e$P9_RMKDIR(r2, 0x0, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000340)="a9", 0x1}], 0x1) 20:34:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:01 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = dup2(r0, r0) getpeername$tipc(r1, 0x0, &(0x7f00000000c0)=0x250) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@sha1={0x1, "e4cd58414a4f06bf152f099edf2db5ce2ce19108"}, 0x15, 0x3) 20:34:01 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getuid() r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x10000, 0x0) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000180)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) geteuid() getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) setuid(r2) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0xfffffffffffffe5d) 20:34:01 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x60) 20:34:01 executing program 2: r0 = socket(0x200000000000011, 0x0, 0x0) bind$packet(r0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000), 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) listen(r1, 0x6) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x3, 0x2) r3 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r4 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000200)=0x3) r5 = accept(r1, 0x0, &(0x7f0000000080)=0xfe0f) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8) bind$bt_rfcomm(r0, &(0x7f0000000340)={0x1f, {0x8d95, 0x80000000, 0x84, 0x9, 0x6, 0x175a}, 0x1}, 0xa) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000280)={0x2}) 20:34:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") socketpair(0x9, 0x3, 0xfffffffffffffffe, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f00000001c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') fcntl$getflags(r0, 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x84180, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f00000000c0)=""/24}, 0x18) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @local}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd9c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f260819e24134091ec15ef28188179"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') 20:34:01 executing program 5: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x200) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x82, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/24) 20:34:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:01 executing program 4: r0 = socket$inet(0x2, 0x2, 0x2000000088) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x800, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000080)={0x7fff, 0x20, [0x7, 0x6c07, 0x5, 0x800, 0x3ff, 0x200, 0xfffffffffffff000, 0x101]}) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20}, 0x3c) sendto$inet(r0, 0x0, 0x299, 0x8084, &(0x7f0000319ff0)={0x2, 0x4e1f}, 0xa3) sendto$inet(r0, &(0x7f0000000000)="dde20f100fc1c79a93edf7e95ad2a3ceb954bf7b28df4f7b25", 0x19, 0x0, 0x0, 0x0) 20:34:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400000, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x1) write$P9_RREADLINK(r1, &(0x7f0000000080)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) setns(r1, 0x2020000) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x2284, &(0x7f0000000040)=0x1) 20:34:01 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xc, &(0x7f0000000040), &(0x7f0000000000)=0x4) 20:34:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:01 executing program 5: mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x200000c, 0x10, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000007ffc)={&(0x7f0000004000/0x4000)=nil, 0x4000}) 20:34:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x20801, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000200)) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192\x00'}, 0x58) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{}, {}]}) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001540)="f409152ecb4d6c08955c73cbd774421a5c647af943e5c9a39fc04cdb7ae576067d92ded6f9314597bb69c0816724e2b574d46f2a633d7f6d", 0x38}], 0x1}, 0x0) 20:34:01 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x802) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) 20:34:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x3, 0x1) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x8, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) sendmmsg$inet6(r2, &(0x7f0000000700)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x2, @loopback, 0x112}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000140)="2afb4e53df90d1534434b58a3e4f8c394cdfa7a8fd25aa18cd3eafe2beed5ea622aedaa1a9a584155181ec67e0e8283a2cc661d67098a5e0aee966b867bc61717d54526f3c14c8aa21b6318d179d88dbffc6e6e2058d98f5e57a1f7eb26ed811cb3570ed6449a4cc8194f5eeb5c86711846968309cdc8e", 0x77}, {&(0x7f00000001c0)="438cd0296e7d40d8f58ed2cd702ebd2154d569b5879544c3b0b9055ea5253fa9dec656b05bb47010171c100f7724d61e5b2f108b5ef44c68ac169269e70b689177458f583f44acc8f3a2ea1e73a5b25199306eb8daf037220dc5e9cbd019ead1c62a26f576907c0a0f291c179069", 0x6e}, {&(0x7f0000000240)="6884feb104797f9eb12777d6778d270cc06736babd9d7c376068953fdfe6bb3aefe422085913a06a4d9371961a6eb674a5cd22aa3b195ae101591e3f83b8b2f14903d52280b52ebf4ea787c019bc1ae13252e8932353d1c998276846ee78a8ca165e4e5753ed6395f7", 0x69}], 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/546, @ANYRES32=r3, @ANYBLOB="0000000014000000000000002900000034000000faffffff0020000048000000000000002900000036000000af05000000000000c910fe88000000000000000000040000000104010507107fffffff02073d0008000000000000000401ff000000000000"], 0x280}}], 0x1, 0x4048000) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000080)=0x1e) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000480)={0x8000000, 0x3, 0x2}) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = semget$private(0x0, 0x0, 0x10) semctl$GETNCNT(r4, 0x5, 0xe, &(0x7f00000004c0)=""/131) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000580)) 20:34:02 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x10000, 0x1, 0xffffffffffffff7f, 0x40000, 0x0, 0x4, 0x300c2, 0x4, 0x100000000, 0x8, 0x7, 0x3, 0x100000001, 0x3f, 0x800, 0x5465, 0x3f, 0x5, 0x9, 0x75da, 0x3, 0x3, 0x4, 0x0, 0x2, 0x8, 0x9, 0x1000, 0x6, 0x3f, 0x7fffffff, 0x2, 0x6ba, 0x100000000, 0xfffffffffffffffe, 0x274, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x5}, 0x3, 0xbf23, 0x7ff, 0x0, 0x9, 0x5, 0x100}, 0x0, 0xe, r1, 0x1) r2 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="6ad5f8ac8dd832837b8964dfae96e0c6934647b1d1f7bfd71b007c5f9495e2b7b400efed7ecf3ea34c7a2f36073439aad38aad65172614c2d9b09ff869e1b0891f833bd72d9b214d65f2b426b41148fca5aee2cbc6fba7a282d7303784a65d293d9e18ee23087167a93d957d82c75e2e9a6e", 0x72, 0xfffffffffffffff9) keyctl$get_security(0x11, r2, &(0x7f0000000480)=""/146, 0x92) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x5, 0x2) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/keycreate\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x70, r5, 0x404, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x41) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$assume_authority(0x10, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x40400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) signalfd(r3, &(0x7f0000000540)={0x3}, 0x8) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_trie\x00') preadv(r6, &(0x7f00000017c0), 0x1be, 0x0) 20:34:02 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:02 executing program 0: syz_open_procfs(0x0, &(0x7f0000000240)='\x00\x00\x00\x00') open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x1) 20:34:02 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x3c, 0x0, @ib={0x1b, 0x2, 0x7ff, {"122376b602b28601544cf73c2e2b3cb3"}, 0x0, 0x0, 0x2}}}, 0x90) close(r0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r4, 0x200004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 20:34:02 executing program 3: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8002, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x400, 0x9}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x7f, @mcast2, 0x836}}, 0xb3, 0x80000000}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0x4, 0x30}, 0xc) ftruncate(r0, 0x4) fallocate(r0, 0x3, 0x20000, 0x8000fff5) 20:34:02 executing program 0: munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_read_part_table(0x1000, 0x0, 0x0) 20:34:02 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:02 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0xfffffffffffffe69) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0xffffffa2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getuid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) setreuid(r3, r4) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/current\x00', 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x7c) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$key(r2, 0x0, 0x42) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpriority(0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x2, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$EVIOCGPROP(r7, 0xc004743e, &(0x7f0000000300)=""/246) ioctl$EVIOCGREP(r6, 0x40047459, &(0x7f0000000240)=""/174) pread64(r6, 0x0, 0xd2, 0x0) write$binfmt_elf64(r6, 0x0, 0x0) 20:34:02 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) write$binfmt_elf32(r0, &(0x7f0000001300)={{0x7f, 0x45, 0x4c, 0x46, 0xae9, 0x105, 0x88, 0xa14, 0x7fff, 0x3, 0x7, 0x100000000, 0x2ee, 0x38, 0x1ca, 0x0, 0x7, 0x20, 0x1, 0x5b79, 0x8c4b, 0x8}, [{0x6, 0x5, 0x1, 0xce, 0x7, 0x4, 0x101, 0xf9}], "fbd5c86d1111a85a9fb22decf37ab54022b2d95d0dc623492f348c2a8b418a9f1a39b78e79c9e9f26749928ab4f3d5008dd733a9b2c4d0606d9c4ed34dc2022d58155478e347088934b7c394dc14a1e00de9abb50643ae822fdb9dca4a9c6d5701cefc6cf7304cddc2b7274bbe8b10adc5c7b8c7543e26787cb2ddd682fb74c66baf2d66734fbf7f7386c7d78d9dc43e995286ab58949808af53918aec37dc8986", [[], [], [], [], [], [], [], []]}, 0x8f9) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000040)) close(r0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) write$P9_RAUTH(r1, &(0x7f0000000080)={0x14, 0x67, 0x1, {0x0, 0x1, 0x5}}, 0x14) [ 228.783883] audit: type=1326 audit(1560198842.346:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15998 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45c0ba code=0x50000 20:34:02 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:02 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) r2 = socket$inet(0x2, 0x800, 0x0) openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x10000, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000280), 0x5, 0x5) write$tun(r3, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x78) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="021000090200000039bd707600000000241e202ddd6d1cd68405a031d325261ea3972741b80e9d0631ac28cb5a356f41232d5628cb8179bd04dd89febada17b69dac9b682f0e24d6e8d1fcc133e0050f54b2d2a9702beb5354f6fd744806f2bdfc8a5f9f32063a329d7b56fa6c66bfe1287dc9a2a9154ede325fc89a833ac32bf127eecbdf6803f9d14dcd8f4b5de2325e3bd51c6b966a7d6f3a0ea534dba7344c139f42f0870935b1fd69fb53d79e244936fdfd3220a6839670b37ea615e3ff3d8886dccaa1da"], 0x10}}, 0x0) [ 228.944422] audit: type=1326 audit(1560198842.386:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15998 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459279 code=0x50000 20:34:02 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x1000, 0x40, 0x6b, 0x0, 0x9, 0xd9020, 0x8, 0x0, 0x10001, 0x727, 0x6, 0x6, 0x40, 0x76, 0x10000, 0x100000001, 0x2000000000000000, 0x5, 0x1, 0x5fa4, 0x3ff, 0xc7d, 0x100000000, 0x3, 0x7, 0x6, 0x4, 0x4, 0x0, 0x0, 0x10001, 0x1, 0x1ff, 0xffffffffffffffe1, 0x7, 0x0, 0x4, 0x0, @perf_config_ext={0x80000000, 0x7fffffff}, 0x10000, 0x1, 0x8, 0xf, 0x9fcf, 0x1000, 0x80000001}, r2, 0x3, r3, 0x8) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-asm\x00'}, 0x58) dup3(r1, r0, 0x0) [ 229.038405] Dev loop0: unable to read RDB block 8 20:34:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) [ 229.080815] loop0: unable to read partition table 20:34:02 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x30000, 0x2) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x5) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0), 0x4) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)) 20:34:02 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x87}]) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x240400, 0x0) [ 229.117102] loop0: partition table beyond EOD, truncated [ 229.150646] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 229.193053] audit: type=1326 audit(1560198842.406:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15998 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459279 code=0x50000 20:34:02 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000180)={@ipv4={[], [], @rand_addr=0x3de}, 0x7e, r1}) listen(r0, 0x0) syz_emit_ethernet(0xfe27, &(0x7f0000000240)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_emit_ethernet(0x74, &(0x7f00000001c0)=ANY=[@ANYBLOB="aace78aaaaaa0180c200000886dd60d8652b001406aafe80000000000000000000000000004479ae677b6d8e00f8aa00004e2000"/67, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040), 0x4) 20:34:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) [ 229.328511] audit: type=1326 audit(1560198842.406:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15998 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459279 code=0x50000 [ 229.363007] audit: type=1326 audit(1560198842.406:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15998 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459279 code=0x50000 [ 229.409778] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 229.426671] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 229.438904] audit: type=1326 audit(1560198842.406:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15998 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459279 code=0x50000 [ 229.467371] audit: type=1326 audit(1560198842.406:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15998 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459279 code=0x50000 [ 229.475475] syz-executor.3 (16058) used greatest stack depth: 22528 bytes left [ 229.504662] audit: type=1326 audit(1560198842.416:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15998 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459279 code=0x50000 20:34:03 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30}, 0x30) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x4, 0x5b8, [0x200001c0, 0x0, 0x0, 0x20000296, 0x200004a4], 0x0, &(0x7f0000000000), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x10, 0xe80e, 'dummy0\x00', 'veth1_to_bridge\x00', 'syz_tun\x00', 'bcsf0\x00', @empty, [0xff, 0xff, 0xff, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0x0, 0xa25be0a773649a9e], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@local, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x0, 0x0, 0x8917, 'syz_tun\x00', 'team0\x00', 'erspan0\x00', 'bridge0\x00', @local, [0xff, 0x0, 0xff, 0xff], @local, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0x156, 0x18e, 0x1de, [@ipvs={'ipvs\x00', 0x28, {{@ipv6=@loopback, [0xffffffff, 0xffffffff, 0xff, 0xff000000], 0x4e20, 0x87, 0x6, 0x4e21, 0x2d, 0x10}}}, @physdev={'physdev\x00', 0x70, {{'ip6gre0\x00', {0xff}, 'gre0\x00', {}, 0x10, 0xb}}}], [@snat={'snat\x00', 0x10, {{@local}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0xd4, 0x6}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x3, 0x40, 0x0, 'ipddp0\x00', 'dummy0\x00', 'veth0_to_hsr\x00', 'veth1_to_hsr\x00', @remote, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @random="e8e4e724f36b", [0xff, 0x0, 0xff], 0x6e, 0xa6, 0xde, [], [@arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 0xfffffffffffffffd}}}], @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xffffffffffffffff}}}}, {0x0, 0x20, 0xb, 'sit0\x00', 'team_slave_1\x00', 'irlan0\x00', 'bridge_slave_1\x00', @random="b76dccd9b7cf", [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @empty, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0xee, 0x15e, 0x196, [@connlabel={'connlabel\x00', 0x8, {{0x2, 0x1}}}, @helper={'helper\x00', 0x28, {{0x1, 'RAS\x00'}}}], [@arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}, @snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffc}}}], @snat={'snat\x00', 0x10}}]}]}, 0x630) 20:34:03 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) getresuid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000580)=0xe8) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x100000, &(0x7f00000005c0)={'trans=unix,', {[{@uname={'uname', 0x3d, '/dev/loop-control\x00'}}, {@access_client='access=client'}, {@version_L='version=9p2000.L'}, {@posixacl='posixacl'}, {@access_user='access=user'}], [{@uid_gt={'uid>', r2}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'GPL.'