hsr_slave_0 [ 506.138026] protocol 88fb is buggy, dev hsr_slave_1 [ 506.143095] protocol 88fb is buggy, dev hsr_slave_0 [ 506.148112] protocol 88fb is buggy, dev hsr_slave_1 [ 510.292761] net_ratelimit: 20 callbacks suppressed [ 510.292767] protocol 88fb is buggy, dev hsr_slave_0 [ 510.302796] protocol 88fb is buggy, dev hsr_slave_1 [ 510.307878] protocol 88fb is buggy, dev hsr_slave_0 [ 510.312951] protocol 88fb is buggy, dev hsr_slave_1 [ 510.318011] protocol 88fb is buggy, dev hsr_slave_0 [ 510.323094] protocol 88fb is buggy, dev hsr_slave_1 [ 511.172778] protocol 88fb is buggy, dev hsr_slave_0 [ 511.177847] protocol 88fb is buggy, dev hsr_slave_1 [ 511.572832] protocol 88fb is buggy, dev hsr_slave_0 [ 511.577935] protocol 88fb is buggy, dev hsr_slave_1 [ 515.332791] net_ratelimit: 20 callbacks suppressed [ 515.337894] protocol 88fb is buggy, dev hsr_slave_0 [ 515.342940] protocol 88fb is buggy, dev hsr_slave_1 [ 515.732778] protocol 88fb is buggy, dev hsr_slave_0 [ 515.737886] protocol 88fb is buggy, dev hsr_slave_1 [ 515.743107] protocol 88fb is buggy, dev hsr_slave_0 [ 515.748138] protocol 88fb is buggy, dev hsr_slave_1 [ 516.532772] protocol 88fb is buggy, dev hsr_slave_0 [ 516.537865] protocol 88fb is buggy, dev hsr_slave_1 [ 516.542951] protocol 88fb is buggy, dev hsr_slave_0 [ 516.547979] protocol 88fb is buggy, dev hsr_slave_1 [ 520.692850] net_ratelimit: 20 callbacks suppressed [ 520.692856] protocol 88fb is buggy, dev hsr_slave_0 [ 520.702988] protocol 88fb is buggy, dev hsr_slave_1 [ 520.708028] protocol 88fb is buggy, dev hsr_slave_0 [ 520.713081] protocol 88fb is buggy, dev hsr_slave_1 [ 520.718125] protocol 88fb is buggy, dev hsr_slave_0 [ 520.723160] protocol 88fb is buggy, dev hsr_slave_1 [ 521.572761] protocol 88fb is buggy, dev hsr_slave_0 [ 521.577862] protocol 88fb is buggy, dev hsr_slave_1 [ 521.972828] protocol 88fb is buggy, dev hsr_slave_0 [ 521.978000] protocol 88fb is buggy, dev hsr_slave_1 [ 525.732780] net_ratelimit: 20 callbacks suppressed [ 525.732786] protocol 88fb is buggy, dev hsr_slave_0 [ 525.742793] protocol 88fb is buggy, dev hsr_slave_1 [ 526.132794] protocol 88fb is buggy, dev hsr_slave_0 [ 526.137904] protocol 88fb is buggy, dev hsr_slave_1 [ 526.142989] protocol 88fb is buggy, dev hsr_slave_0 [ 526.148028] protocol 88fb is buggy, dev hsr_slave_1 [ 526.932838] protocol 88fb is buggy, dev hsr_slave_0 [ 526.938082] protocol 88fb is buggy, dev hsr_slave_1 [ 526.943182] protocol 88fb is buggy, dev hsr_slave_0 [ 526.948206] protocol 88fb is buggy, dev hsr_slave_1 [ 531.092783] net_ratelimit: 20 callbacks suppressed [ 531.097767] protocol 88fb is buggy, dev hsr_slave_0 [ 531.102815] protocol 88fb is buggy, dev hsr_slave_1 [ 531.107874] protocol 88fb is buggy, dev hsr_slave_0 [ 531.112889] protocol 88fb is buggy, dev hsr_slave_1 [ 531.117925] protocol 88fb is buggy, dev hsr_slave_0 [ 531.122970] protocol 88fb is buggy, dev hsr_slave_1 [ 531.972875] protocol 88fb is buggy, dev hsr_slave_0 [ 531.977985] protocol 88fb is buggy, dev hsr_slave_1 [ 532.372783] protocol 88fb is buggy, dev hsr_slave_0 [ 532.377889] protocol 88fb is buggy, dev hsr_slave_1 [ 536.132794] net_ratelimit: 20 callbacks suppressed [ 536.137891] protocol 88fb is buggy, dev hsr_slave_0 [ 536.142953] protocol 88fb is buggy, dev hsr_slave_1 [ 536.532786] protocol 88fb is buggy, dev hsr_slave_0 [ 536.537990] protocol 88fb is