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}]}}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0xfffffffffffffff9}, 0xc) madvise(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x64) getsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r7, &(0x7f00000006c0)="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", &(0x7f0000000200)="81a1d5944405c42555b73db653bd046b2929d24668ec207c68d95faa8cb33fc515c9c3de91bc12172a714e7a6057390805f8800f43666ca4c5d84d06c9c1b35088e340b27a17820c362e074fcb0d0bb520752831da768d6bbbf3f0f7fbaff8d6f4cdc201adf2102f03deffd0f068737cbae54c4e754f98f469868f365c5f355de073ec8ef467b89e75b4ae0e6bda88be629c18", 0x7}, 0x20) 20:34:03 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000a00000000000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001052436d6c94e87f5e09786088000000000000000a000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b35b04d7bf10cf4fc419dc966bf198aeb05ff98ccce7fb7de688b940e78a6ffc31b2ec9edca5c20132d622f850b9be2b326211a43096892eea2b6f06396e186b36e966e8883c9753f90a26ec5a931eba9c30b61a8600b6aa0b35756222ebf47d0e8198f85ace09c8f42e1c1cdf8db510a04a07b2164aa29b3d3bc319808c8c281920ac58b670d9250f58af00ee8354cdf97cfbe655138bd"], 0x190) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 20:34:03 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet(0x2, 0x2000000000000003, 0x6) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x1a6) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@broadcast}, 0x0, @in=@dev}}, 0xe8) setsockopt$sock_linger(r2, 0x1, 0x2f, &(0x7f0000000200), 0x8) 20:34:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x27d, 0x8000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000f00)=@nat={'nat\x00', 0x1b, 0x5, 0x6e8, 0x1b0, 0x508, 0x508, 0x3f8, 0x508, 0x618, 0x618, 0x618, 0x618, 0x618, 0x5, &(0x7f0000000080), {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, [], 0x20}, [0xff, 0xffffff00, 0xffffffff], [0xffffffff, 0xff, 0xffffffff, 0xffffff00], 'team_slave_0\x00', 'ip6erspan0\x00', {0xff}, {0xc58fcfb0328760cd}, 0x2f, 0x1, 0x4ffead8e12db1323, 0x4}, 0x0, 0x188, 0x1b0, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d3, 0x4d6, 0x6, 0x7fff, 0x2}}, @common=@srh1={0x90, 'srh\x00', 0x1, {0x3a, 0x80000000, 0x7ff, 0x7, 0x10d0, @ipv4={[], [], @rand_addr=0x3}, @remote, @empty, [0xed3eb6f17e3a4c8c, 0xff000000, 0xffffffff, 0xff], [0xff, 0x0, 0xff, 0xffffffff], [0xffffffff, 0xffffffff, 0xff, 0xffffffff], 0x40, 0x1013}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x8000, 0x401, 0x4}, {0x1f, 0x6, 0xb331}}}}, {{@ipv6={@rand_addr="c6d713984e4f72b03bb14087048df082", @remote, [0xff000000, 0xffffffff, 0xffffff00], [0xffffffff, 0x9c54fa74e2a71f9, 0xff000000, 0xffffffff], 'veth0_to_bridge\x00', 'nr0\x00', {0xff}, {0xff}, 0x4, 0x5, 0x0, 0x2}, 0x0, 0x200, 0x248, 0x0, {}, [@common=@rt={0x138, 'rt\x00', 0x0, {0x800, 0x2, 0x8, 0x9, 0x1, 0x4, [@loopback, @rand_addr="a50a2437b3787d9ab3f74acc66aa1e4e", @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, @mcast2, @local, @loopback, @rand_addr="5a0387d6a00352b9b42a5c2f7ca652cb", @empty, @rand_addr="92e3c4e601a9220a6b68fc83c27b2629", @ipv4={[], [], @remote}, @mcast2, @empty, @rand_addr="2de58dcf55c1aa557be9bbe72ff997a1", @mcast1, @mcast1], 0x5}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x10, @ipv4=@loopback, @ipv4=@loopback, @port=0x4e24, @icmp_id=0x65}}}, {{@ipv6={@local, @empty, [0xff000000, 0x0, 0xffffffff, 0xffffffff], [0xff, 0xffffff00, 0xff, 0xffffff00], 'hwsim0\x00', 'veth0_to_team\x00', {}, {0xff}, 0xff, 0x200, 0x1, 0x40}, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv4=@local, @ipv6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @port=0x4e22, @gre_key=0x67}}}, {{@uncond, 0x0, 0xc8, 0x110}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@remote, @ipv4=@multicast1, @icmp_id=0x66, @gre_key}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x748) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000740)='bcsf0\x00') [ 229.553173] audit: type=1326 audit(1560198842.426:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15998 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459279 code=0x50000 [ 229.578669] audit: type=1326 audit(1560198842.436:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15998 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459279 code=0x50000 20:34:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) sendmsg$sock(r1, &(0x7f0000000740)={&(0x7f0000000100)=@generic={0x3, "cac02b4bc2a56b10d243b15ae765d9146f2eb4385dfe8f2883fa8154d2472b18e8fc105a065fd06e297fce0cb01f765bddbe1fc278a73fc27a4f4c316ea81a1988ea451c24e3696fe5a4511c16e4c8cb1d4ece0750ecfc94688240bcf68e2bec7256b98c0a64712bc056f0280d11f0fdab1fd0ff26130f072163e241e2f6"}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000180)="141399c48089e3385ac8bb608a1700ebacfff87914735dd7c51a8c2f964ea643b6d890d7c57eef42af77718d7f441a9d50be2070acf9552fb456a3a7a51f030899ea26479fecf01a87cdd028e67fcf594421a00499bbb3923f868e7d", 0x5c}, {&(0x7f0000000200)}, {&(0x7f0000000240)="7714c3fa57018fa179685e1075b1858615dbe3ea8b440568c34e2b16623d114135a81d7eabaa075b94cc2dd7616483be38a8f89e37dbaa483074a0dda49badaa279b90381f429d7c186d2a085c79cee8b2847ea98868fac4c5847cab4f1dea245df1fdbc2a51ecda80a13d5d0298ad9791716a67a337d2a242115f38c209e92d39d2b9289d5b9a334e4ac84683a8fdf977f859aa1e5f68889684eaebfaa0af5cc83e3a3cd2b05e33efeab2980802c3d32d24b086897b052847723ef3a395f925a5f73c30a126c58f76ac43c3b1d6c8c274728beba00985b8df037c21fb0b00e69fa7", 0xe2}, {&(0x7f0000000380)="c3b7372018e736c172cd431b12f063f851c3e7d93bc99ad6267c72e1e8d582d54218ec662a0d079caf7d98bec91ec79ad222f44ba31b32cda64a8e4ed85d75f450d06c76559f21a0524cfa778287b44e6910599352d8515046609079411452fe5a324d8c81a4ab755fddb73fd48dedaf99ac285807baf4dc1c477042f48aebc7f96935fd761d28b0de8f92efe59792", 0x8f}, {&(0x7f0000000440)="9b6e6d6bfe894d5a5202a144ad19fe1e377b56818eedfb67e8bc6155b4aaf12de15e6633c457ddaf5dcae522d9792b1088fef162a90bbd19579c8ab88a89031f074d09739cde2426a63d9c0954d7a591e9f012908cc1aae5e622395fbe715e1d54bb631f997d3de02d339f33e1dbc81796a9dcaf9bf2fb3214", 0x79}, {&(0x7f00000004c0)="87fdd0a6aeed77832092d58667089c9cd39c521a7e486453c985822574ebf55b32599a5da41bfd79b34a52880e7083470e0a4a4a9382cbe836cf1d646bfefbd1b2a5a8a773141b75a3293a3c7341166e78cfd537e1827ad1a8ab9467019412fdc8e43de0c1ca513c925c154154cc02cfe4ee3e3b2690b7182fa661a25d4c25de162fcc622d84288d7f66c120c43a0d63423db4b70e679c45cd630c0c93fafb407c89c4474fac1c33252a9aa58e844c9974f7476d464e896f8f3d25c661e1498eab4173f0d60c7b9c", 0xc8}, {&(0x7f00000005c0)="e176489a47e2db76dea0a88b6675358bbbb718a704ad8baa48d4fb504b5396abd81eb8dc61fd1a0b926c9e83aaa2417b3757258c4a52414450ad1b93c8aa3ca258fa5230e39b385b0496999f0f8c2255a9b38bb823254fa17b61f18757f65e7fa8ca6c2826fd591f2ad4515ec02b8a1315fc80fb6fe7178f032997feede341d0040412211561765cdfc88cfc523615f77e5885327a67ca92bd111c4b14a7ce270749ea6994d20afd2a47ecd758d842daaeff1eebca6ab7113287c9ace9e5d6f0eff136a99bd267ff38d88323492ed1b2bb9747c2c2b1ac4e0d4b6040ee9513c49d85d40f4d3ed7bc11d3d051c8a8840752e563113a48", 0xf6}, {&(0x7f00000006c0)="c64e097d4bab859508566c3455a4aba9ed4d29a34c905688d15bdf2df43f55114c0e1489f0c38fddbe595c551dabaae2c32a7cde384efe9494800e910bef48ecf0d2d1480180f0d8023c4866c47d51cc4f9e7e3dd46755f9f4850aba6c9e5762519f0d3ceeb049fce750950cfbcbe18a", 0x70}, {&(0x7f00000007c0)="1318a04465cb04cce6975c7773e53871f73e686a40499cb4dd4bb02f26ac064699dfde74e4faabdba812321c0bcd3f0f1ce40c9c5f86f5220516bae41106756f15992af49cf33e459cee6d68a24544668ba32bcae81e8365f9d4b401a5b552b2e3b9023a5cedec085c407b0f734cf4f8c673680e26fdaeb63a9187e42f8fc532e999", 0x82}, {&(0x7f0000000880)="3198d2d7327cb87ddc250ce324bec65c1ee733f528874aca017d663924ad4de3e22e3582642106d92d16daa8090eb01bc2debf226aa8f66378e953e1edfcd022d8b999d9dee1f2fa8ee05ea209d3f48c18e1198388535d8e3b7a426186264652ba4bcbf3a7376d27d9ca3b3004ca49cc418ecced96e27df70bdd058271796c00148e544297a513b586bcbfd6aac478631ea865c901a3eee31268e21339baa0c266d6e7061e9000dc4240cef0d582366e372a8f76e06e36b2a46d4e9b3f39b550ea3e184755", 0xc5}], 0xa, &(0x7f0000000a40)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x3f}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xaf}}, @mark={{0x14, 0x1, 0x24, 0x8000}}], 0x78}, 0x4040894) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x2}) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000780)=0x32, 0x4) socketpair(0x11, 0x4, 0x1, &(0x7f0000000200)) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:34:03 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x9) clone(0x1000108, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() readv(r1, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x4000000000001f) ftruncate(r1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x2, {}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0x0, 0x8, 0x5, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4}) 20:34:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0xfffffffffffffffd, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1) 20:34:03 executing program 2: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) write$P9_RFSYNC(r0, &(0x7f0000000000)={0x249, 0x33, 0x1}, 0xfffffffffffffe10) sendfile(r0, r1, 0x0, 0x666d) 20:34:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") pipe(0x0) write(r0, 0x0, 0xfffffffffffffd6a) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0xffffff92, 0x0, 0xffffffc0, 0x0, @tick, {}, {}, @quote}], 0xff33) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x25, 0x3, 0xf039, 0x800, 0x2}, 0x14) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000100)={0x2, 0xffffffff, 0x2, 0x7, 0x4, 0x3ff}) 20:34:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:03 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x41000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x201, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) perf_event_open(&(0x7f0000000140)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 20:34:03 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3) 20:34:03 executing program 0: socketpair$unix(0x1, 0x100000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r2 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) io_setup(0x722, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x3000000, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0}]) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x3, 0x37, [], 0x1, &(0x7f0000000000)=[{}], &(0x7f00000000c0)=""/55}, &(0x7f0000000180)=0x78) 20:34:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:03 executing program 4: r0 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x800) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000240)='net/netfilter\x00') ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000280)={0x3, 0x2, 0x1e, 0xfffffffffffffffe, "a2ca066eae41760e97709d55118a36102846d794f1b1a605acd9aaaf6fd29f0d"}) r3 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3, 0x880) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000180)=""/178) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) tee(r0, r4, 0x6, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x7, 0x100000000000913, 0x6}, 0x2c) ioctl$int_out(r5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x2, &(0x7f00000000c0)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x2, [0x0, 0xffffffffa0008000]}, 0x2c) 20:34:03 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x22400, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000140)=r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = dup2(r0, r3) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r4, 0x0, &(0x7f0000000340)=""/184}, 0x18) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0xfffffffffffffffd) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f0000000200)='./file0\x00', 0x800, 0x1, &(0x7f0000000280)=[{&(0x7f0000000240), 0x0, 0x80000001}], 0x10, &(0x7f0000000400)={[], [{@fowner_gt={'fowner>', r6}}, {@hash='hash'}, {@obj_type={'obj_type', 0x3d, 'user\x00'}}]}) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r7, &(0x7f00000017c0), 0x199, 0x0) 20:34:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000100)={@local, @local, 0x0}, &(0x7f0000000140)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@local, @in=@rand_addr=0x4, 0x4e23, 0x1f, 0x4e21, 0x8, 0x2, 0xa0, 0x20, 0xff, r4, r5}, {0x3ff, 0x81, 0x1, 0x7fff, 0x1f, 0x20, 0xdb, 0xb2be}, {0x40, 0xfffffffffffff001, 0x8, 0x6}, 0x6, 0x6e6bb5, 0x2, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, 0x3, 0x6, 0x8, 0x2}}, 0xe8) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001000)={"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"}) 20:34:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200000, 0x0) connect$caif(r1, &(0x7f0000000080), 0x18) ioctl(r0, 0x1000008914, &(0x7f0000000180)="114393afe555491fa7cade150c75e0985d2eb55ec0af0927a233bfa37bfea50175ec57dcc1fc4c5565fa5cf62a990a2011bf95c49a63ca02e1e8142f4b6351d3d863eafec69e6205b71aedee") getrandom(&(0x7f0000000340)=""/25, 0x19, 0x2) 20:34:04 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{&(0x7f0000002e40)=@un=@abs, 0x80, 0x0, 0x84}}], 0x1, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1000000000001, 0x0) r1 = accept4$netrom(0xffffffffffffff9c, &(0x7f0000000000)={{0x3, @bcast}, [@remote, @netrom, @bcast, @rose, @remote, @null, @bcast, @default]}, &(0x7f0000000080)=0x48, 0x800) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) writev(r0, &(0x7f00000023c0), 0x1000000000000252) 20:34:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e21, @multicast2}}) r1 = syz_open_pts(0xffffffffffffffff, 0x40) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x19) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) 20:34:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x5, &(0x7f0000000080)="c0dca5055e0fcfec7be08e") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x2b0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 20:34:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:04 executing program 5: r0 = socket(0x13, 0xffffffffffffffff, 0x400000001) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x14, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 20:34:04 executing program 0: r0 = socket$inet(0x10, 0xa, 0xc) listen(r0, 0x8) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="24000000050607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 20:34:04 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2000000008, 0x4, 0x4, 0x3fffffffbffffffd, 0x0, 0xffffffffffffff9c}, 0x1c) r1 = dup(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) getsockopt(r3, 0xffffffff, 0x40, &(0x7f0000000080)=""/101, &(0x7f0000000100)=0x65) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r4, @ANYBLOB="20002dbd7000fddbdf250b00000014000200080004000900000008000d0000000000080004000200000058000100080005000200000014000300fe8000000000000000000000000000bb08000b00736970000c00070008000000320000000800050004000000080002000c00000014000300ac1414aa0000000000000000000000002800010008000800020000000c0006006c626c6372000000080004004e200000080009002e00000008000400ff0f000012e41825b27b32"], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 20:34:04 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x140000000000000, 0x200000) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000080)={0x10001, {{0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, [], 0x14}}}}, 0x88) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x80083313, 0x0) 20:34:04 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x100, 0x0) ioctl$TIOCSBRK(r0, 0x5427) syz_emit_ethernet(0x300b00, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300030, 0x3a, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x0, 0x60], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 20:34:04 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x81, 0x109040) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "c2513535f6785953", "845b9d5fb348956b6e358b2283894b01", "4ba3d76d", "1cb79a01c5f5fc64"}, 0x28) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000380)=""/175, 0xaf}], 0x1) readv(r1, &(0x7f0000000580), 0x46) 20:34:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:04 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r0, 0x0, 0x13b) [ 230.800162] net_ratelimit: 23 callbacks suppressed [ 230.800169] protocol 88fb is buggy, dev hsr_slave_0 [ 230.810301] protocol 88fb is buggy, dev hsr_slave_1 20:34:04 executing program 2: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="164288a87092"], 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:34:04 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x2000000000, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 20:34:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) close(r0) 20:34:04 executing program 0: openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x50000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x2000000000, 0x800000000105082) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x10200000e) 20:34:04 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 20:34:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:04 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@nls={'nls', 0x3d, '.efault'}}]}) 20:34:04 executing program 5: 20:34:04 executing program 4: 20:34:04 executing program 2: 20:34:04 executing program 5: 20:34:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:04 executing program 3: 20:34:04 executing program 2: 20:34:04 executing program 3: ppoll(0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x0, 0x0) 20:34:05 executing program 0: sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'e \x00\b\x00', 0x4}, 0x18) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x480401, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000200)="e5a2c82c07f6e2763f21fdcb5721bf8e", 0x8) r3 = socket(0xa, 0x1, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x0, 0x6, 0x0) unlinkat(r2, 0x0, 0x200) ioctl(r3, 0x8916, 0x0) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, 0x0) close(r1) socket(0x1a, 0x800, 0x4) bind(r0, &(0x7f00000003c0)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x1ff, @rand_addr="4ee8aee593d4134e45a0d24136d422bd", 0x2}}, 0x4c) geteuid() getpgrp(0xffffffffffffffff) getuid() gettid() fstat(r4, &(0x7f0000001ec0)) sendmsg$netlink(r5, &(0x7f0000001fc0)={&(0x7f00000004c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x20000001}, 0xc, &(0x7f0000001d00)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="01128a6089be1f89f90fa136db6907ea353a6407000000000000001870bf03fa579207769f6a853d37abbb033d2db9bcea45036b5693a788a37b9165a06faa5f3c222a5e0d928a8f97dfe1a181505f5c512fa591c9a5211d7faf6af3eecc1442655c817e6813d6345f96ec39efec44c688a283d46000a9281224d25ebd107bf9249ac011"], 0x1}], 0x1, 0x0, 0x0, 0x4004}, 0x20000000) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) stat(&(0x7f0000000380)='./bus\x00', 0x0) setgid(0x0) ftruncate(r6, 0x88001) sendfile(r1, r6, 0x0, 0x800000000024) 20:34:05 executing program 5: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) 20:34:05 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe16, 0x0, 0x0, 0xffffffffffffffa0) shutdown(r0, 0x1) 20:34:05 executing program 2: 20:34:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:05 executing program 3: 20:34:05 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xd894) fallocate(r0, 0x0, 0xd894, 0x10000) 20:34:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:05 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='wlan1eth0cpuset}\x00', 0x0) r1 = socket(0x18, 0x0, 0x3) dup2(r0, r1) 20:34:05 executing program 4: keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0x0) 20:34:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 231.680689] protocol 88fb is buggy, dev hsr_slave_0 [ 231.686313] protocol 88fb is buggy, dev hsr_slave_1 [ 231.760141] protocol 88fb is buggy, dev hsr_slave_0 [ 231.765388] protocol 88fb is buggy, dev hsr_slave_1 20:34:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) 20:34:05 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 20:34:05 executing program 5: r0 = socket(0x10, 0x80002, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x7530}, 0x10) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x1}, 0xc) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:05 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x27) sendfile(r0, r0, &(0x7f0000000000)=0x48, 0x0) 20:34:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:05 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000018c0)={'vlan0\x00', 0x200009813}) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000300)=""/117, 0x75}], 0x1) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fstat(r0, &(0x7f0000000480)) tkill(r1, 0x15) 20:34:05 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="d8e924781665e9783c3cca520e99", 0x0, 0x4ee9}, 0x28) 20:34:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) [ 232.160145] protocol 88fb is buggy, dev hsr_slave_0 [ 232.160167] protocol 88fb is buggy, dev hsr_slave_0 [ 232.165265] protocol 88fb is buggy, dev hsr_slave_1 [ 232.170374] protocol 88fb is buggy, dev hsr_slave_1 20:34:05 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0xffffff9c}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xe7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x100000000000000, 0xe, 0x0, &(0x7f0000000180)="b0ea1f4d6bb01ebbbbc60e391933", 0x0}, 0x28) 20:34:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0x40046205, 0x0) 20:34:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="7f450c4607ff0400060000000000000003000300ffffff7f7c01000000000000400000000400000002030000000000008b880000070038"], 0x37) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) [ 232.318244] binder: 16317:16326 ioctl 40046205 0 returned -22 20:34:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x377, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}}, @icmp=@parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @empty=0x1000000}}}}}}, 0x0) bind(r0, &(0x7f0000000200)=@in={0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0xa5) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e008dd) 20:34:06 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @loopback, 0x0, 0x1, 'sh\x00'}, 0x2c) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @broadcast, 0x0, 0x200000001, 'lblcr\x00'}, 0x2c) 20:34:06 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000100)={&(0x7f0000000140)=""/4096, 0x1000}) 