buggy, dev hsr_slave_1 [ 536.543094] protocol 88fb is buggy, dev hsr_slave_0 [ 536.548144] protocol 88fb is buggy, dev hsr_slave_1 [ 537.332782] protocol 88fb is buggy, dev hsr_slave_0 [ 537.337848] protocol 88fb is buggy, dev hsr_slave_1 [ 537.343124] protocol 88fb is buggy, dev hsr_slave_0 [ 537.348160] protocol 88fb is buggy, dev hsr_slave_1 [ 541.492800] net_ratelimit: 20 callbacks suppressed [ 541.497945] protocol 88fb is buggy, dev hsr_slave_0 [ 541.503006] protocol 88fb is buggy, dev hsr_slave_1 [ 541.508131] protocol 88fb is buggy, dev hsr_slave_0 [ 541.513174] protocol 88fb is buggy, dev hsr_slave_1 [ 541.518257] protocol 88fb is buggy, dev hsr_slave_0 [ 541.523303] protocol 88fb is buggy, dev hsr_slave_1 [ 542.372818] protocol 88fb is buggy, dev hsr_slave_0 [ 542.377935] protocol 88fb is buggy, dev hsr_slave_1 [ 542.772934] protocol 88fb is buggy, dev hsr_slave_0 [ 542.778160] protocol 88fb is buggy, dev hsr_slave_1 [ 543.892927] INFO: task syz-executor.5:5930 blocked for more than 140 seconds. [ 543.900367] Not tainted 4.19.80 #0 [ 543.904614] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 543.912572] syz-executor.5 D28480 5930 7413 0x00000004 [ 543.918241] Call Trace: [ 543.920832] __schedule+0x866/0x1dc0 [ 543.924615] ? pci_mmcfg_check_reserved+0x170/0x170 [ 543.929633] ? mark_held_locks+0x100/0x100 [ 543.933898] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 543.938655] schedule+0x92/0x1c0 [ 543.942013] schedule_timeout+0x8c8/0xfc0 [ 543.946204] ? wait_for_completion+0x294/0x440 [ 543.952584] ? find_held_lock+0x35/0x130 [ 543.956731] ? usleep_range+0x170/0x170 [ 543.960707] ? _raw_spin_unlock_irq+0x28/0x90 [ 543.965251] ? wait_for_completion+0x294/0x440 [ 543.969827] ? _raw_spin_unlock_irq+0x28/0x90 [ 543.974370] ? lockdep_hardirqs_on+0x415/0x5d0 [ 543.978948] ? trace_hardirqs_on+0x67/0x220 [ 543.983321] ? kasan_check_read+0x11/0x20 [ 543.987469] wait_for_completion+0x29c/0x440 [ 543.991872] ? try_to_wake_up+0xcc/0xf50 [ 543.995963] ? wait_for_completion_interruptible+0x4b0/0x4b0 [ 544.001769] ? wake_up_q+0x100/0x100 [ 544.005529] kthread_stop+0x116/0x6c0 [ 544.009432] sdr_cap_stop_streaming+0x213/0x330 [ 544.014149] ? mutex_trylock+0x1e0/0x1e0 [ 544.018204] ? sdr_cap_buf_queue+0x280/0x280 [ 544.022802] __vb2_queue_cancel+0xb1/0x790 [ 544.027046] ? lock_downgrade+0x880/0x880 [ 544.031178] vb2_core_streamoff+0x60/0x150 [ 544.035463] __vb2_cleanup_fileio+0x78/0x170 [ 544.039869] vb2_core_queue_release+0x20/0x80 [ 544.044417] _vb2_fop_release+0x1cf/0x2a0 [ 544.048563] vb2_fop_release+0x75/0xc0 [ 544.052434] vivid_fop_release+0x18e/0x430 [ 544.056742] ? vivid_remove+0x460/0x460 [ 544.060787] ? dev_debug_store+0x110/0x110 [ 544.065082] v4l2_release+0xf9/0x1a0 [ 544.068808] __fput+0x2dd/0x8b0 [ 544.072080] ____fput+0x16/0x20 [ 544.075408] task_work_run+0x145/0x1c0 [ 544.079299] exit_to_usermode_loop+0x273/0x2c0 [ 544.083949] do_syscall_64+0x53d/0x620 [ 544.087837] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 544.093148] RIP: 0033:0x459a59 [ 544.096339] Code: Bad RIP value. [ 544.099685] RSP: 002b:00007fda45166c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 544.107437] RAX: 0000000000000004 RBX: 0000000000000003 RCX: 0000000000459a59 [ 544.114741] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 544.122120] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 