20:34:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x5, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000063fab01004000002b1f000b00000065750ede825e459f0f060000006d0c01008937702d8f03dbc1ec442a9523b12ed90920a915932f764b26916a98b7ff7189c3f73b2cbdae69c720e6ff0000000004710e13"], 0x55) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "323a4f0a7ad97e2199f4bf7fc4122eeb396e89"}) 20:34:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 232.515034] IPVS: set_ctl: invalid protocol: 2 112.0.0.0:4609 20:34:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc), 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:06 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000180c0f420f8da000a0000000063001079007e008100cd4177620003000000b2270101000002a8d07a2acd2b9c339aceba7f092a9ca9"], 0x1}}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:34:06 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000000)={@empty, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0xffff8000, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 20:34:06 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000), 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=ANY=[@ANYBLOB="7f000001000000000000000000000000000000006c0000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e6ffffff000000000000000000000000000000000000000000000000000000000000000000000000020040000000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4542f9e245145e3000000000000"], 0x1}}, 0x0) 20:34:06 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x5, 0xffffff80, 0x0, {}, {}, {0x0, 0x0, 0x3}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "21539e452d4fbc9d54ab43c46f88801b16d3854694b061d59edb0cb0b6bd0de9714d53bfad250a3caccbdd690e7e514d0ac598b2bd03bdd23f44615bc9516ac3"}}, 0x80}}, 0x0) 20:34:06 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b4000000000000eed5000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r1 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000600)=r0, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000071c0)="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", 0xcfa}], 0x1}, 0x0) 20:34:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000280)={0xa0, 0x4, 0x1, 0x7f, 0x6, 0x401, 0x2d, 0x8}, 0x0, &(0x7f0000000300)={0x5, 0x7fff, 0x1, 0x5, 0x0, 0x1f, 0x1fffc0, 0x63}, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f00000003c0)={&(0x7f0000000380)={0x288f}, 0x8}) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000240)=@gcm_128={{}, "183639469f2879f8", "41728dc0e5ec8c08e3925e5960a37e7f", "5a12299d", "04715ca55be096f6"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000540)='cgroup.con\x9c\xcec\x00&\xaf\x9b6\xbc\x05x\x94<\xfab\x9d=\x13 \x8b\xd7/\xd0\xbe\n\xa1\x16\x83\xd9Yyv_\xcc\xb1q&>\x17\xc6H\xa1\x91\\V\xc61\x94\xdeV}\xf6\nO\x89\xb6_xb\t\t\x997\xe4\x8a\xbd3\xb8\xabFv\xed,&\xbc\x99+\xaa\xce\xc9\xd8V\xdd\x00S%\xde\xe3\x1b\xf5\x89\xe16xm>\xc6\xae\xa3\\e#RB#J\"\\\x96P\x15\xd3\x92\xea@\x1d\x9b,\xb4\xffd\xfcz`\xd5\x81\xcf\x11\x83ro\x01Z\xbac\xe6\xf7\xf6\x1b\x12\x11\x1e\xef\xf4^\xaa\xc1D\xb4\xa5\xc4\xeb\xbd\x1fP\xfe\x00\xd7@@\t\xf2\xe2\xdb\xe3(\x92\xce\x1c=1\v0\xd2\xdfE\xa9\xcdD~X\xe3H\x8c\xaa\x13Fu\'\x12]\x8c\x06TA\x86\xbd\xdf5\xe3j\xa0\x00V\xbd\x92U\xbb_;\xb6\x97\x16\x98\x9d!#\xaa\xe5\xd9`\xfc\x94t\x98 \x9eE\x830xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$FUSE_ENTRY(r1, &(0x7f00000002c0)={0x90}, 0x90) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x20000000002, 0x0) 20:34:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x200000001ffffe, 0x101002) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$evdev(r0, &(0x7f0000000200)=[{{}, 0x14}, {}], 0x30) 20:34:06 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xd0, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}}, @icmp=@parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @empty=0x1000000}}}}}}, 0x0) dup(r0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e0091f) 20:34:06 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc), 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) close(r0) 20:34:07 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:07 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000040)='.\x00') 20:34:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:07 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x9, &(0x7f0000000040)) 20:34:07 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000700)="8000000038fc000019000300e60100006c000000010000002904000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 20:34:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_mreqsrc(r1, 0x0, 0x25, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) fcntl$setstatus(r1, 0x4, 0x42803) 20:34:07 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x19}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) 20:34:07 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:07 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) [ 234.196959] EXT4-fs (loop4): Unsupported filesystem blocksize 524288 (1065 log_block_size) [ 234.334237] EXT4-fs (loop4): Unsupported filesystem blocksize 524288 (1065 log_block_size) 20:34:08 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0xc7, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}}, r1, 0x2}}, 0x42b) close(r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) 20:34:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) socket$inet6(0xa, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:08 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000200)={{0x2, 0x0, @empty}, {0x0, @local}, 0x0, {0x2, 0x0, @dev}, 'veth1_to_hsr\x00'}) r1 = socket$inet6(0xa, 0x800000100000002, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x63, 0x0}}], 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @loopback}, {0x20000000304, @link_local}, 0x100000000002, {0x2, 0x0, @remote}, '\x9f \xba\x19P\x00\xed\xff\x00'}) 20:34:08 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)) 20:34:08 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:08 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000001a008100a00f80ecdb4cb9040a4865160b000000d4126efb122401005200000040d819a9ffe200000000", 0x2e}], 0x1}, 0x0) 20:34:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) socket$inet6(0xa, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0800a1695e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0xf97}, 0x1c) listen(r1, 0x0) 20:34:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 234.877173] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.3'. 20:34:08 executing program 5: syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 20:34:08 executing program 0: creat(&(0x7f0000000040)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') 20:34:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) socket$inet6(0xa, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 20:34:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:08 executing program 0: 20:34:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x0, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:08 executing program 4: 20:34:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 235.361584] XFS (loop5): Invalid superblock magic number 20:34:09 executing program 4: 20:34:09 executing program 0: 20:34:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x0, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:09 executing program 5: 20:34:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x0, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:09 executing program 4: 20:34:09 executing program 0: 20:34:09 executing program 5: 20:34:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:09 executing program 0: 20:34:09 executing program 4: 20:34:09 executing program 5: 20:34:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, 0x0) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:09 executing program 0: 20:34:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:09 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x1c, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) 20:34:09 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_hci(r0, 0x84, 0x14, &(0x7f0000000080)=""/4096, &(0x7f00000010c0)=0x1000) [ 235.850188] net_ratelimit: 16 callbacks suppressed [ 235.850194] protocol 88fb is buggy, dev hsr_slave_0 [ 235.860287] protocol 88fb is buggy, dev hsr_slave_1 20:34:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 235.920132] protocol 88fb is buggy, dev hsr_slave_0 [ 235.925317] protocol 88fb is buggy, dev hsr_slave_1 20:34:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0500004f8a00"/16, 0x10) 20:34:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:09 executing program 4: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x2200000001fffc, 0x0) 20:34:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) epoll_create(0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0500004f8a00"/16, 0x10) 20:34:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, 0x0) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0)=0x400100000005, 0x2b0) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x4400) 20:34:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x6, 0x4, 0x20000000000005, 0x0, 0x0}, 0x2c) r1 = dup(r0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x1) pkey_alloc(0x0, 0x2) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) 20:34:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, 0x0) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x4000000000003, 0x7, 0xffffffffffffffff}, 0x14}}, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x2240, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r2, 0x701, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x84}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x100000000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40080) [ 236.320150] protocol 88fb is buggy, dev hsr_slave_0 [ 236.320201] protocol 88fb is buggy, dev hsr_slave_1 [ 236.325313] protocol 88fb is buggy, dev hsr_slave_1 20:34:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dc00025e0b01047be070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @dev={0xac, 0x14, 0x14, 0x19}}, 0x40b) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x200, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000140)={r4, r0, 0x1afb}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x14) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000080)={@multicast2, @loopback, @loopback}, 0xc) [ 236.400133] protocol 88fb is buggy, dev hsr_slave_0 [ 236.405301] protocol 88fb is buggy, dev hsr_slave_1 20:34:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:10 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$int_in(r0, 0xfffffffffffffffd, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0x0, 0x1800}], 0x1, &(0x7f0000000280)={0x77359400}) 20:34:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:10 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2800, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000040)=0x1) prctl$PR_SET_MM(0x23, 0x20008000000005, &(0x7f0000ffb000/0x1000)=nil) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) 20:34:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:10 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:10 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 237.040204] protocol 88fb is buggy, dev hsr_slave_0 20:34:10 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x100a004, 0x0) prctl$PR_SVE_SET_VL(0x32, 0xe001) 20:34:10 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 237.098226] kauditd_printk_skb: 63 callbacks suppressed [ 237.098236] audit: type=1400 audit(1560198850.666:164): avc: denied { execstack } for pid=16683 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=process permissive=1 20:34:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:11 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x80}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000e80)="ba", 0x1, 0x0, 0x0, 0x0) 20:34:11 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xfffffffe, 0x2, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x8}]}}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bridge0\x00', 0x4000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="151275aa301945af894dd5146b306389", 0x10) 20:34:11 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0b") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:11 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000100)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0xffffffffffff68ac}, 0xc) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000001c0)={0x3, &(0x7f00000000c0)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000200)={r3, 0x8}) ioctl$int_in(r0, 0x805473, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r4}) close(r0) 20:34:11 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getpeername(r0, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000000c0)=0x80) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, '\x00', 0x1}, 0x18) recvfrom$rxrpc(r1, &(0x7f0000000480)=""/90, 0x5a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4004800) unshare(0x1fffd) accept4(r1, 0x0, &(0x7f00000003c0), 0x800) 20:34:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0b") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x12000, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000440)={0x5, 0x38, "49bc24739a4007f3b43c5fc84c6b5aeae4275e4574609e0b5621cd50e713f3590d8c6f9ebaf5e9008671068be35d68af6d9ce842ca2c00a8"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000540)={0x1, 0x0, @ioapic={0x0, 0x5ca}}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9c2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x39}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008004) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x200000, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x9) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$setsig(r2, 0xa, 0x7) socketpair(0x9, 0x3, 0x90a, &(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)={0x1, [0x0]}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000380)={r7, 0x2, 0x7, 0x7, 0x1, 0x20}, 0x14) 20:34:12 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ad1cb12b49efaaaaaaaaaabb86dd6008de0610073a00000000000000000000c8f2ffe0000002ff0200000000210000000000000000018000907800d20000609433df000000000000000000000700000000000000008b0000000001d972c02b7ce3c38299708cfdbb65c47aa9ecc9c7dd1b2e5fed3fde5641060b9ddf1e52059b809b520c15ab5ab0e8b0a31f6ce8190bb5ff000000d98afae828086b4e8e90493c0b358b10c9c04eae6d742a9990bcfa3efa97202e027bd59cbf6b9e359f6cc75e3283405feba726626da371d9db4e9073ce0305e6a9461cb266b804562694102a5cc72714dbc61c2e29548136f6497e"], 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$getflags(r0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x80, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0), 0x10) 20:34:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0b") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:12 executing program 5: socketpair(0x13, 0x0, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x8, &(0x7f0000000580)={'trans=unix,', {[{@aname={'aname', 0x3d, 'posix_acl_accessposix_acl_accessvmnet1mime_typeself'}}, {@cache_none='cache=none'}, {@access_uid={'access', 0x3d, r2}}, {@posixacl='posixacl'}], [{@fowner_lt={'fowner<', r3}}, {@dont_appraise='dont_appraise'}, {@smackfsfloor={'smackfsfloor', 0x3d, '}4-!)posix_acl_access'}}, {@dont_measure='dont_measure'}]}}) getsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f0000000240)=""/213, &(0x7f0000000040)=0xd5) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080), &(0x7f0000000100)=0x8) epoll_create1(0x0) epoll_create1(0x0) pipe(&(0x7f00000001c0)) socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) 20:34:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:12 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:12 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7b") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000480)=0x1, 0x4) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_POLL(r2, &(0x7f00000000c0)={0x18, 0x0, 0x4, {0x6}}, 0x18) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21}, 0xfffffffffffffd04) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) accept$ax25(r3, &(0x7f0000000140)={{0x3, @bcast}, [@remote, @default, @default, @netrom, @netrom, @rose, @netrom]}, &(0x7f00000001c0)=0x48) 20:34:12 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca500000000ec7be070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x98) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)) 20:34:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7b") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000006) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = dup2(r1, r1) getsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x2, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffe}, 0x20) 20:34:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = getpid() ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x24100, 0x0) setpriority(0x2, r1, 0x0) 20:34:12 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x50000, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000240)=0xffffffff80000001, 0x4) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000180)="4f694a151a2cbfcb5b00dfe8e19dc8822fe3459fd43bb8b7e96509b44b4b507929fd78a4e5e5265b9c7dd557bcc778eeae2824f31c46d82005aeca48e515b98e603d0041adb614a1e92cc5b13ead778b51ac9942b3a75e5899e2f0f591f459f4fdd40263cd85d2787a41c1fd45", 0x6d) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede-generic)\x00'}, 0x58) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x4, 0x81, 0x100000001, 0x5, 0x11, 0x3f, 0x0, 0x7, 0x9, 0x7, 0x6}, 0xb) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000040)=0x7) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="06c6e3f2aecbd78b72276df0206801c5bfdb17e2c4e6a2fa", 0x18) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 20:34:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070") perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0xc4, "26e46bcec0678bb942f69ae00ea77250f22bbae16ed90b9a5b2dc0c7f117d30ed841263bdc601ff7d918d7b89afadc2617e4a626be1c0f321b127cbd6454c19f729db44e7dc487f4bb427b09f5e6e40f8d470e67b97bd915c3ebf84225d98710d644846463a304d15a539013e467998f9f88ffd4b085c3431bde04f2a00af5d48103d02b2058c4e8e220f65026ed2a595be3b0a95fbaf9cd41ab050bdf78b7af2781d0c960a0bea3fdd0ab91aa7eba8676f38b8859e4b18099895a1df8edb6e7d6d1fd8c"}, &(0x7f0000000000)=0xe8) 20:34:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7b") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@dstopts={0x0, 0x6, [], [@pad1, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x1, 0x0, 0x0]}}, @hao={0xc9, 0x10, @ipv4={[], [], @broadcast}}]}, 0x40) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000002c0)=@dstopts={0x0, 0x1, [], [@generic={0x2, 0xb, "7e89b2cfad892ab36aefe3"}]}, 0x3e7) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x101000) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{0x2, 0x7, 0x10001, 0x9}, 'syz1\x00', 0x33}) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000080)=""/180) 20:34:13 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x400800, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xffffffd6) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='team0\x00', r0}, 0x10) fallocate(r1, 0x3, 0x0, 0x8000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0xb5cb, @local, 0x2}, 0x1c) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000380)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000200)={'team0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}}) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000140)={@bcast, @bcast}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uhid\x00', 0x2, 0x0) fallocate(r1, 0x0, 0x5, 0x9) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000040)=""/186) 20:34:13 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0xfa) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x0) 20:34:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be0") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:13 executing program 0: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40080, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000040)={0x7, 0x7b, 0x2}, 0x7) getpriority(0x0, r0) 20:34:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) fchmod(r0, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000080)={0x51f, 0x2, 0x1}) 20:34:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be0") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:13 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0xffffffffffffffff, 0xfd, 0x11}, 0x98) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'netdevsim0\x00', 0xffffffffffff8000}) [ 240.283862] sctp: Trying to GSO but underlying device doesn't support it. 20:34:14 executing program 5: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'vcan0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="1ffa56dbfa3289ec57376291c907d7618b8a006a5948fa9db2efe5a5214371205ab582f9d57cf3cc8b9906bd20e3f29938adb76ad09fcd01000000f840c0a51b955361d2cd54d6d4bcd89367356369cf0c"]}) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x80) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x6, @ipv4={[], [], @loopback}, 0x7}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e23, @empty}], 0x282) 20:34:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) 20:34:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1000000000000002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000080)) preadv(r0, &(0x7f0000000100), 0x2df, 0x80000000000) 20:34:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be0") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:14 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x421c1, 0x0) recvfrom$unix(r0, &(0x7f0000000080)=""/36, 0x24, 0x20, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xa, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x1c, 0x1d}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) 20:34:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) 20:34:14 executing program 4: lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x3) r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64IPIN\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', 0x17, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x9, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x39, &(0x7f0000000100)=[@cr0={0x0, 0x20}, @dstype0={0x6, 0xd}], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000240)=""/14) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:34:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) 20:34:14 executing program 5: ioctl$sock_ifreq(0xffffffffffffffff, 0x8927, &(0x7f0000000440)={'bridge0\x00', @ifru_data=0x0}) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0xfff}, 0x14) 20:34:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x10600}]) 20:34:14 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000280)={0x10003, 0x3, 0x10001, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000bd0001000600ff07ffff0000010000087ba2ee5b6cc8aadf9a889ccc3a5555ede14c1b"], &(0x7f0000000200)=0x14) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x30}, 0x30) readv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000600)=""/138, 0xfffffffffffffe2a}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000480)=""/221, 0xdd}, {&(0x7f0000000580)=""/105, 0xfffffffffffffe0e}, {&(0x7f0000000040)=""/214, 0x11}], 0x5) 20:34:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:14 executing program 5: unshare(0x6c060000) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6d0, 0x200000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x618f9b2542d9521) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000200)=0x2d, 0x4) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000001c0)) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000000240)=@nfc, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/98, 0x62}], 0x1}, 0x452f}, {{&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000400)=""/73, 0x49}], 0x1, &(0x7f00000004c0)=""/59, 0x3b}, 0x20}, {{&(0x7f0000000500)=@tipc, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000580)=""/27, 0x1b}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/136, 0x88}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/133, 0x85}, {&(0x7f0000000880)=""/39, 0x27}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x7}, 0x3}, {{&(0x7f0000001940), 0x80, &(0x7f0000001e40)=[{&(0x7f00000019c0)=""/111, 0x6f}, {&(0x7f0000001a40)=""/147, 0x93}, {&(0x7f0000001b00)=""/2, 0x2}, {&(0x7f0000001b40)=""/157, 0x9d}, {&(0x7f0000001c00)=""/96, 0x60}, {&(0x7f0000001c80)=""/231, 0xe7}, {&(0x7f0000001d80)=""/168, 0xa8}], 0x7, &(0x7f0000001ec0)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000002ec0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002f40)=""/154, 0x9a}, {&(0x7f0000003000)}, {&(0x7f0000003040)}, {&(0x7f0000003080)=""/97, 0x61}, {&(0x7f0000003100)=""/180, 0xb4}, {&(0x7f00000031c0)=""/163, 0xa3}], 0x6, &(0x7f0000003300)=""/49, 0x31}, 0x6}, {{&(0x7f0000003340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000003580)=[{&(0x7f00000033c0)=""/204, 0xcc}, {&(0x7f00000034c0)=""/172, 0xac}], 0x2}, 0xb01}], 0x6, 0x10000, &(0x7f0000003740)) socket$rxrpc(0x21, 0x2, 0xfffffffffffffdfe) [ 241.200191] net_ratelimit: 22 callbacks suppressed [ 241.200199] protocol 88fb is buggy, dev hsr_slave_0 [ 241.210327] protocol 88fb is buggy, dev hsr_slave_1 20:34:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0)=0x5de5e8b3, 0x4) 20:34:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:14 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0xf6cf900f2f8f842e, 0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x7, &(0x7f0000000100)={0x7ff}, 0x8) rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000000)="c4e289bfe3666540d8f1c401795ba88e770000f32644d8daad450f9c501dd338c4427d2e36c4027d18e066400f2f3c43", {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 20:34:15 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000000c0)={0x4, r1, 0x1}) open$dir(&(0x7f0000000040)='./file0\x00', 0x200000, 0x100) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x3) semctl$IPC_INFO(0x0, 0xfffffffe, 0x10, 0x0) open(&(0x7f0000001700)='./file0\x00', 0x0, 0x0) inotify_init1(0x0) 20:34:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:15 executing program 0: r0 = socket(0x11, 0x80002, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$PIO_UNIMAP(0xffffffffffffff9c, 0x4b67, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[{0x7, 0xffff}, {0x200, 0xd35}, {0x69, 0x4}, {0x7, 0x2}, {0x80000000, 0x7}, {0xd9}, {0x9, 0x7}, {0x0, 0x7fffffff}, {0x7, 0x1}]}) 20:34:15 executing program 4: r0 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) lremovexattr(0x0, &(0x7f00000001c0)=@random={'user.', '/dev/vcsa#\x00'}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0xfffffffffffffe01) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) connect$ax25(r2, &(0x7f0000000200)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x125000, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r5 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, 0x0) read$FUSE(r5, &(0x7f0000000840), 0x1000) keyctl$assume_authority(0x10, 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, 0x0, 0x0, 0x847, &(0x7f0000000780)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) tkill(r0, 0x1c) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) 20:34:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x0, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 242.080139] protocol 88fb is buggy, dev hsr_slave_0 [ 242.085266] protocol 88fb is buggy, dev hsr_slave_1 [ 242.120227] IPVS: ftp: loaded support on port[0] = 21 [ 242.160204] protocol 88fb is buggy, dev hsr_slave_0 [ 242.165293] protocol 88fb is buggy, dev hsr_slave_1 20:34:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x0, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:16 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000080)=0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r2 = semget(0x1, 0x0, 0x400) semtimedop(r2, &(0x7f0000000000)=[{0x0, 0x8, 0x800}, {0x6, 0x0, 0x1000}, {0x1, 0x2, 0x1000}, {0x3, 0x5, 0x1000}, {0x3, 0x200, 0x800}, {0x0, 0xfff, 0x800}, {0x3, 0x9, 0x800}], 0x7, &(0x7f0000000040)={0x0, 0x1c9c380}) wait4(0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 20:34:16 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000100)=""/113) openat$vfio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vfio/vfio\x00', 0x101000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ip_vs_stats_percpu\x00') r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='sta\xdb\xd2\xfe\x05+t\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5U\x18\xaf\xf0\x1eyR4\f\xd6', 0x275a, 0x0) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000300)={0xfffffffffffffffb, 0x2, 0x2, 0x6, 0x8, 0x800}) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$P9_RCLUNK(r2, &(0x7f0000000200)={0x7}, 0x7) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000380)=""/212) fallocate(r3, 0x0, 0x0, 0x2000002) fallocate(r2, 0x0, 0x0, 0x110001) accept4$unix(r2, &(0x7f0000000180)=@abs, &(0x7f0000000000)=0x6e, 0x80000) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x2, 0x0, 0x4000}) 20:34:16 executing program 5: unshare(0x6c060000) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6d0, 0x200000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x618f9b2542d9521) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000200)=0x2d, 0x4) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000001c0)) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000000240)=@nfc, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/98, 0x62}], 0x1}, 0x452f}, {{&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000400)=""/73, 0x49}], 0x1, &(0x7f00000004c0)=""/59, 0x3b}, 0x20}, {{&(0x7f0000000500)=@tipc, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000580)=""/27, 0x1b}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/136, 0x88}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/133, 0x85}, {&(0x7f0000000880)=""/39, 0x27}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x7}, 0x3}, {{&(0x7f0000001940), 0x80, &(0x7f0000001e40)=[{&(0x7f00000019c0)=""/111, 0x6f}, {&(0x7f0000001a40)=""/147, 0x93}, {&(0x7f0000001b00)=""/2, 0x2}, {&(0x7f0000001b40)=""/157, 0x9d}, {&(0x7f0000001c00)=""/96, 0x60}, {&(0x7f0000001c80)=""/231, 0xe7}, {&(0x7f0000001d80)=""/168, 0xa8}], 0x7, &(0x7f0000001ec0)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000002ec0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002f40)=""/154, 0x9a}, {&(0x7f0000003000)}, {&(0x7f0000003040)}, {&(0x7f0000003080)=""/97, 0x61}, {&(0x7f0000003100)=""/180, 0xb4}, {&(0x7f00000031c0)=""/163, 0xa3}], 0x6, &(0x7f0000003300)=""/49, 0x31}, 0x6}, {{&(0x7f0000003340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000003580)=[{&(0x7f00000033c0)=""/204, 0xcc}, {&(0x7f00000034c0)=""/172, 0xac}], 0x2}, 0xb01}], 0x6, 0x10000, &(0x7f0000003740)) socket$rxrpc(0x21, 0x2, 0xfffffffffffffdfe) 20:34:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) [ 242.560139] protocol 88fb is buggy, dev hsr_slave_0 [ 242.560182] protocol 88fb is buggy, dev hsr_slave_0 [ 242.565266] protocol 88fb is buggy, dev hsr_slave_1 [ 242.570329] protocol 88fb is buggy, dev hsr_slave_1 20:34:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x0, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:16 executing program 4: socket$kcm(0xa, 0x802, 0x88) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x4, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000080) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8953, &(0x7f0000000000)) 20:34:16 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x509041, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000100)=""/87, &(0x7f0000000180)=0x57) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 20:34:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0x0, @pix={0x0, 0xffffffff00000001}}}) 20:34:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0x0, @pix={0x0, 0xffffffff00000001}}}) 20:34:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl(r0, 0xdd, &(0x7f00000001c0)="597f40eacabe22c3da1ba751ac95eb2d4b0b39ee452a596e40bfe3d15c4077aacb811984ce52294f154d7cfa5d6ed8a0b59388a3df4dda288382a6d57ef009ac9b6e763e59be08647d5adf4350f9f642e5f84923a240d19b63a661945e234632718566684933d0b141da733bcd93309d09c360c540568f0c08e4d25ff64ba9c1ab103f932db264acfb0846f5131308ab7e8061da26fb34e764868fb1a212ab4ad63a7675f6f3fd690d62cf7ee7c36e84c92a093ae035d6cf24a41bde16c37d80eb2b2702ed") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xd) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") ioctl$TCSETS(r0, 0x5423, &(0x7f0000000340)) 20:34:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="240000005a001f00ff03f4f9002304000a04f511080a0100020100020800028001000000", 0x24) 20:34:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0x0, @pix={0x0, 0xffffffff00000001}}}) 20:34:17 executing program 4: clone(0x8000000000041fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, r1, 0xa00, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffffffffff36}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) exit(0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:34:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x10001, 0x140) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb}}) 20:34:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) [ 243.521271] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 20:34:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x10001, 0x140) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:17 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) sendmsg$alg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}, 0x4000080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x8034, 0xffffffffffffffff, 0xffffffffffffffff) r2 = semget$private(0x0, 0x1, 0x20) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") getdents(r1, &(0x7f0000000280)=""/246, 0xf6) 20:34:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000000)={0x8, 0x1, 'client1\x00', 0x2, "c273d0d56c08656f", "9278b150a9bbc286e1d37900734b243555a8c3f86e8ab3fa568d59a495aaaf06", 0x4, 0x4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85322, &(0x7f00000002c0)) 20:34:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb}}) 20:34:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x10001, 0x140) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:17 executing program 4: r0 = socket$kcm(0x10, 0x200000000003, 0x4) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\x00') sendmsg$kcm(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="39000000140081ae00d175040f62b04a2b546f2a66bf8c6e3fa1bcb3735858eba3390983b34f897506e606dbb7d553b4a40000000000000008", 0x39}], 0x1}, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x68400, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f00000000c0)={0x800, 0x8, 0x6, 0x3, 0x2, 0xfffffffffffff01f}) 20:34:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb}}) 20:34:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000008a80)=[{{&(0x7f0000008640)=@xdp, 0x80, &(0x7f0000008800), 0x0, &(0x7f0000008840), 0x0, 0x100000000000000}}], 0x1, 0x800) 20:34:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x0, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x10001, 0x140) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:17 executing program 2 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:17 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x16, 0x80) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, [], @bt={0x0, 0x0, 0xffffffffc496a437, 0x0, 0x9}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 20:34:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:17 executing program 4: r0 = socket$inet6(0xa, 0x100000000000001, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) r1 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000340)=""/4096) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) readv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1) 20:34:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x0, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 244.095234] FAULT_INJECTION: forcing a failure. [ 244.095234] name failslab, interval 1, probability 0, space 0, times 0 [ 244.148070] CPU: 0 PID: 17139 Comm: syz-executor.2 Not tainted 4.14.124 #18 [ 244.155224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.164589] Call Trace: [ 244.167210] dump_stack+0x138/0x19c [ 244.170865] should_fail.cold+0x10f/0x159 [ 244.175035] should_failslab+0xdb/0x130 [ 244.179533] kmem_cache_alloc_node_trace+0x280/0x770 [ 244.184659] __kmalloc_node+0x3d/0x80 [ 244.188471] kvmalloc_node+0x4e/0xe0 [ 244.192234] video_usercopy+0x365/0xf20 20:34:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 244.196221] ? lock_downgrade+0x6e0/0x6e0 [ 244.200384] ? video_ioctl2+0x40/0x40 [ 244.204209] ? v4l_g_priority+0xa0/0xa0 [ 244.208202] ? mutex_trylock+0x1c0/0x1c0 [ 244.212290] video_ioctl2+0x2d/0x40 [ 244.215926] v4l2_ioctl+0x1c0/0x300 [ 244.219569] ? v4l2_open+0x300/0x300 [ 244.223298] do_vfs_ioctl+0x7ae/0x1060 [ 244.227231] ? selinux_file_mprotect+0x5d0/0x5d0 [ 244.232044] ? lock_downgrade+0x6e0/0x6e0 [ 244.236249] ? ioctl_preallocate+0x1c0/0x1c0 [ 244.240776] ? __fget+0x237/0x370 [ 244.244332] ? security_file_ioctl+0x89/0xb0 [ 244.248746] SyS_ioctl+0x8f/0xc0 [ 244.252124] ? do_vfs_ioctl+0x1060/0x1060 [ 244.256278] do_syscall_64+0x1e8/0x640 [ 244.260165] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.265035] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 244.270225] RIP: 0033:0x459279 [ 244.273419] RSP: 002b:00007f07a9d54c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.281224] RAX: ffffffffffffffda RBX: 00007f07a9d54c90 RCX: 0000000000459279 [ 244.289396] RDX: 0000000020000240 RSI: 00000000c100565c RDI: 0000000000000004 20:34:17 executing program 4: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x8, 0x1, &(0x7f0000000040)={r0, r1+10000000}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r2, &(0x7f0000006980)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000180)=""/15, 0xf}, {&(0x7f00000001c0)=""/116, 0x74}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x4, &(0x7f0000001280)=""/151, 0x97}, 0x2}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001340)=""/8, 0x8}, {&(0x7f0000001380)=""/203, 0xcb}, {&(0x7f0000001480)=""/174, 0xae}, {&(0x7f0000001540)=""/159, 0x9f}, {&(0x7f0000001600)=""/119, 0x77}, {&(0x7f0000001680)=""/25, 0x19}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/79, 0x4f}], 0x8, &(0x7f00000027c0)=""/134, 0x86}, 0x100}, {{&(0x7f0000002880)=@isdn, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002900)=""/215, 0xd7}, {&(0x7f0000002a00)=""/161, 0xa1}, {&(0x7f0000002ac0)=""/44, 0x2c}, {&(0x7f0000002b00)=""/226, 0xe2}, {&(0x7f0000002c00)=""/67, 0x43}, {&(0x7f0000002c80)=""/29, 0x1d}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/127, 0x7f}, {&(0x7f0000003d40)=""/81, 0x51}], 0x9, &(0x7f0000003e80)=""/4, 0x4}, 0x8001}, {{&(0x7f0000003ec0)=@caif=@rfm, 