544.129567] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fda451676d4 [ 544.136903] R13: 00000000004c011c R14: 00000000004d2570 R15: 00000000ffffffff [ 544.144244] [ 544.144244] Showing all locks held in the system: [ 544.150570] 1 lock held by khungtaskd/1037: [ 544.154939] #0: 00000000004651ce (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 544.163646] 1 lock held by rsyslogd/7232: [ 544.167771] #0: 00000000a9508823 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 544.175713] 2 locks held by getty/7354: [ 544.179667] #0: 00000000d881a89e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 544.187953] #1: 000000006573ff04 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 544.196986] 2 locks held by getty/7355: [ 544.200934] #0: 00000000575cc08d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 544.209205] #1: 00000000458ec219 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 544.218107] 2 locks held by getty/7356: [ 544.222054] #0: 000000004e8788c8 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 544.230344] #1: 00000000125d9510 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 544.239231] 2 locks held by getty/7357: [ 544.243232] #0: 000000001c62368b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 544.251471] #1: 0000000088683b98 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 544.260432] 2 locks held by getty/7358: [ 544.264426] #0: 0000000067125dc2 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 544.272692] #1: 00000000d5cfd6ce (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 544.281561] 2 locks held by getty/7359: [ 544.285584] #0: 00000000916ad66e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 544.293901] #1: 00000000a7719b5b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 544.302813] 2 locks held by getty/7360: [ 544.306772] #0: 000000003c8ef128 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 544.315083] #1: 000000006ce70fe7 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 544.323989] [ 544.325712] ============================================= [ 544.325712] [ 544.332745] NMI backtrace for cpu 1 [ 544.336366] CPU: 1 PID: 1037 Comm: khungtaskd Not tainted 4.19.80 #0 [ 544.342837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 544.352162] Call Trace: [ 544.354738] dump_stack+0x172/0x1f0 [ 544.358350] nmi_cpu_backtrace.cold+0x63/0xa4 [ 544.362870] ? lapic_can_unplug_cpu.cold+0x47/0x47 [ 544.367781] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 544.373046] arch_trigger_cpumask_backtrace+0x14/0x20 [ 544.378223] watchdog+0x9df/0xee0 [ 544.381658] kthread+0x354/0x420 [ 544.385017] ? reset_hung_task_detector+0x30/0x30 [ 544.389836] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 544.395362] ret_from_fork+0x24/0x30 [ 544.399162] Sending NMI from CPU 1 to CPUs 0: [ 544.404175] NMI backtrace for cpu 0 [ 544.404179] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.19.80 #0 [ 544.404185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 544.404188] RIP: 0010:rcu_nmi_enter+0xb8/0x100 [ 544.404197] Code: 4c 89 ea 4c 03 63 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 46 4c 89 63 08 48 83 c4 08 5b 41 5c 41 5d 5d c3 53 1e ff ff 41 bc 01 00 00 00 eb b2 0f 0b eb 9f 4c 89 ef e8 5f [ 544.404200] RSP: 0018:ffff8880ae807f30 EFLAGS: 00000002 [ 544.404206] RAX: 0000000000000001 RBX: ffff8880ae823980 RCX: ffffffff815903c1 [ 