0x80, &(0x7f0000004040)=[{&(0x7f0000003f40)=""/67, 0x43}, {&(0x7f0000003fc0)=""/86, 0x56}], 0x2, &(0x7f0000004080)=""/19, 0x13}, 0x759a}, {{&(0x7f00000040c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000005200)=[{&(0x7f0000004140)=""/68, 0x44}, {&(0x7f00000041c0)=""/12, 0xc}, {&(0x7f0000004200)=""/4096, 0x1000}], 0x3, &(0x7f0000005240)=""/251, 0xfb}}, {{&(0x7f0000005340)=@nfc, 0x80, &(0x7f00000068c0)=[{&(0x7f00000053c0)=""/251, 0xfb}, {&(0x7f00000054c0)=""/214, 0xd6}, {&(0x7f00000055c0)=""/216, 0xd8}, {&(0x7f00000056c0)=""/140, 0x8c}, {&(0x7f0000005780)=""/99, 0x63}, {&(0x7f0000005800)=""/144, 0x90}, {&(0x7f00000058c0)=""/4096, 0x1000}], 0x7, &(0x7f0000006940)=""/41, 0x29}, 0x5}], 0x6, 0x40, &(0x7f0000006b00)={0x0, 0x1c9c380}) [ 244.296689] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 244.303961] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07a9d556d4 [ 244.311234] R13: 00000000004c41d9 R14: 00000000004d7e60 R15: 0000000000000005 20:34:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x420ffe0, 0x0, 0x0) 20:34:18 executing program 4: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r0 = shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) shmdt(r0) 20:34:18 executing program 2 (fault-call:3 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 244.623739] FAULT_INJECTION: forcing a failure. [ 244.623739] name failslab, interval 1, probability 0, space 0, times 0 [ 244.639968] CPU: 0 PID: 17174 Comm: syz-executor.2 Not tainted 4.14.124 #18 [ 244.647090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.656445] Call Trace: [ 244.659047] dump_stack+0x138/0x19c [ 244.662684] should_fail.cold+0x10f/0x159 [ 244.666849] should_failslab+0xdb/0x130 [ 244.670836] __kmalloc+0x2f0/0x7a0 [ 244.674401] ? __vb2_queue_alloc+0x101/0xdb0 [ 244.678819] __vb2_queue_alloc+0x101/0xdb0 [ 244.683068] ? unwind_get_return_address+0x61/0xa0 [ 244.688008] vb2_core_create_bufs+0x2c3/0x640 [ 244.692531] ? vivid_rds_gen_fill+0x440/0x440 [ 244.697045] ? __vb2_queue_alloc+0xdb0/0xdb0 [ 244.701472] ? save_trace+0x290/0x290 [ 244.705278] ? __lock_acquire+0x5f9/0x45e0 [ 244.709522] ? __kmalloc_node+0x51/0x80 [ 244.713496] ? kvmalloc_node+0x4e/0xe0 [ 244.717387] ? video_usercopy+0x365/0xf20 [ 244.721546] vb2_create_bufs+0x33d/0x640 [ 244.725613] ? save_trace+0x290/0x290 [ 244.729429] ? vb2_thread_start.cold+0x27/0x27 [ 244.734047] ? save_trace+0x290/0x290 [ 244.737860] vb2_ioctl_create_bufs+0x232/0x3a0 [ 244.742459] v4l_create_bufs+0x11e/0x1f0 [ 244.746528] ? __might_fault+0x110/0x1d0 [ 244.750599] __video_do_ioctl+0x6eb/0x740 [ 244.754762] ? video_ioctl2+0x40/0x40 [ 244.758573] ? kasan_check_write+0x14/0x20 [ 244.762814] ? _copy_from_user+0x99/0x110 [ 244.766967] video_usercopy+0x3d3/0xf20 [ 244.770943] ? lock_downgrade+0x6c0/0x6e0 [ 244.775090] ? video_ioctl2+0x40/0x40 [ 244.778894] ? v4l_g_priority+0xa0/0xa0 [ 244.782874] ? mutex_trylock+0x1c0/0x1c0 [ 244.786949] video_ioctl2+0x2d/0x40 [ 244.790575] v4l2_ioctl+0x1c0/0x300 [ 244.794208] ? v4l2_open+0x300/0x300 [ 244.797926] do_vfs_ioctl+0x7ae/0x1060 [ 244.801822] ? selinux_file_mprotect+0x5d0/0x5d0 [ 244.806576] ? lock_downgrade+0x6e0/0x6e0 [ 244.810736] ? ioctl_preallocate+0x1c0/0x1c0 [ 244.815156] ? __fget+0x237/0x370 [ 244.818628] ? security_file_ioctl+0x89/0xb0 [ 244.823073] SyS_ioctl+0x8f/0xc0 [ 244.826444] ? do_vfs_ioctl+0x1060/0x1060 [ 244.830607] do_syscall_64+0x1e8/0x640 [ 244.834496] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.839381] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 244.844572] RIP: 0033:0x459279 [ 244.847849] RSP: 002b:00007f07a9d54c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.855561] RAX: ffffffffffffffda RBX: 00007f07a9d54c90 RCX: 0000000000459279 [ 244.862830] RDX: 0000000020000240 RSI: 00000000c100565c RDI: 0000000000000004 [ 244.870193] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 244.877465] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07a9d556d4 [ 244.884732] R13: 00000000004c41d9 R14: 00000000004d7e60 R15: 0000000000000005 20:34:18 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x205, 0x800000002009) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x4, 0x3, {0x3, 0x0, 0x6, 0x1, 0x1}}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0xfd, "9df57dd21287eab6f5f4850d05dbbfdef3a1cb18f7f3310c3a4d67029fed8fab98ce93916a955c240e495581dcc3843f2e1ece891661ece09ffb9a6250225e1a314fde01c30e316ac88817c0abb37ee1de92c18391f8e26e66d3f9c817170544e973b0c12f53af70c863a9d833bc22be7e53bf445194ac631caef62faf965ea4421b18f28157562fc861852e037abf4a2848e26645c98c8f0957a65fce0035f136b0f387cc2ef0a2623ec7d79b88b52d2a094ac3c91d124f2021c6948b5f4763d907898780489ee414dd068b3a3e665106c4593ec5b54426cbeb126c25de30fa2033cda3b3aba618513824d33a646ffc3ff2dd30b55f1c48fe564108ce"}, &(0x7f0000000040)=0x105) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r1, 0xa3}, &(0x7f00000002c0)=0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045510, &(0x7f0000000000)={0x20323}) 20:34:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x0, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x420ffe0, 0x0, 0x0) 20:34:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$FIONREAD(r0, 0x5412, &(0x7f0000000080)) 20:34:18 executing program 2 (fault-call:3 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 245.127913] FAULT_INJECTION: forcing a failure. [ 245.127913] name failslab, interval 1, probability 0, space 0, times 0 [ 245.182379] CPU: 1 PID: 17189 Comm: syz-executor.2 Not tainted 4.14.124 #18 [ 245.189531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.198893] Call Trace: [ 245.201505] dump_stack+0x138/0x19c [ 245.205170] should_fail.cold+0x10f/0x159 [ 245.209344] should_failslab+0xdb/0x130 [ 245.213337] kmem_cache_alloc_trace+0x2e9/0x790 [ 245.218037] ? rcu_read_lock_sched_held+0x110/0x130 [ 245.223072] ? __kmalloc+0x376/0x7a0 [ 245.226813] ? vb2_vmalloc_attach_dmabuf+0x150/0x150 [ 245.231935] vb2_vmalloc_alloc+0x64/0x270 [ 245.236284] __vb2_queue_alloc+0x48d/0xdb0 [ 245.240549] vb2_core_create_bufs+0x2c3/0x640 [ 245.245071] ? vivid_rds_gen_fill+0x440/0x440 [ 245.249582] ? __vb2_queue_alloc+0xdb0/0xdb0 [ 245.254020] ? save_trace+0x290/0x290 [ 245.257830] ? __lock_acquire+0x5f9/0x45e0 [ 245.262075] ? __kmalloc_node+0x51/0x80 [ 245.266071] ? kvmalloc_node+0x4e/0xe0 [ 245.269991] ? video_usercopy+0x365/0xf20 [ 245.274172] vb2_create_bufs+0x33d/0x640 [ 245.278257] ? save_trace+0x290/0x290 [ 245.282099] ? vb2_thread_start.cold+0x27/0x27 [ 245.286711] ? save_trace+0x290/0x290 [ 245.290535] vb2_ioctl_create_bufs+0x232/0x3a0 [ 245.295150] v4l_create_bufs+0x11e/0x1f0 [ 245.299228] ? __might_fault+0x110/0x1d0 [ 245.303312] __video_do_ioctl+0x6eb/0x740 [ 245.307485] ? video_ioctl2+0x40/0x40 [ 245.311298] ? kasan_check_write+0x14/0x20 [ 245.315547] ? _copy_from_user+0x99/0x110 [ 245.319801] video_usercopy+0x3d3/0xf20 [ 245.323780] ? lock_downgrade+0x6c0/0x6e0 [ 245.327932] ? video_ioctl2+0x40/0x40 [ 245.331740] ? v4l_g_priority+0xa0/0xa0 [ 245.335757] ? mutex_trylock+0x1c0/0x1c0 [ 245.339852] video_ioctl2+0x2d/0x40 [ 245.343502] v4l2_ioctl+0x1c0/0x300 [ 245.347146] ? v4l2_open+0x300/0x300 [ 245.350883] do_vfs_ioctl+0x7ae/0x1060 [ 245.354801] ? selinux_file_mprotect+0x5d0/0x5d0 [ 245.359571] ? lock_downgrade+0x6e0/0x6e0 [ 245.363742] ? ioctl_preallocate+0x1c0/0x1c0 [ 245.368176] ? __fget+0x237/0x370 [ 245.371655] ? security_file_ioctl+0x89/0xb0 [ 245.376114] SyS_ioctl+0x8f/0xc0 [ 245.379487] ? do_vfs_ioctl+0x1060/0x1060 [ 245.383913] do_syscall_64+0x1e8/0x640 [ 245.387811] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 245.392672] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 245.397875] RIP: 0033:0x459279 [ 245.401066] RSP: 002b:00007f07a9d54c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.408782] RAX: ffffffffffffffda RBX: 00007f07a9d54c90 RCX: 0000000000459279 [ 245.416054] RDX: 0000000020000240 RSI: 00000000c100565c RDI: 0000000000000004 [ 245.423326] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 20:34:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x420ffe0, 0x0, 0x0) 20:34:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 245.430602] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07a9d556d4 [ 245.437894] R13: 00000000004c41d9 R14: 00000000004d7e60 R15: 0000000000000005 20:34:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x3, r3, 0x30, 0x1, @in={0x2, 0x4e24, @broadcast}}}, 0xa0) r4 = dup2(r0, r1) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66b8ea000f00d8eadd5484f88a00f0833600660f71d50066ba4100edb8010000000f01d90f0866b8bd008ee0b94d0200000f32360f07", 0x36}], 0xaaaaaaaaaaaabce, 0x5, 0x0, 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) dup3(r7, r0, 0x0) 20:34:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x0, 0x0, 0x37) 20:34:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'ip6tnl0\x00', 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x202000, 0x0) connect$vsock_dgram(r2, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) listen(r0, 0x6) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 20:34:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:19 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:19 executing program 2 (fault-call:3 fault-nth:3): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:19 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 246.003923] FAULT_INJECTION: forcing a failure. [ 246.003923] name failslab, interval 1, probability 0, space 0, times 0 [ 246.065925] CPU: 1 PID: 17234 Comm: syz-executor.2 Not tainted 4.14.124 #18 [ 246.073097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.082478] Call Trace: [ 246.085083] dump_stack+0x138/0x19c [ 246.088732] should_fail.cold+0x10f/0x159 [ 246.092897] should_failslab+0xdb/0x130 [ 246.096887] kmem_cache_alloc_node_trace+0x280/0x770 [ 246.102003] ? save_trace+0x290/0x290 [ 246.105830] __get_vm_area_node+0xf0/0x340 [ 246.110070] ? __lock_is_held+0xb6/0x140 [ 246.114148] __vmalloc_node_range+0x9f/0x6a0 [ 246.118567] ? vb2_vmalloc_alloc+0xce/0x270 [ 246.122902] ? vb2_vmalloc_alloc+0x64/0x270 [ 246.127231] ? kmem_cache_alloc_trace+0x623/0x790 [ 246.132088] ? vb2_vmalloc_attach_dmabuf+0x150/0x150 [ 246.137203] vmalloc_user+0x47/0x110 [ 246.140933] ? vb2_vmalloc_alloc+0xce/0x270 [ 246.145263] vb2_vmalloc_alloc+0xce/0x270 [ 246.149428] __vb2_queue_alloc+0x48d/0xdb0 [ 246.153701] vb2_core_create_bufs+0x2c3/0x640 [ 246.158206] ? vivid_rds_gen_fill+0x440/0x440 [ 246.162719] ? __vb2_queue_alloc+0xdb0/0xdb0 [ 246.167138] ? save_trace+0x290/0x290 [ 246.170952] ? __lock_acquire+0x5f9/0x45e0 [ 246.175192] ? __kmalloc_node+0x51/0x80 [ 246.179163] ? kvmalloc_node+0x4e/0xe0 [ 246.183054] ? video_usercopy+0x365/0xf20 [ 246.187214] vb2_create_bufs+0x33d/0x640 [ 246.191281] ? save_trace+0x290/0x290 [ 246.195114] ? vb2_thread_start.cold+0x27/0x27 [ 246.199746] ? save_trace+0x290/0x290 [ 246.203574] vb2_ioctl_create_bufs+0x232/0x3a0 [ 246.208199] v4l_create_bufs+0x11e/0x1f0 [ 246.212299] ? __might_fault+0x110/0x1d0 [ 246.216373] __video_do_ioctl+0x6eb/0x740 [ 246.220536] ? video_ioctl2+0x40/0x40 [ 246.224344] ? kasan_check_write+0x14/0x20 [ 246.228582] ? _copy_from_user+0x99/0x110 [ 246.232738] video_usercopy+0x3d3/0xf20 [ 246.236721] ? lock_downgrade+0x6c0/0x6e0 [ 246.240880] ? video_ioctl2+0x40/0x40 [ 246.244701] ? v4l_g_priority+0xa0/0xa0 [ 246.248687] ? mutex_trylock+0x1c0/0x1c0 [ 246.252803] video_ioctl2+0x2d/0x40 [ 246.256438] v4l2_ioctl+0x1c0/0x300 [ 246.260089] ? v4l2_open+0x300/0x300 [ 246.263812] do_vfs_ioctl+0x7ae/0x1060 [ 246.267711] ? selinux_file_mprotect+0x5d0/0x5d0 [ 246.272502] ? lock_downgrade+0x6e0/0x6e0 [ 246.276666] ? ioctl_preallocate+0x1c0/0x1c0 [ 246.281094] ? __fget+0x237/0x370 [ 246.284566] ? security_file_ioctl+0x89/0xb0 [ 246.290526] SyS_ioctl+0x8f/0xc0 [ 246.293915] ? do_vfs_ioctl+0x1060/0x1060 [ 246.298099] do_syscall_64+0x1e8/0x640 [ 246.302002] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 246.306863] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 246.312055] RIP: 0033:0x459279 [ 246.315240] RSP: 002b:00007f07a9d54c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.322957] RAX: ffffffffffffffda RBX: 00007f07a9d54c90 RCX: 0000000000459279 [ 246.330237] RDX: 0000000020000240 RSI: 00000000c100565c RDI: 0000000000000004 [ 246.337516] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 246.344795] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07a9d556d4 [ 246.352156] R13: 00000000004c41d9 R14: 00000000004d7e60 R15: 0000000000000005 [ 246.359795] net_ratelimit: 16 callbacks suppressed [ 246.359802] protocol 88fb is buggy, dev hsr_slave_0 [ 246.360357] protocol 88fb is buggy, dev hsr_slave_0 [ 246.364875] protocol 88fb is buggy, dev hsr_slave_1 [ 246.369835] protocol 88fb is buggy, dev hsr_slave_1 [ 246.425754] syz-executor.2: vmalloc: allocation failure: 32768 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 246.468047] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 246.474255] CPU: 1 PID: 17234 Comm: syz-executor.2 Not tainted 4.14.124 #18 [ 246.481375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.490734] Call Trace: [ 246.493322] dump_stack+0x138/0x19c [ 246.496935] warn_alloc.cold+0x96/0x1af [ 246.500894] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 246.505728] ? __get_vm_area_node+0x27f/0x340 [ 246.510210] ? __lock_is_held+0xb6/0x140 [ 246.514341] __vmalloc_node_range+0x3be/0x6a0 [ 246.518909] ? vb2_vmalloc_alloc+0x64/0x270 [ 246.523221] ? kmem_cache_alloc_trace+0x623/0x790 [ 246.528078] ? vb2_vmalloc_attach_dmabuf+0x150/0x150 [ 246.533168] vmalloc_user+0x47/0x110 [ 246.536887] ? vb2_vmalloc_alloc+0xce/0x270 [ 246.541201] vb2_vmalloc_alloc+0xce/0x270 [ 246.545352] __vb2_queue_alloc+0x48d/0xdb0 [ 246.549583] vb2_core_create_bufs+0x2c3/0x640 [ 246.554072] ? vivid_rds_gen_fill+0x440/0x440 [ 246.558558] ? __vb2_queue_alloc+0xdb0/0xdb0 [ 246.562960] ? save_trace+0x290/0x290 [ 246.566746] ? __lock_acquire+0x5f9/0x45e0 [ 246.571067] ? __kmalloc_node+0x51/0x80 [ 246.575286] ? kvmalloc_node+0x4e/0xe0 [ 246.579152] ? video_usercopy+0x365/0xf20 [ 246.583294] vb2_create_bufs+0x33d/0x640 [ 246.587343] ? save_trace+0x290/0x290 [ 246.591149] ? vb2_thread_start.cold+0x27/0x27 [ 246.595732] ? save_trace+0x290/0x290 [ 246.599519] vb2_ioctl_create_bufs+0x232/0x3a0 [ 246.604095] v4l_create_bufs+0x11e/0x1f0 [ 246.608160] ? __might_fault+0x110/0x1d0 [ 246.612217] __video_do_ioctl+0x6eb/0x740 [ 246.616350] ? video_ioctl2+0x40/0x40 [ 246.620149] ? kasan_check_write+0x14/0x20 [ 246.624370] ? _copy_from_user+0x99/0x110 [ 246.628508] video_usercopy+0x3d3/0xf20 [ 246.632472] ? lock_downgrade+0x6c0/0x6e0 [ 246.636608] ? video_ioctl2+0x40/0x40 [ 246.640413] ? v4l_g_priority+0xa0/0xa0 [ 246.644377] ? mutex_trylock+0x1c0/0x1c0 [ 246.648454] video_ioctl2+0x2d/0x40 [ 246.652067] v4l2_ioctl+0x1c0/0x300 [ 246.655679] ? v4l2_open+0x300/0x300 [ 246.659402] do_vfs_ioctl+0x7ae/0x1060 [ 246.663279] ? selinux_file_mprotect+0x5d0/0x5d0 [ 246.668017] ? lock_downgrade+0x6e0/0x6e0 [ 246.672148] ? ioctl_preallocate+0x1c0/0x1c0 [ 246.676546] ? __fget+0x237/0x370 [ 246.679986] ? security_file_ioctl+0x89/0xb0 [ 246.684393] SyS_ioctl+0x8f/0xc0 [ 246.687761] ? do_vfs_ioctl+0x1060/0x1060 [ 246.691897] do_syscall_64+0x1e8/0x640 [ 246.695769] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 246.700604] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 246.705804] RIP: 0033:0x459279 [ 246.708980] RSP: 002b:00007f07a9d54c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 20:34:20 executing program 5: syz_open_dev$video(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x200, 0x0) getuid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='veth0\x00'}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66b8ea000f00d8eadd5484f88a00f0833600660f71d50066ba4100edb8010000000f01d90f0866b8bd008ee0b94d0200000f32360f07", 0x36}], 0xaaaaaaaaaaaabce, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) 20:34:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:20 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x800) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}, 0x0) 20:34:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x0, 0x0, 0x37) 20:34:20 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 246.716873] RAX: ffffffffffffffda RBX: 00007f07a9d54c90 RCX: 0000000000459279 [ 246.724501] RDX: 0000000020000240 RSI: 00000000c100565c RDI: 0000000000000004 [ 246.731760] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 246.739016] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07a9d556d4 [ 246.746273] R13: 00000000004c41d9 R14: 00000000004d7e60 R15: 0000000000000005 [ 246.753921] protocol 88fb is buggy, dev hsr_slave_0 [ 246.759030] protocol 88fb is buggy, dev hsr_slave_1 [ 246.799659] Mem-Info: [ 246.802258] protocol 88fb is buggy, dev hsr_slave_0 [ 246.802309] protocol 88fb is buggy, dev hsr_slave_1 20:34:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:20 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:20 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000040)={0x0, 0x0, 0x0}) [ 246.844334] active_anon:113991 inactive_anon:187 isolated_anon:0 [ 246.844334] active_file:12820 inactive_file:11126 isolated_file:0 [ 246.844334] unevictable:0 dirty:195 writeback:0 unstable:0 [ 246.844334] slab_reclaimable:12950 slab_unreclaimable:109307 [ 246.844334] mapped:58909 shmem:242 pagetables:1577 bounce:0 [ 246.844334] free:1273355 free_pcp:264 free_cma:0 20:34:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 246.949436] Node 0 active_anon:466384kB inactive_anon:748kB active_file:51132kB inactive_file:44504kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235736kB dirty:780kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 253952kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 246.980170] protocol 88fb is buggy, dev hsr_slave_0 [ 246.985276] protocol 88fb is buggy, dev hsr_slave_1 20:34:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 247.006781] Node 1 active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 247.074395] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 247.100871] lowmem_reserve[]: 0 2580 2580 2580 [ 247.105622] Node 0 DMA32 free:1275816kB min:36468kB low:45584kB high:54700kB active_anon:466248kB inactive_anon:756kB active_file:51132kB inactive_file:44504kB unevictable:0kB writepending:804kB present:3129332kB managed:2644912kB mlocked:0kB kernel_stack:8128kB pagetables:6008kB bounce:0kB free_pcp:1136kB local_pcp:668kB free_cma:0kB [ 247.135843] lowmem_reserve[]: 0 0 0 0 [ 247.139793] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 247.166656] lowmem_reserve[]: 0 0 0 0 [ 247.170696] Node 1 Normal free:3787044kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 247.198549] lowmem_reserve[]: 0 0 0 0 [ 247.202588] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 247.216464] Node 0 DMA32: 3790*4kB (UME) 886*8kB (UME) 588*16kB (UME) 92*32kB (UME) 35*64kB (UME) 5*128kB (ME) 10*256kB (ME) 6*512kB (M) 14*1024kB (UME) 3*2048kB (UM) 296*4096kB (UM) = 1276008kB [ 247.234327] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 247.245233] Node 1 Normal: 57*4kB (UE) 338*8kB (UE) 267*16kB (UME) 52*32kB (UME) 20*64kB (UME) 11*128kB (UE) 6*256kB (UM) 3*512kB (UE) 2*1024kB (ME) 5*2048kB (UME) 918*4096kB (M) = 3787044kB [ 247.268780] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.277838] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 247.287315] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.297010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 247.305855] 24196 total pagecache pages [ 247.309984] 0 pages in swap cache [ 247.313840] Swap cache stats: add 0, delete 0, find 0/0 [ 247.319400] Free swap = 0kB [ 247.322621] Total swap = 0kB 20:34:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000000c0)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:20 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 247.325771] 1965979 pages RAM [ 247.329016] 0 pages HighMem/MovableOnly [ 247.333139] 333222 pages reserved [ 247.336693] 0 pages cma reserved 20:34:21 executing program 5: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80040, 0x0) 20:34:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:21 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = dup2(r0, r0) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={{0x9, 0x0, 0x0, 0x37, 0x8}, 0x6}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x16ba) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x102000002) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x800}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)={r6, 0x5b}, &(0x7f00000000c0)=0x8) 20:34:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x0, 0x0, 0x37) 20:34:21 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:21 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) getdents(r0, &(0x7f0000000440)=""/97, 0xffffffffffffff02) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000000c0)={0xdb, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e20, @multicast2}}}, 0x108) prctl$PR_SET_UNALIGN(0x6, 0x3) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7a, 0x0, [0x40000070], [0xc1]}) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x9, 0x4001) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000000c0)=0xfffffffffffffffe) 20:34:21 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, 0x0) 20:34:21 executing program 4: r0 = semget(0x3, 0x7, 0x2) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f0000000000)=""/221) r1 = socket$can_bcm(0x1d, 0x2, 0x2) accept4(r1, 0x0, 0x0, 0xfffffffffffffffd) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0xc2600, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000400)={0x0, {0x69, 0x2}}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r4, 0x6f, "921f4e", "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"}}, 0x110) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f0000000140)={0x9, 0x2, 0xffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f00000003c0)={@empty, r5}, 0x14) 20:34:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, r0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "dc193d1f52889e5d", "5cc4295248275e71496d2bf5378d2dcabaaa3a882767e528e1124f0fce385732", "6dd35ac8", "c5da63bf1e4be255"}, 0x38) ioctl(r0, 0x1000008912, &(0x7f0000000000)="12e7a505040000007be070") r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:21 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, 0x0) 20:34:21 executing program 5: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000280)='./file1/file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) r1 = accept(r0, 0x0, &(0x7f0000000000)) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f00000000c0)="0ba69788138d1f36a377c6d801df6e3759b445b9c74517065112fe91aa3784da6498aad46924b37c104ae3446f52521dde448b83feb6f7231874ab52f2", 0x3d}, {&(0x7f00000002c0)="56df6c8e28e3574d32c9b5899ffb0b08e923c807426662932b8fa2fc4c095627e0efac4f550b075b2c589a869aa7ce40ab381537dab4e65d4b34a9b612749f0eb790cbb1d699b77bad6bacdb61daa0b349e260556670f22b72c83fe51472624e30b0914c1b8cf8afbfc0fa72936b7d799e3038b5081680fe5e7925a7658243f0ab7959e4af0f1c7bd8c2db6344dfcc225fd8c782ad9ceb63e95c9e02e150fb3535beeba479b80e1aa98af963c660006ea269fb9634a383c7591d46fa", 0xbc}, {&(0x7f0000000200)="a2c5186f065a3c2fb3ba02089f8e36d8af5fd13b23e75af0f93e2dfe4621a0c382155f3f7ff82e961dcaab50c447ef5d4fc57604cfb29a1fd4afdded96ef166ba3550317c5e86eb33715f5", 0x4b}, {&(0x7f00000003c0)="0fba1b1398e73a9b274c296f2a8d230a8efbfc34cb2d365049105f10ec958b35bec445a2a38fe083240e7968e573f5e91bbbea1ecc206f46bd88256e70cafce645d3ef7d90f4330877c752c9f70b008ba9cba34222c1e6ba5ca503fb5c8d5e85455ecded7a29de75831785314e67703499c94f8c361c5defcc932116aaf53c2365f07e3b818d6e5cfc9eba9e9dc1c923572c141f651cd95aa8bfd5a10b62dffb67f89307d627f8bc4ae50d928b258271da2b", 0xb2}, {&(0x7f0000000100)="5a0cd2498e4c2bd12e1ace36e41c22750b5c6557c1324acdb13b0893e7ba4732e8796a092735a6bfb7f9128d74fd40b65e3944ea8f3eb1e8a82434ac3a20eb", 0x3f}, {&(0x7f0000000500)="6244424994ddbd993f2f9cbc3bc0d59ec771206b7dea66c9ea404cc5c1ab20fac8bb5df0a035038f0278c654b07985f47c684f61720e7e3fc2b99928dd4d77f80537a01ec44c29e3473c39992ea9501e263ee0a09a19c2bd6e03012acee91f1c175fc5fa1b7e80aafc97b1b4c70a29044c1c", 0x72}, {&(0x7f0000000580)="9d59d967db6c3ebc9aca7eea7ddf44deccd5021803da7487a16ef712d62ade55bf6007b1c373a70f0632630814784b254a7923a4c30b76f67fba82494cd3329ee0f177525eb5284399224385b5faa4ce8dfeb8edef53c96617f462235347ecc55179949c11278f957c5abb6c82d29af42630f61bd5b646930fb59616566d119245c2984a0dc3a9bb2b5bd7f2530538c8ab4b6f", 0x93}], 0x7, 0x1) chdir(&(0x7f0000000380)='./file0\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x4, 0x7}) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') [ 248.038958] overlayfs: './file0' not a directory 20:34:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000000)=r1) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f00000000c0)=0x3) 20:34:22 executing program 4: r0 = open$dir(0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000001080)) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) ioctl(r0, 0x7, &(0x7f0000000080)="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") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) memfd_create(0x0, 0xffffffffffffffff) sendfile(r1, r2, 0x0, 0x8040fffffffd) 20:34:22 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, 0x0) 20:34:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00') recvmsg$kcm(r1, &(0x7f0000000500)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000200)=""/172, 0xac}, {&(0x7f00000002c0)=""/206, 0xce}, {&(0x7f00000003c0)=""/185, 0xb9}], 0x5}, 0x22) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000008b1832", 0x23}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f80)=""/26, 0x1a}], 0x1}, 0x0) 20:34:22 executing program 1 (fault-call:6 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:22 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:22 executing program 3 (fault-call:4 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:22 executing program 5: r0 = socket$kcm(0x11, 0x200000000002, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@caif=@rfm={0x25, 0x7, "f5db2f49ebebd4068bb8c91b36efba56"}, 0x80, 0x0}, 0x0) 20:34:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1fffd, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="39000000130009006900000000000000ab0080480f000000460001070000001419000a000f000000f00003f5000000000000ef38bf461e59d7", 0x39}], 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) write$sndseq(r2, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @time, {0x3}, {}, @connect={{0x5}, {0x5}}}, {0x7ff, 0x800, 0x1f, 0x81, @tick=0x6, {0x40000000800, 0xfff}, {0x90, 0x9}, @control={0xd560, 0x3f, 0x401}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @ext={0x0, 0x0}}], 0x90) 20:34:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="fddca7055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x8, 0x4, 0x2800000000000, 0x6, 0x8, 0x4, 0x80000000, {0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x3f, 0x5, 0xfff, 0xc15, 0x81}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r2, 0x80000001, 0x7, 0xffffffff, 0x8001, 0x10000}, &(0x7f00000001c0)=0x14) ioctl$FICLONE(r0, 0x40049409, r0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x7, 0x0, 0x200, 0x3, 0x3, 0x1, 0x1d, 0x5, r2}, 0x20) [ 248.672978] FAULT_INJECTION: forcing a failure. [ 248.672978] name failslab, interval 1, probability 0, space 0, times 0 20:34:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 248.748536] bond0: cannot enslave bond to itself. [ 248.774066] CPU: 1 PID: 17359 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 248.781245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.790720] Call Trace: [ 248.793344] dump_stack+0x138/0x19c [ 248.797011] should_fail.cold+0x10f/0x159 [ 248.801195] should_failslab+0xdb/0x130 [ 248.805191] kmem_cache_alloc_node+0x287/0x780 [ 248.809784] ? save_trace+0x290/0x290 [ 248.813595] ? __lock_acquire+0x5f9/0x45e0 [ 248.817868] ? save_trace+0x290/0x290 [ 248.821707] ? save_trace+0x290/0x290 [ 248.825532] __alloc_skb+0x9c/0x500 [ 248.829109] bond0: cannot enslave bond to itself. [ 248.829172] ? skb_scrub_packet+0x4b0/0x4b0 [ 248.838390] sock_omalloc+0x83/0x140 [ 248.842128] sock_zerocopy_alloc+0x42/0x270 [ 248.846468] sock_zerocopy_realloc+0x193/0x490 [ 248.851073] tcp_sendmsg_locked+0x1876/0x3400 [ 248.855585] ? save_trace+0x290/0x290 [ 248.859407] ? trace_hardirqs_on+0x10/0x10 [ 248.863669] ? lock_sock_nested+0x9e/0x110 [ 248.867940] ? find_held_lock+0x35/0x130 20:34:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @multicast1}}, [0x3, 0x8001, 0x1, 0x81, 0x3ff, 0x38d2, 0x8, 0x0, 0xfffffffffffff001, 0xfd99, 0x3, 0x3ad3, 0x0, 0x51, 0x7]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={r1, @in={{0x2, 0x4e21, @broadcast}}}, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:22 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b40000000000558541020000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef0}, 0x48) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000100)={0x7, 0x1}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) 20:34:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") mmap(&(0x7f0000d3a000/0x1000)=nil, 0x1000, 0x1, 0x20010, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x8, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x3f, 0x4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2203, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x8) [ 248.872021] ? lock_sock_nested+0x9e/0x110 [ 248.876284] ? tcp_sendpage+0x60/0x60 [ 248.880109] ? trace_hardirqs_on_caller+0x400/0x590 [ 248.885155] ? lock_sock_nested+0x8c/0x110 [ 248.889604] ? trace_hardirqs_on+0xd/0x10 [ 248.893777] ? __local_bh_enable_ip+0x99/0x1a0 [ 248.898381] tcp_sendmsg+0x30/0x50 [ 248.901945] inet_sendmsg+0x122/0x500 [ 248.905766] ? inet_recvmsg+0x500/0x500 [ 248.909760] sock_sendmsg+0xce/0x110 [ 248.913623] SYSC_sendto+0x206/0x310 [ 248.917355] ? SYSC_connect+0x2d0/0x2d0 [ 248.921352] ? lock_downgrade+0x6e0/0x6e0 [ 248.925530] ? wait_for_completion+0x420/0x420 [ 248.930143] ? __sb_end_write+0xc1/0x100 [ 248.934247] ? fput+0xd4/0x150 [ 248.937460] ? SyS_write+0x10b/0x180 [ 248.941196] SyS_sendto+0x40/0x50 [ 248.944669] ? SyS_getpeername+0x30/0x30 [ 248.948760] do_syscall_64+0x1e8/0x640 [ 248.952668] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 248.957542] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 248.962741] RIP: 0033:0x459279 [ 248.962746] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 20:34:22 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x4200, 0x0) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000b40)={0x4}) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, 0xffffffffffffffff, &(0x7f0000000000)) 20:34:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0x20000000000b, @pix={0x0, 0xffffffff00000001}}}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000000c0)=""/136, &(0x7f0000000000)=0x88) 20:34:22 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=ANY=[@ANYBLOB="1000ab3c000000000d010000030000d8"], 0x10}}], 0x1, 0x40000) 20:34:22 executing program 1 (fault-call:6 fault-nth:1): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) [ 248.962757] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 248.962762] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 248.962767] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 248.962773] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 248.962779] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 249.129651] FAULT_INJECTION: forcing a failure. [ 249.129651] name failslab, interval 1, probability 0, space 0, times 0 [ 249.165897] CPU: 0 PID: 17403 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 249.173226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.185213] Call Trace: [ 249.185243] dump_stack+0x138/0x19c [ 249.185265] should_fail.cold+0x10f/0x159 [ 249.185285] should_failslab+0xdb/0x130 [ 249.191611] kmem_cache_alloc_node_trace+0x280/0x770 [ 249.191626] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 249.191641] __kmalloc_node_track_caller+0x3d/0x80 [ 249.215368] __kmalloc_reserve.isra.0+0x40/0xe0 [ 249.220051] __alloc_skb+0xcf/0x500 [ 249.223696] ? skb_scrub_packet+0x4b0/0x4b0 [ 249.228042] sock_omalloc+0x83/0x140 [ 249.231771] sock_zerocopy_alloc+0x42/0x270 [ 249.236179] sock_zerocopy_realloc+0x193/0x490 [ 249.240799] tcp_sendmsg_locked+0x1876/0x3400 [ 249.245321] ? save_trace+0x290/0x290 [ 249.249136] ? trace_hardirqs_on+0x10/0x10 [ 249.253393] ? lock_sock_nested+0x9e/0x110 [ 249.257656] ? find_held_lock+0x35/0x130 [ 249.261828] ? lock_sock_nested+0x9e/0x110 [ 249.266832] ? tcp_sendpage+0x60/0x60 [ 249.270703] ? trace_hardirqs_on_caller+0x400/0x590 [ 249.275747] ? lock_sock_nested+0x8c/0x110 [ 249.280012] ? trace_hardirqs_on+0xd/0x10 [ 249.284198] ? __local_bh_enable_ip+0x99/0x1a0 [ 249.288808] tcp_sendmsg+0x30/0x50 [ 249.292373] inet_sendmsg+0x122/0x500 [ 249.296287] ? inet_recvmsg+0x500/0x500 [ 249.300295] sock_sendmsg+0xce/0x110 [ 249.304030] SYSC_sendto+0x206/0x310 [ 249.307767] ? SYSC_connect+0x2d0/0x2d0 [ 249.311770] ? lock_downgrade+0x6e0/0x6e0 [ 249.315962] ? wait_for_completion+0x420/0x420 [ 249.320591] ? __sb_end_write+0xc1/0x100 [ 249.324670] ? fput+0xd4/0x150 [ 249.327873] ? SyS_write+0x10b/0x180 20:34:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x500, 0x0) pread64(r0, &(0x7f0000000400)=""/144, 0x90, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x8, 0x14, "91266cdaf685632a96e106a04d4476680ac02f9a851606c897a0c2eeba55e104472157c008ca3e78758e43681591a3a770cb74f8b34bd62f32e586e7fcb43fda", "c9b2e668f24267cf9e98aba47bce12a646e7ca1d16c7448f3f00c5f0081d6512", [0x1f, 0x9]}) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) epoll_create1(0x80000) 20:34:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 249.327890] SyS_sendto+0x40/0x50 [ 249.327901] ? SyS_getpeername+0x30/0x30 [ 249.327914] do_syscall_64+0x1e8/0x640 [ 249.327927] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 249.349036] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 249.354243] RIP: 0033:0x459279 [ 249.357436] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 249.365388] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 249.372672] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 20:34:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) getpeername$netrom(r1, &(0x7f00000000c0)={{0x3, @bcast}, [@bcast, @default, @default, @bcast, @default, @remote, @null, @bcast]}, &(0x7f0000000140)=0x48) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) write$UHID_INPUT2(r1, &(0x7f0000000340)={0xc, 0x1000, "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"}, 0x1006) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000180)={0x1, 0x4, [@link_local, @broadcast, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]}) 20:34:22 executing program 4: r0 = socket$inet_sctp(0x2, 0xfffffffffffffffb, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000700)=[{&(0x7f0000000300)=@in={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@sndinfo={0x20, 0x84, 0x2, {0x3f, 0x9, 0x200, 0x793b}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x2, 0x6, 0x1000}}, @init={0x18, 0x84, 0x0, {0x5, 0x80000001, 0x0, 0x7}}], 0x58, 0x800}], 0x1, 0x20000001) pipe2$9p(&(0x7f0000000040), 0x200080000) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) 20:34:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f00008bc000/0x3000)=nil, 0x3000, 0x5, 0x10, r1, 0xffffffffffffffff) r2 = syz_open_dev$vcsn(&(0x7f0000001380)='/dev/vcs#\x00', 0x5, 0x101001) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f00000013c0)=0x852) 20:34:23 executing program 5: mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) [ 249.372679] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 249.372685] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 249.372691] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:23 executing program 1 (fault-call:6 fault-nth:2): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101800, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000080)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x228000, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200, 0x0) [ 249.511645] FAULT_INJECTION: forcing a failure. [ 249.511645] name failslab, interval 1, probability 0, space 0, times 0 20:34:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 249.553001] overlayfs: filesystem on './file0' not supported as upperdir [ 249.565272] CPU: 1 PID: 17435 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 249.572410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.581785] Call Trace: [ 249.584397] dump_stack+0x138/0x19c [ 249.588063] should_fail.cold+0x10f/0x159 [ 249.592242] should_failslab+0xdb/0x130 [ 249.596246] kmem_cache_alloc_node+0x287/0x780 [ 249.600851] ? tcp_established_options+0x2c5/0x420 [ 249.605810] __alloc_skb+0x9c/0x500 [ 249.609461] ? skb_scrub_packet+0x4b0/0x4b0 [ 249.613805] ? sock_zerocopy_alloc+0x1fb/0x270 [ 249.618419] sk_stream_alloc_skb+0xb3/0x780 [ 249.622757] ? tcp_send_mss+0xa4/0x2f0 [ 249.626668] tcp_sendmsg_locked+0xf56/0x3400 [ 249.631123] ? save_trace+0x290/0x290 [ 249.634952] ? lock_sock_nested+0x9e/0x110 [ 249.639216] ? find_held_lock+0x35/0x130 [ 249.643317] ? tcp_sendpage+0x60/0x60 [ 249.647228] ? trace_hardirqs_on_caller+0x400/0x590 20:34:23 executing program 3: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 249.652271] ? trace_hardirqs_on+0xd/0x10 [ 249.656448] tcp_sendmsg+0x30/0x50 [ 249.660020] inet_sendmsg+0x122/0x500 [ 249.663847] ? inet_recvmsg+0x500/0x500 [ 249.667842] sock_sendmsg+0xce/0x110 [ 249.671590] SYSC_sendto+0x206/0x310 [ 249.675329] ? SYSC_connect+0x2d0/0x2d0 [ 249.679329] ? lock_downgrade+0x6e0/0x6e0 [ 249.683516] ? wait_for_completion+0x420/0x420 [ 249.688119] ? __sb_end_write+0xc1/0x100 [ 249.692337] ? fput+0xd4/0x150 [ 249.695544] ? SyS_write+0x10b/0x180 [ 249.699281] SyS_sendto+0x40/0x50 20:34:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0b") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 249.702754] ? SyS_getpeername+0x30/0x30 [ 249.706836] do_syscall_64+0x1e8/0x640 [ 249.710845] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 249.715725] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 249.721017] RIP: 0033:0x459279 [ 249.724215] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 249.731934] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 249.739228] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 249.746517] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 249.753806] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 249.761090] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e27, @multicast2}, 0xfffffdff) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0x1450}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)) 20:34:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x4, 0x84) mmap(&(0x7f0000b29000/0x2000)=nil, 0x2000, 0x5, 0x2000000010, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:23 executing program 1 (fault-call:6 fault-nth:3): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000000c0)={0x1, "328eb23a12acf5bcecf2d8d8aeea8feec53cacb53065c3ad548f396a8a30d719", 