544.404211] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880ae823990 [ 544.404215] RBP: ffff8880ae807f50 R08: 1ffff11015d04732 R09: ffffed1015d04733 [ 544.404219] R10: ffffed1015d04732 R11: ffff8880ae823993 R12: 0000000000000002 [ 544.404223] R13: ffff8880ae823988 R14: ffffffff88679ec0 R15: ffffffff884dbee0 [ 544.404227] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 544.404231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 544.404235] CR2: 000000c420009e80 CR3: 00000000a8534000 CR4: 00000000001406f0 [ 544.404239] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 544.404243] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 544.404245] Call Trace: [ 544.404247] [ 544.404250] rcu_irq_enter+0xcb/0x110 [ 544.404252] irq_enter+0xa/0xe0 [ 544.404255] scheduler_ipi+0x280/0x5b0 [ 544.404258] smp_reschedule_interrupt+0x78/0x460 [ 544.404261] reschedule_interrupt+0xf/0x20 [ 544.404263] [ 544.404266] RIP: 0010:native_safe_halt+0xe/0x10 [ 544.404275] Code: ff ff 48 89 df e8 72 e5 af fa eb 82 e9 07 00 00 00 0f 00 2d b4 63 56 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d a4 63 56 00 fb f4 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 6e c4 67 fa e8 29 [ 544.404278] RSP: 0018:ffffffff88607cb0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff02 [ 544.404285] RAX: 1ffffffff10e48cc RBX: ffffffff88679ec0 RCX: 0000000000000000 [ 544.404289] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffffff8867a73c [ 544.404293] RBP: ffffffff88607ce0 R08: ffffffff88679ec0 R09: 0000000000000000 [ 544.404297] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 544.404302] R13: ffffffff88724650 R14: 0000000000000000 R15: ffffffff88679ec0 [ 544.404304] ? default_idle+0x4e/0x320 [ 544.404307] arch_cpu_idle+0xa/0x10 [ 544.404310] default_idle_call+0x36/0x90 [ 544.404313] do_idle+0x30c/0x4d0 [ 544.404316] ? arch_cpu_idle_exit+0x80/0x80 [ 544.404319] ? check_preemption_disabled+0x48/0x290 [ 544.404322] cpu_startup_entry+0xc8/0xe0 [ 544.404325] ? cpu_in_idle+0x20/0x20 [ 544.404327] rest_init+0x219/0x222 [ 544.404330] start_kernel+0x88c/0x8c5 [ 544.404333] ? mem_encrypt_init+0xb/0xb [ 544.404336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 544.404339] ? x86_family+0x41/0x50 [ 544.404343] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 544.404346] x86_64_start_reservations+0x29/0x2b [ 544.404349] x86_64_start_kernel+0x77/0x7b [ 544.404352] secondary_startup_64+0xa4/0xb0 [ 544.405194] Kernel panic - not syncing: hung_task: blocked tasks [ 544.695357] CPU: 1 PID: 1037 Comm: khungtaskd Not tainted 4.19.80 #0 [ 544.701819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 544.711143] Call Trace: [ 544.713713] dump_stack+0x172/0x1f0 [ 544.717374] panic+0x26a/0x50e [ 544.720547] ? __warn_printk+0xf3/0xf3 [ 544.724412] ? lapic_can_unplug_cpu.cold+0x47/0x47 [ 544.729323] ? ___preempt_schedule+0x16/0x18 [ 544.733708] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 544.739134] ? nmi_trigger_cpumask_backtrace+0x1c1/0x1f8 [ 544.744571] ? nmi_trigger_cpumask_backtrace+0x1cb/0x1f8 [ 544.749999] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 544.755429] watchdog+0x9f0/0xee0 [ 544.758866] kthread+0x354/0x420 [ 544.762297] ? reset_hung_task_detector+0x30/0x30 [ 544.767123] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 544.772642] ret_from_fork+0x24/0x30 [ 544.777820] Kernel Offset: disabled [ 544.781450] Rebooting in 86400 seconds..