0x2, 0x10001, 0x2, 0xffffff, 0x6000000, 0x8}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0b") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0b") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x280, 0x0) [ 249.931325] FAULT_INJECTION: forcing a failure. [ 249.931325] name failslab, interval 1, probability 0, space 0, times 0 20:34:23 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000100)=@bpq0='bpq0\x00', 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x953, 0x4, [0x6b2a102b, 0x5, 0x9, 0x2]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r2, 0x486, 0x1}, &(0x7f0000000200)=0xc) 20:34:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @empty, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @remote}, 0x10) [ 250.060815] CPU: 1 PID: 17480 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 250.067986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.077360] Call Trace: [ 250.079970] dump_stack+0x138/0x19c [ 250.083626] should_fail.cold+0x10f/0x159 [ 250.087808] should_failslab+0xdb/0x130 [ 250.091801] kmem_cache_alloc_node_trace+0x280/0x770 [ 250.096928] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 250.102408] __kmalloc_node_track_caller+0x3d/0x80 [ 250.107369] __kmalloc_reserve.isra.0+0x40/0xe0 [ 250.112066] __alloc_skb+0xcf/0x500 [ 250.115735] ? skb_scrub_packet+0x4b0/0x4b0 [ 250.120096] ? sock_zerocopy_alloc+0x1fb/0x270 [ 250.124725] sk_stream_alloc_skb+0xb3/0x780 [ 250.129068] ? tcp_send_mss+0xa4/0x2f0 [ 250.129086] tcp_sendmsg_locked+0xf56/0x3400 [ 250.129099] ? save_trace+0x290/0x290 [ 250.129115] ? lock_sock_nested+0x9e/0x110 [ 250.145479] ? find_held_lock+0x35/0x130 [ 250.149567] ? tcp_sendpage+0x60/0x60 [ 250.149583] ? trace_hardirqs_on_caller+0x400/0x590 20:34:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x10000, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000400)={0xffffffffffffff00}, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0), 0x4) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) [ 250.149594] ? trace_hardirqs_on+0xd/0x10 [ 250.149608] tcp_sendmsg+0x30/0x50 [ 250.166134] inet_sendmsg+0x122/0x500 [ 250.170048] ? inet_recvmsg+0x500/0x500 [ 250.174042] sock_sendmsg+0xce/0x110 [ 250.177764] SYSC_sendto+0x206/0x310 [ 250.181484] ? SYSC_connect+0x2d0/0x2d0 [ 250.185467] ? lock_downgrade+0x6e0/0x6e0 [ 250.189640] ? wait_for_completion+0x420/0x420 [ 250.194238] ? __sb_end_write+0xc1/0x100 [ 250.198316] ? fput+0xd4/0x150 [ 250.201649] ? SyS_write+0x10b/0x180 [ 250.205385] SyS_sendto+0x40/0x50 [ 250.208844] ? SyS_getpeername+0x30/0x30 [ 250.212909] do_syscall_64+0x1e8/0x640 [ 250.216796] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.221656] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 250.226856] RIP: 0033:0x459279 [ 250.230036] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 250.237747] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 250.245039] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 250.252317] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 20:34:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7b") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 250.259593] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 250.266874] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:23 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xb, 0x0, 0x77014a3d19e901ce) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000040)={0x6, 0x2, [{0x3, 0x0, 0x3}, {0x4, 0x0, 0x4}, {0x0, 0x0, 0x1000}, {0x81, 0x0, 0x100000001}, {0x80000000, 0x0, 0xdf4}, {0x8, 0x0, 0x9}]}) 20:34:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)) msgsnd(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="01e3f4f60929a3322e6d96f5a6189289e67d37df8077988eb2a3da2b9312293d68b2513701b5e707726840f4eb09547f6e"], 0x1, 0x0) msgctl$IPC_RMID(r1, 0x0) 20:34:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, &(0x7f0000000240)=[{0xfffffffffffffffd}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000080)="d8e7fa6a414b28b348ead626f7c50cf227fa50b0dd026f8af5abcceadcaae8ae47dd4575ecb743a5627d5e7b77b9c2c9b59b6c178fb076edae0ead681bbaf38dd625529c31818c92561e61680be0788eae259d6be0ebbb1baad487dc7d1096f0ccaf21db00b2cf8bbc78f3b10c03834b6b34d3afca1d5f8c1f545260583f21c658ecaec4bd91ebee16e3c170f66aa2b9b8bfdc0039014660b023aec5071e21c19d52e869d1565c8cba6e5deb2af24ff5a1d5749f", 0xb4}, {&(0x7f0000000140)="612636b221f1ca26340dcd77399fe5e997bec45289210fd65b1f2f2e874bbe13e3300406316e621718b4", 0x2a}, {&(0x7f0000000180)="4034ed29869dff2eda325056d35d81990642897a77b2c19261ca100453bc0f4926c45a1dcd12844579e87339e6f64a55310839a01315ca56b8be810eaaefe7973c35c198a9d96f26e82ba3a5d771ed4f89eb11691ee81ec386ea79fa1c46a65883c70ccabe6bc1ec22e8d465f44ecc0b47be13403452f7d0b4b4137d825abf9861db389686ad2962eaff6edca71bb0086748bf", 0x93}], 0x5, &(0x7f00000002c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0x3, 0x1, 0x0, [{[@multicast2], 0x6}, {[@rand_addr=0x3], 0x20}, {[@rand_addr=0x401], 0xef}, {[@local]}]}, @end, @end]}}}], 0x68}, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:24 executing program 1 (fault-call:6 fault-nth:4): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="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") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7b") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r3 = getpid() ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0xe6, 0x0, 0x4, 0x4, 0x42, r3}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 250.496906] FAULT_INJECTION: forcing a failure. [ 250.496906] name failslab, interval 1, probability 0, space 0, times 0 [ 250.508472] CPU: 1 PID: 17530 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 250.508494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.508500] Call Trace: [ 250.508521] dump_stack+0x138/0x19c [ 250.508541] should_fail.cold+0x10f/0x159 [ 250.508561] should_failslab+0xdb/0x130 [ 250.508575] kmem_cache_alloc+0x47/0x780 20:34:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000280), 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) quotactl(0x8, &(0x7f0000000100)='./file0\x00', r3, &(0x7f00000001c0)="9c2b37b51878fce0fdda34221652949cd5d3af62cbd01d3f1921588826f7a24fdaf8b3dfb929cbd0d9e7549cac4ceeb80e576f725c2b0a78ef95c1a63a78d30a9c9bd0662d425397050cd2adb6b9ec909cbfabee2115dc5b69245825bcb6771e6524ddbeac954473e36a88cb02c733af12bdb09f443f964d713858") r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400800, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r4, 0x0, 0x1, 0x20, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 250.508587] ? lock_acquire+0x16f/0x430 [ 250.508600] ? check_preemption_disabled+0x3c/0x250 [ 250.508618] skb_clone+0x129/0x320 [ 250.508631] dev_queue_xmit_nit+0x296/0x8c0 [ 250.508650] dev_hard_start_xmit+0xa7/0x8b0 [ 250.508664] ? assoc_array_gc+0x1140/0x11d0 [ 250.508680] __dev_queue_xmit+0x1d95/0x25e0 [ 250.560448] ? trace_hardirqs_on+0xd/0x10 [ 250.560460] ? __local_bh_enable_ip+0x99/0x1a0 [ 250.560476] ? netdev_pick_tx+0x300/0x300 [ 250.560495] ? find_held_lock+0x35/0x130 [ 250.560508] ? ip_finish_output+0x56d/0xc60 20:34:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000000c0)={0x31, 0x101}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x8) [ 250.560523] ? mark_held_locks+0xb1/0x100 [ 250.560536] dev_queue_xmit+0x18/0x20 [ 250.560549] ? dev_queue_xmit+0x18/0x20 [ 250.560559] ip_finish_output2+0xddc/0x14a0 [ 250.560569] ? get_info+0x560/0x560 [ 250.560583] ? ip_copy_metadata+0x9b0/0x9b0 [ 250.607077] ip_finish_output+0x56d/0xc60 [ 250.607090] ? ip_finish_output+0x56d/0xc60 [ 250.615161] ip_output+0x1e6/0x590 [ 250.615184] ? ip_mc_output+0xd40/0xd40 [ 250.635521] ? __lock_is_held+0xb6/0x140 [ 250.639604] ? check_preemption_disabled+0x3c/0x250 20:34:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000000)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) [ 250.644652] ? ip_fragment.constprop.0+0x200/0x200 [ 250.649611] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 250.655080] ip_local_out+0x97/0x170 [ 250.658810] ip_queue_xmit+0x7d7/0x1b10 [ 250.658824] ? __tcp_v4_send_check+0x1c0/0x360 [ 250.658841] __tcp_transmit_skb+0x172c/0x2fe0 [ 250.658862] ? bictcp_cong_avoid+0xe50/0xe50 [ 250.667435] ? __tcp_select_window+0x6e0/0x6e0 [ 250.667468] ? kvm_clock_read+0x23/0x40 [ 250.667483] ? sched_clock_cpu+0x1b/0x1c0 [ 250.689062] ? tcp_small_queue_check+0x184/0x1e0 [ 250.693831] tcp_write_xmit+0x523/0x48b0 20:34:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20100000898f, &(0x7f0000000700)="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") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 250.697912] ? refcount_inc+0x1f/0x40 [ 250.701741] tcp_push_one+0xc1/0xf0 [ 250.705383] tcp_sendmsg_locked+0x1571/0x3400 [ 250.709902] ? save_trace+0x290/0x290 [ 250.713746] ? tcp_sendpage+0x60/0x60 [ 250.717568] ? trace_hardirqs_on_caller+0x400/0x590 [ 250.722599] ? trace_hardirqs_on+0xd/0x10 [ 250.726765] tcp_sendmsg+0x30/0x50 [ 250.730319] inet_sendmsg+0x122/0x500 [ 250.734137] ? inet_recvmsg+0x500/0x500 [ 250.738131] sock_sendmsg+0xce/0x110 [ 250.741858] SYSC_sendto+0x206/0x310 20:34:24 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x4, 0x1e003) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140)=0x1ff, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00'}, 0x45c) sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x100000000, 0x2, 0x80000000, 0x2, 0x0, 0x0, 0x40000, 0x0, 0x9, 0x3, 0x200, 0xfff, 0x200, 0x0, 0x0, 0x9, 0x2a4, 0x80000000, 0x2, 0x0, 0xf47, 0x3, 0xffff, 0x1, 0x5, 0x7, 0x3, 0xae, 0x7, 0x100000000, 0x46, 0xfffffffffffffffe, 0x6dd0, 0x184, 0x8, 0x5, 0x0, 0xd9, 0x2, @perf_config_ext={0x8, 0x401}, 0x0, 0x8, 0xfffffffffffff800, 0x7, 0x3, 0x63, 0x800}, r3, 0xc, r0, 0xa) ioctl$UI_DEV_CREATE(r2, 0x5501) readv(r2, &(0x7f0000000540)=[{&(0x7f0000000f40)=""/4096, 0x1053}], 0x1) write$uinput_user_dev(r2, &(0x7f0000001f40)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 250.745588] ? SYSC_connect+0x2d0/0x2d0 [ 250.749576] ? lock_downgrade+0x6e0/0x6e0 [ 250.753747] ? wait_for_completion+0x420/0x420 [ 250.758346] ? __sb_end_write+0xc1/0x100 [ 250.762418] ? fput+0xd4/0x150 [ 250.762436] ? SyS_write+0x10b/0x180 [ 250.762452] SyS_sendto+0x40/0x50 [ 250.762463] ? SyS_getpeername+0x30/0x30 [ 250.762476] do_syscall_64+0x1e8/0x640 [ 250.762486] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.762504] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 250.790918] RIP: 0033:0x459279 [ 250.794129] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 250.801861] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 250.809143] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 250.816430] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 250.823722] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 250.831014] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:24 executing program 5: quotactl(0x20800001ff, 0x0, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1400) 20:34:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x5, 0x7, 0x6, 0x81, 0x84a}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x40, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x8, 0x5, 0x2, 0x3, 0x0, 0x2, 0x10000, 0x6, 0x4, 0x9, 0x180000000000, 0xfffffffffffffff9, 0x1f, 0x800, 0x6, 0x5, 0xf326, 0x9, 0x6, 0x9, 0x1f, 0x100000000, 0x1e38, 0x7ff, 0x3f, 0x81, 0x7fffffff, 0x2, 0x10000, 0xb6, 0x2194975e, 0x80000000000, 0x8, 0x9, 0x0, 0x100000000, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x4800, 0x1, 0x8000, 0x7, 0x2, 0x9, 0x6}, 0x0, 0x9, r2, 0x8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x1010, r1, 0xfffffffffffffffc) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 250.850696] input: syz1 as /devices/virtual/input/input10 20:34:24 executing program 1 (fault-call:6 fault-nth:5): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7b") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) fcntl$setflags(r1, 0x2, 0x1) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000000)={0x0, {0x7}}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000180)=0x3, 0x4) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000140)={0x0, 0x28000}, 0x2) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @rand_addr=0x6}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e23, @broadcast}, 0x4a, 0x0, 0x0, 0x0, 0xd7e2, 0x0, 0x80000000, 0x2b33, 0x2}) 20:34:24 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)) 20:34:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be0") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x40) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000080)={0x5}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 250.992358] input: syz1 as /devices/virtual/input/input11 20:34:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") setrlimit(0xfffffffffffffffd, &(0x7f0000000100)={0x0, 0x3fffffffc}) [ 251.077703] FAULT_INJECTION: forcing a failure. [ 251.077703] name failslab, interval 1, probability 0, space 0, times 0 [ 251.089291] CPU: 0 PID: 17574 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 251.096418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.106226] Call Trace: [ 251.108840] dump_stack+0x138/0x19c [ 251.112498] should_fail.cold+0x10f/0x159 [ 251.116762] should_failslab+0xdb/0x130 [ 251.120763] kmem_cache_alloc_node_trace+0x5a/0x770 [ 251.125796] ? SYSC_sendto+0x206/0x310 [ 251.129692] ? SyS_sendto+0x40/0x50 [ 251.133332] ? do_syscall_64+0x1e8/0x640 [ 251.137405] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 251.142786] __kmalloc_node_track_caller+0x3d/0x80 [ 251.147734] __kmalloc_reserve.isra.0+0x40/0xe0 [ 251.152420] pskb_expand_head+0x116/0xc10 [ 251.156573] ? find_held_lock+0x35/0x130 [ 251.160653] ? dev_queue_xmit_nit+0x4e7/0x8c0 [ 251.165170] skb_copy_ubufs+0x24a/0x14e0 [ 251.169263] ? kvm_clock_read+0x23/0x40 [ 251.173430] ? kvm_clock_get_cycles+0x9/0x10 [ 251.177858] ? ktime_get_with_offset+0x208/0x320 [ 251.184102] dev_queue_xmit_nit+0x53b/0x8c0 [ 251.188443] dev_hard_start_xmit+0xa7/0x8b0 [ 251.192788] ? assoc_array_gc+0x1140/0x11d0 [ 251.197138] __dev_queue_xmit+0x1d95/0x25e0 [ 251.201467] ? trace_hardirqs_on+0xd/0x10 [ 251.205622] ? __local_bh_enable_ip+0x99/0x1a0 [ 251.210228] ? netdev_pick_tx+0x300/0x300 [ 251.214390] ? find_held_lock+0x35/0x130 [ 251.218466] ? ip_finish_output+0x56d/0xc60 [ 251.222807] ? mark_held_locks+0xb1/0x100 [ 251.226982] dev_queue_xmit+0x18/0x20 [ 251.230787] ? dev_queue_xmit+0x18/0x20 [ 251.234765] ip_finish_output2+0xddc/0x14a0 [ 251.239097] ? get_info+0x560/0x560 [ 251.242745] ? ip_copy_metadata+0x9b0/0x9b0 [ 251.247089] ip_finish_output+0x56d/0xc60 [ 251.251256] ? ip_finish_output+0x56d/0xc60 [ 251.255595] ip_output+0x1e6/0x590 [ 251.259147] ? ip_mc_output+0xd40/0xd40 [ 251.263149] ? __lock_is_held+0xb6/0x140 [ 251.267233] ? check_preemption_disabled+0x3c/0x250 [ 251.272258] ? ip_fragment.constprop.0+0x200/0x200 [ 251.277195] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 251.282648] ip_local_out+0x97/0x170 [ 251.286358] ip_queue_xmit+0x7d7/0x1b10 [ 251.290327] ? __tcp_v4_send_check+0x1c0/0x360 [ 251.294919] __tcp_transmit_skb+0x172c/0x2fe0 [ 251.299416] ? bictcp_cong_avoid+0xe50/0xe50 [ 251.303818] ? __tcp_select_window+0x6e0/0x6e0 [ 251.308400] ? kvm_clock_read+0x23/0x40 [ 251.312372] ? sched_clock_cpu+0x1b/0x1c0 [ 251.316514] ? tcp_small_queue_check+0x184/0x1e0 [ 251.321268] tcp_write_xmit+0x523/0x48b0 [ 251.325346] ? refcount_inc+0x1f/0x40 [ 251.329151] tcp_push_one+0xc1/0xf0 [ 251.332778] tcp_sendmsg_locked+0x1571/0x3400 [ 251.337268] ? save_trace+0x290/0x290 [ 251.341079] ? tcp_sendpage+0x60/0x60 [ 251.344880] ? trace_hardirqs_on_caller+0x400/0x590 [ 251.349898] ? trace_hardirqs_on+0xd/0x10 [ 251.354053] tcp_sendmsg+0x30/0x50 [ 251.357595] inet_sendmsg+0x122/0x500 [ 251.361395] ? inet_recvmsg+0x500/0x500 [ 251.365367] sock_sendmsg+0xce/0x110 [ 251.369096] SYSC_sendto+0x206/0x310 [ 251.372815] ? SYSC_connect+0x2d0/0x2d0 [ 251.376800] ? lock_downgrade+0x6e0/0x6e0 [ 251.380966] ? wait_for_completion+0x420/0x420 [ 251.385551] ? __sb_end_write+0xc1/0x100 [ 251.389618] ? fput+0xd4/0x150 [ 251.392811] ? SyS_write+0x10b/0x180 [ 251.396523] SyS_sendto+0x40/0x50 [ 251.399970] ? SyS_getpeername+0x30/0x30 [ 251.404036] do_syscall_64+0x1e8/0x640 [ 251.407916] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 251.412762] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 251.417953] RIP: 0033:0x459279 [ 251.421138] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 20:34:24 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000029000000040000000000000000000000180000000000000029000000040000000000000000000000a1c982c0c3db479c7d232d57c2bcb391cec0e46de705a5512aeee83d6ceb6216a7e019f8c73816362d2bc6816e7a87ba5995ca1df7c33f616d349f684387f2cb305662bbb2d9941759bee1556631325d1208caee0d6c761cb56ae563a226a9cd1d7c2f24c2a61aac9e79d2111046174a7190f789e72a91b829a83d70319b74ae5a371e94d915dd683f2d104795168e8f7e8e81a01e6ee29c"], 0xc8}}], 0x1, 0x0) 20:34:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0xf, 0x148}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x40000000000001, 0x0) 20:34:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001640)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000001580)='/dev/midi#\x00', 0x5, 0x10800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000015c0)=0x9) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000001540)={0x100000000, 0x5, 0x3f, 0x4}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000200)={0x7b, 0x2, [0x80c0000101, 0x0, 0x1d9, 0x1], [0xc1]}) r4 = getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000001600)=r4) r5 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0x101000) recvmsg$kcm(r5, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000000080)=""/141, 0x8d}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000180)=""/108, 0x6c}], 0x6, &(0x7f00000014c0)=""/47, 0x2f}, 0x20) [ 251.428846] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 251.436121] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 251.443409] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 251.450682] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 251.457956] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 [ 251.465645] net_ratelimit: 22 callbacks suppressed [ 251.465652] protocol 88fb is buggy, dev hsr_slave_0 20:34:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x5, 0x800000032, 0xffffffffffffffff, 0x0) clock_nanosleep(0x7, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000001380)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x400, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f00000000c0)='\x00', 0xffffffffffffffff}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000180)={{0x0, 0x2, 0x100000001, 0xb9, '\x00', 0x8}, 0x1, 0x10, 0xf3, r2, 0x3, 0xfffffffffffffbff, 'syz1\x00', &(0x7f0000000140)=['wlan1securitywlan1\x00', '\x00', '\x8e&\x00'], 0x17, [], [0x1, 0x20, 0x100000000, 0x8]}) 20:34:25 executing program 2: getrandom(0x0, 0x0, 0x3) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890e, &(0x7f0000000200)="00003ecdb43d0000000000007e53d5fc450896fdafd2bfe900005defa78a") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) socket$inet_tcp(0x2, 0x1, 0x0) kexec_load(0x1fc37f6f, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="f43955553368e6025bdeb39753e912ace6da1f665825a84ee60a097f137a6498d4d169580a11aeb36af8c5e5d1f9e1e5a96394099013bbc40303a1e5fc4acda5c45f1668863d507e2785ed75800a39535ff49f6eb3bff722921e07cb8c7a0efa832bd7f1566a5f66d6761064e715ff3ac67d729d085e0698b44dadc57af69a99209ac073552da07e8d93f70056ae2656e707d35c870cf774d59e19a8db8fe5e0f14475bc078a6db0098dea9beefd15292392a1bb44da1d37481c5b0c1a9a91dff86dbcc44b", 0xc5, 0x9, 0xc6}], 0x3a0000) [ 251.475722] protocol 88fb is buggy, dev hsr_slave_1 20:34:25 executing program 1 (fault-call:6 fault-nth:6): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be0") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3, &(0x7f0000000080)="11dca5055e0bcfec7be070") r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$nbd(r1, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "7996cee03e35b84557439372e5cbe837067bdfb490ff6fb7d57c69ac5442661f41118132a623f0465a2ced4676e3a6f7c1ec454abd1b4c348457a6a0726aecdadecc2fbd98b6e7e6f56d0d284205e127135e1e853373440829f6f657aaf18d9dbffc01c5a10c3ad18d1359187034b2257cd804d6f37edc5dddaca110825a4c7d6795791cadf1e1dfb6f47e193209fc06"}, 0xa0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KDDISABIO(r3, 0x4b37) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:25 executing program 4: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote}, &(0x7f0000000080)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x19, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x44}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x99, &(0x7f000000d000)=""/153, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8, 0xfffffffffffffffe, 0x29}, 0x10}, 0x70) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400201, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000140)={0x1f, {0x80, 0x100000000, 0x38, 0x1, 0x200, 0x3f}, 0x4}, 0xa) 20:34:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_int(r1, &(0x7f0000000080), 0x2001007f) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 251.687758] FAULT_INJECTION: forcing a failure. [ 251.687758] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 251.701456] CPU: 0 PID: 17613 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 251.710317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.719688] Call Trace: [ 251.722302] dump_stack+0x138/0x19c [ 251.725976] should_fail.cold+0x10f/0x159 [ 251.730158] ? do_syscall_64+0x1e8/0x640 [ 251.734294] __alloc_pages_nodemask+0x1d6/0x7a0 [ 251.738988] ? __alloc_pages_slowpath+0x2930/0x2930 [ 251.744017] ? refcount_inc_not_zero+0x88/0xe0 [ 251.748624] ? pskb_expand_head+0x6cc/0xc10 [ 251.752956] alloc_pages_current+0xec/0x1e0 [ 251.757293] skb_copy_ubufs+0x3f6/0x14e0 [ 251.761392] ? kvm_clock_read+0x23/0x40 [ 251.765363] ? kvm_clock_get_cycles+0x9/0x10 [ 251.769789] ? ktime_get_with_offset+0x208/0x320 [ 251.774552] dev_queue_xmit_nit+0x53b/0x8c0 [ 251.778885] dev_hard_start_xmit+0xa7/0x8b0 [ 251.783218] ? assoc_array_gc+0x1140/0x11d0 [ 251.787566] __dev_queue_xmit+0x1d95/0x25e0 [ 251.791897] ? trace_hardirqs_on+0xd/0x10 [ 251.796079] ? __local_bh_enable_ip+0x99/0x1a0 [ 251.800679] ? netdev_pick_tx+0x300/0x300 [ 251.804860] ? find_held_lock+0x35/0x130 [ 251.808944] ? ip_finish_output+0x56d/0xc60 [ 251.813299] ? mark_held_locks+0xb1/0x100 [ 251.817452] dev_queue_xmit+0x18/0x20 [ 251.821255] ? dev_queue_xmit+0x18/0x20 [ 251.825228] ip_finish_output2+0xddc/0x14a0 [ 251.829552] ? get_info+0x560/0x560 [ 251.833193] ? ip_copy_metadata+0x9b0/0x9b0 [ 251.837526] ip_finish_output+0x56d/0xc60 [ 251.841673] ? ip_finish_output+0x56d/0xc60 [ 251.846093] ip_output+0x1e6/0x590 [ 251.849640] ? ip_mc_output+0xd40/0xd40 [ 251.853626] ? __lock_is_held+0xb6/0x140 [ 251.857693] ? check_preemption_disabled+0x3c/0x250 [ 251.862716] ? ip_fragment.constprop.0+0x200/0x200 [ 251.867664] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 251.873128] ip_local_out+0x97/0x170 [ 251.876843] ip_queue_xmit+0x7d7/0x1b10 [ 251.880815] ? __tcp_v4_send_check+0x1c0/0x360 [ 251.885396] __tcp_transmit_skb+0x172c/0x2fe0 [ 251.889896] ? bictcp_cong_avoid+0xe50/0xe50 [ 251.894304] ? __tcp_select_window+0x6e0/0x6e0 [ 251.898886] ? kvm_clock_read+0x23/0x40 [ 251.902971] ? sched_clock_cpu+0x1b/0x1c0 [ 251.907140] ? tcp_small_queue_check+0x184/0x1e0 [ 251.911895] tcp_write_xmit+0x523/0x48b0 [ 251.915959] ? refcount_inc+0x1f/0x40 [ 251.919945] tcp_push_one+0xc1/0xf0 [ 251.923582] tcp_sendmsg_locked+0x1571/0x3400 [ 251.928167] ? save_trace+0x290/0x290 [ 251.931988] ? tcp_sendpage+0x60/0x60 [ 251.936311] ? trace_hardirqs_on_caller+0x400/0x590 [ 251.941512] ? trace_hardirqs_on+0xd/0x10 [ 251.945671] tcp_sendmsg+0x30/0x50 [ 251.949211] inet_sendmsg+0x122/0x500 [ 251.953010] ? inet_recvmsg+0x500/0x500 [ 251.957008] sock_sendmsg+0xce/0x110 [ 251.960721] SYSC_sendto+0x206/0x310 [ 251.964474] ? SYSC_connect+0x2d0/0x2d0 [ 251.968445] ? lock_downgrade+0x6e0/0x6e0 [ 251.972598] ? wait_for_completion+0x420/0x420 [ 251.977173] ? __sb_end_write+0xc1/0x100 [ 251.981237] ? fput+0xd4/0x150 [ 251.984426] ? SyS_write+0x10b/0x180 [ 251.988138] SyS_sendto+0x40/0x50 [ 251.991613] ? SyS_getpeername+0x30/0x30 [ 251.995677] do_syscall_64+0x1e8/0x640 [ 251.999658] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.004516] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 252.009713] RIP: 0033:0x459279 [ 252.012900] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 252.020607] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 252.027981] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 20:34:25 executing program 4: r0 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x40) pwritev(r0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="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", 0x7f8}], 0x1, 0x81808) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_ROPEN(r1, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x15, 0x1, 0x5}, 0x8001}}, 0x18) 20:34:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be0") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 252.035244] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 252.042513] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 252.049877] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 [ 252.060212] protocol 88fb is buggy, dev hsr_slave_0 [ 252.065391] protocol 88fb is buggy, dev hsr_slave_1 20:34:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) ioctl$TIOCNXCL(r2, 0x540d) fallocate(r2, 0x56, 0xfffffffffffffe01, 0xfffffffffffffffe) signalfd4(r1, &(0x7f0000000040)={0x7f}, 0x8, 0x0) 20:34:25 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x3, &(0x7f0000000200)="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"/319) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) 20:34:25 executing program 5: r0 = timerfd_create(0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40202, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000000280)) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0x400, 0x1, 0x8, 0x7ff}, 0x10) fstat(r4, &(0x7f0000000080)) sendmmsg$unix(r3, &(0x7f0000001680)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}], 0x1, 0x0) 20:34:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="df671d555e8c87977be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:25 executing program 1 (fault-call:6 fault-nth:7): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:25 executing program 4: mkdir(&(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x4) renameat2(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000001480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) renameat2(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 20:34:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='GPL[\x00', 0xfffffffffffffff8) r3 = request_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='\'*\x00', 0xffffffffffffffff) keyctl$instantiate(0xc, r2, 0x0, 0x0, r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 252.521127] FAULT_INJECTION: forcing a failure. [ 252.521127] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 252.533053] CPU: 0 PID: 17660 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 252.540161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.549557] Call Trace: [ 252.552166] dump_stack+0x138/0x19c [ 252.555835] should_fail.cold+0x10f/0x159 [ 252.559989] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 252.565454] __alloc_pages_nodemask+0x1d6/0x7a0 [ 252.570144] ? __alloc_pages_slowpath+0x2930/0x2930 [ 252.575198] ? refcount_inc_not_zero+0x88/0xe0 [ 252.579793] ? pskb_expand_head+0x6cc/0xc10 [ 252.584121] alloc_pages_current+0xec/0x1e0 [ 252.588432] skb_copy_ubufs+0x3f6/0x14e0 [ 252.592487] ? kvm_clock_read+0x23/0x40 [ 252.596513] ? kvm_clock_get_cycles+0x9/0x10 [ 252.600916] ? ktime_get_with_offset+0x208/0x320 [ 252.605662] dev_queue_xmit_nit+0x53b/0x8c0 [ 252.609978] dev_hard_start_xmit+0xa7/0x8b0 [ 252.614297] ? assoc_array_gc+0x1140/0x11d0 [ 252.618642] __dev_queue_xmit+0x1d95/0x25e0 [ 252.622954] ? trace_hardirqs_on+0xd/0x10 [ 252.627089] ? __local_bh_enable_ip+0x99/0x1a0 [ 252.631658] ? netdev_pick_tx+0x300/0x300 [ 252.635804] ? find_held_lock+0x35/0x130 [ 252.639866] ? ip_finish_output+0x56d/0xc60 [ 252.644209] ? mark_held_locks+0xb1/0x100 [ 252.648363] dev_queue_xmit+0x18/0x20 [ 252.652151] ? dev_queue_xmit+0x18/0x20 [ 252.656109] ip_finish_output2+0xddc/0x14a0 [ 252.660421] ? get_info+0x560/0x560 [ 252.664050] ? ip_copy_metadata+0x9b0/0x9b0 [ 252.668359] ip_finish_output+0x56d/0xc60 [ 252.672494] ? ip_finish_output+0x56d/0xc60 [ 252.676798] ip_output+0x1e6/0x590 [ 252.680351] ? ip_mc_output+0xd40/0xd40 [ 252.684313] ? __lock_is_held+0xb6/0x140 [ 252.688369] ? check_preemption_disabled+0x3c/0x250 [ 252.693386] ? ip_fragment.constprop.0+0x200/0x200 [ 252.698303] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 252.703741] ip_local_out+0x97/0x170 [ 252.707450] ip_queue_xmit+0x7d7/0x1b10 [ 252.711416] ? __tcp_v4_send_check+0x1c0/0x360 [ 252.715984] __tcp_transmit_skb+0x172c/0x2fe0 [ 252.720469] ? bictcp_cong_avoid+0xe50/0xe50 [ 252.724861] ? __tcp_select_window+0x6e0/0x6e0 [ 252.729449] ? kvm_clock_read+0x23/0x40 [ 252.733427] ? sched_clock_cpu+0x1b/0x1c0 [ 252.737563] ? tcp_small_queue_check+0x184/0x1e0 [ 252.742319] tcp_write_xmit+0x523/0x48b0 [ 252.746364] ? refcount_inc+0x1f/0x40 [ 252.750159] tcp_push_one+0xc1/0xf0 [ 252.753797] tcp_sendmsg_locked+0x1571/0x3400 [ 252.758277] ? save_trace+0x290/0x290 [ 252.762068] ? tcp_sendpage+0x60/0x60 [ 252.765862] ? trace_hardirqs_on_caller+0x400/0x590 [ 252.770865] ? trace_hardirqs_on+0xd/0x10 [ 252.774999] tcp_sendmsg+0x30/0x50 [ 252.778525] inet_sendmsg+0x122/0x500 [ 252.782308] ? inet_recvmsg+0x500/0x500 [ 252.786271] sock_sendmsg+0xce/0x110 [ 252.789971] SYSC_sendto+0x206/0x310 [ 252.793692] ? SYSC_connect+0x2d0/0x2d0 [ 252.797696] ? lock_downgrade+0x6e0/0x6e0 [ 252.801843] ? wait_for_completion+0x420/0x420 [ 252.806434] ? __sb_end_write+0xc1/0x100 [ 252.810491] ? fput+0xd4/0x150 [ 252.813680] ? SyS_write+0x10b/0x180 [ 252.817404] SyS_sendto+0x40/0x50 [ 252.820851] ? SyS_getpeername+0x30/0x30 [ 252.824908] do_syscall_64+0x1e8/0x640 [ 252.828822] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.833690] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 252.838873] RIP: 0033:0x459279 [ 252.842051] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 252.849818] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 252.857089] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 252.864357] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 20:34:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0xf41, 0xe9ac, 0x2, 'queue0\x00', 0xffffffff}) 20:34:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:26 executing program 4: mkdir(&(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x4) renameat2(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000001480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) renameat2(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 20:34:26 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:26 executing program 1 (fault-call:6 fault-nth:8): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:26 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xffffffff, 0x80) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000040)) ioctl$int_out(r0, 0x5462, &(0x7f0000000080)) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x80000001) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f00000000c0)={0x0, 0x7}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x8001, 0x101880) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2, 0x6, 0x7, 0x2, 0x20, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_x_sec_ctx={0x1b, 0x18, 0x0, 0x1000, 0xcf, "6388ec1f7656e59153e8f3fde74db483d44d8523ae1844bce4336a3ff06202676d867bb8e23bf8249022a36f8935d32a6f212971af2ab60d94799771f3e850c59d8e3bc6960266b141927e01be43f2869377d10ae91965ba1eb525391de3587b111627b6b643117458afa15dfc782657aa3b8305a60425024417228b689d5d6c1eebabc6543949cebf6fbe4d210576418b09d7d7c0e9b8e187c927b33fed91b5437c142862cb7352ee89a7192917268a5d9aaebdbf0a8f105e194f0fae50ddd0638737fdc8d37f5d9361a3d8c888d8"}, @sadb_sa={0x2, 0x1, 0x4d4, 0xfffffffffffffffe, 0x1ff, 0x6, 0x0, 0x80000000}]}, 0x100}}, 0x8804) sendmmsg$inet6(r1, &(0x7f0000005d40)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x0, @loopback, 0x3}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="17caa85441fe4730ab50e7afc3c42fd902dbcf364bd67d222c2c0b41d9442daec9e79f4c0437b0958a74ca636cee9091cb64a98dd1a9ae31675fb1b930eca671b2cb713482ce20074455067cf904ff75d9248b2a6fee80e474860dacd3bf584edf906f59418fd8370ac4cb953a008eefccf08a9baa5214b3304161191f27bbe5714b3bc88186321f52850c6971ab21c32e88f6db67cd9de341d2ecdd8351fdcd9c92b94a265e319673b999d15e64573f5d4bac39f1dbe37207cab9b91a365dd7f4a5737debba7dc1710801deb95210ee", 0xd0}, {&(0x7f0000001440)="03944215e244b334afdda234dba19ea38d08b077125b911941b09355144d063952634227e5cb365aebce470e61869778bbc8a790119012fc6774e35211c6b0376db558ff56cdeee5aed8c7d084c640a85d4007d5f629a057dc9dc1df3074ef5f98830e8b877a41b5d9f2e20b72f803ae583ffe031055e8571c4b5e0b78eb48a102b92de69c6ead1d3c4d6964253294541f3f044f41f5e60c4acb01343924da828e96bf68f38210664dc1573f17b549b20f6a0e983a9e2356b11edfb20fc0a35a6a7cfccf23c513b166b326d85d3a53e48101a90ccca6895eb646d09a3104aa99dee4221be817fae08f1e41bf", 0xec}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="21ef5f0d7ac1c76e2d086498d395881047674fd1f728493e16d499bcd452f241e9cc4d61ca1fb7ebb67962625b868db9d8e4526f270bd0ac131f71d3a1df131db2a75e4aa7f63da75a359cf974b382413a4cc9c2b894b797ca352c8fc6eaa1d15edf04c208475fae25ef96247c04936796dc5e54ab3202b0056c5031ad4c448a4b189e75c1c291558a7d26e535a8549c1b47", 0x92}, {&(0x7f0000002600)="4f009b977c3abea3c8a39f5f2abdece7769c3a568b0d461d9ee471e135de575f6db926fcd438dcca6fccde75ee2a4fcfc70c6e249c89340df03e8e8b57a97acf1eb06183c1e03e6508cc0b5faaf3817803077c5500a2ff2a5879b7f83a40c297cada6672bf2c8a47e1e7e36bd4b3ed8c883d9bd7637edf11ee095608c7307308abd7f344ea06115c2f2c15c390f3b10dc2d3f6fc4a7c9869a9f2209f2e89373122613d28", 0xa4}], 0x6, &(0x7f0000002740)=[@rthdrdstopts={{0x10c0, 0x29, 0x37, {0x3b, 0x214, [], [@generic={0x7, 0x56, "7abeee3c298290840679daf4bfb00148bd07bbda8261c7fdcc96126e89777f4885f082a536933dde9aace63d7a924cca6bd9aeff012340d46c12af8f736dc4abc332f4383d495965f4f414aecc7af53e2b25f81eacfe"}, @ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @hao={0xc9, 0x10, @ipv4={[], [], @multicast1}}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x9, 0x1000, "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"}, @hao={0xc9, 0x10, @remote}, @pad1, @enc_lim={0x4, 0x1, 0xfffffffffffffffe}, @ra={0x5, 0x2, 0xffffffffffff7661}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x10f0}}, {{&(0x7f0000003840)={0xa, 0x4e20, 0x71f6, @empty, 0xbe}, 0x1c, &(0x7f00000048c0)=[{&(0x7f0000003880)="3ae38add62a8772896e331e56704d32d82f1f499df19e2fe", 0x18}, {&(0x7f00000038c0)="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", 0x1000}], 0x2, &(0x7f0000004900)=[@hoplimit={{0x14, 0x29, 0x34, 0x194000000000000}}], 0x18}}, {{&(0x7f0000004940)={0xa, 0x4e24, 0x8000, @remote, 0x8000}, 0x1c, &(0x7f0000004f80)=[{&(0x7f0000004980)}, {&(0x7f00000049c0)="04a3726ae310fc0877cceb5d54f1e2cd6b38d9750e009b5a85712ffd055f723f3575dc95e41b43a29825e193c7d961f35cab4eeb1595f6bbbed2b3c41c62d2d3adafa3c4d6e927c8affe8004443fae6f587d4502e6b768c3859e0d0d308261e70f0420338573d380f785e2398c76c99124760fc5d73b8528fe7cb61e0aeb5f066f30efd811f7147442aee0795e0333b0021008a44b7678ceaca4637b10e3ce4756d69b9860ecedc8627506f185e98242b15aeb0df36d3d8627733b27748c5eab375d2274809c0b79ba6fc73b792ed1", 0xcf}, {&(0x7f0000004ac0)="30e1b28ca0372d5efdb93d5f878f39cb568212fe4182e5699bbaddfeee159288be3d96322dff6147206459c734afebb8280f47b96b8441feda3e39a9dd5629074c2f9e4ccb89be086ef33c0e7616cfcad4bcae8ba2e21b714b9fc68c2740fdaeaa416f4db0514016d7d19ddd7a3fa164cbb36162091e2bc2acd202b877932155a69e64d76eb244e61a5c145be544fb8926e3f23c843a0b8e71af5d847f389b360fd9593377730588629eedc30d90834412f0f3e4a9db865f19aeaa938e8e4987801960a0ec7f8b8e555f634737", 0xcd}, {&(0x7f0000004bc0)="0f14e3194f959b0fc5c77a8be27ff2f1b4020348f2a6994f2803f5c75bc7fbca1c9d7b1a4c287c921e77a823338b914416611802ade956c992fbede197221a0f0834852526d5ad7a62a96e9b89e1a8b4d502764f8732e2a964af80079e9c302f8838d3ec27814713dc74692ef21b75d68791d923367b83fa6284c28ba9253a", 0x7f}, {&(0x7f0000004c40)="6ab2fba94f7252ffcb294ba8e50f11a2", 0x10}, {&(0x7f0000004c80)="d583cfd36b576cbc207f5914086476a8fecb72995524d6c9ddd17ccd4ede9d29eafaf914c75312877c3694c089ae61e0e67f30446f4ef629517cd4ff35e38e9709ac3a8b770fcfc4b5ae78ccf4f49cd61098e61b29774fb7693bd1302885eaa067ae3a2435107c673c3eed4b570388689c7e0c939a9f12b790409682f6cc4bddd434a81cf64adc72f18313253a75d7c9e92b7c89b57abe587f3e0b8ff4d801424aa433b029630829a3bc811c27582c77ef983742f0fe20929a3223b353aafdf3d27a10f5728c", 0xc6}, {&(0x7f0000004d80)="b7444c36ef6417eaa8e89ae998024a4ff61c3c7ba510724ff4833a5001c8da2a79974b072ee49cf1ea4b36dbb394b3dbf26b38599c0ae929074d2c905f52b985733c9124a02055ab3f1e8ab16a46824ea93d97aa3a92760a45ecd7f21c5885b496f98b14074a226ae8d5384e713069b08383c35fd67aeb9fefed24807ec50df91c5191aec18570b27af8da52043610c16458ba3b41a5ee162770b8b906f18e58cd0685928a8f09cb295a0d26ee87108992e58bb02e723aad839868a7f68456b21a677974325086e863a658797bc9150d2793ed7e6ded4ace718d1a7778874fdc", 0xe0}, {&(0x7f0000004e80)="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", 0xfb}], 0x8, &(0x7f0000005000)=[@rthdrdstopts={{0x68, 0x29, 0x37, {0xa9, 0x9, [], [@calipso={0x7, 0x10, {0x8, 0x2, 0x4, 0x45, [0x401]}}, @calipso={0x7, 0x18, {0xffffffff80000000, 0x4, 0xff, 0x5, [0x7, 0x0]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x7f, 0x9, [0x4, 0xe4]}}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}], 0x80}}, {{&(0x7f0000005080)={0xa, 0x4e23, 0x6, @rand_addr="6e45444fe4e9f09e4e4abb72955aa798", 0x3c}, 0x1c, &(0x7f00000052c0)=[{&(0x7f00000050c0)="8b13fc21f08d660d0358d9cebaac1b7b09b1084157726208fb39ed92d626b949d42fb0f19c260d8f8df6480f3f833138fbfb2b873ed24c41634fe02f9a529591d7339a120d00ce78400e00cdb2239bb128f3e9a560b3e2351584655860b05dae521f61d9fd8c9291a22787ca", 0x6c}, {&(0x7f0000005140)="b4fdae47a70247867caa18f22417c75de2737cd52afe41219f5801e31c402fc887095a25536e46bd845488bf9133860310764412e511f5e279e8adc0bbec26c31140de65c2", 0x45}, {&(0x7f00000051c0)="ba0ea1e08bf3106b556933326d9177b0eb617e88d3d57613a971173dc4483affef9de537594d2de11396a1e69d03edf84f8210024d89087f973b854855c1a3a67c2733fe2b2835bb454e0276997f08dbf294e49a57ecd6fe10773c4dce0e803d5ad84a73ec8873430eb5f8921b3b3ae6965d68a87c8c3a319418c8ea2e37", 0x7e}, {&(0x7f0000005240)="465be043affd02f418939e967edafe3575c588296ea2c6bee510893ee017b9d75af38b31431cbafec5e5100b06a1d4f2a9100f84e3c5e89c74f884ac33f966ade7462eb25f0fc416d838c08993f1f14fe99d2121198848e5", 0x58}], 0x4, &(0x7f0000005300)=[@rthdrdstopts={{0xd8, 0x29, 0x37, {0x87, 0x18, [], [@generic={0x4, 0xb1, "2ac3e3e6194bd58d54b35e5ae797b6b7897a0a5006722e587d2fca132a2638d269fabc2cca2f559d91e127fa27501335af9c57218afac0f06a25047b5bb79157a754cdca7bdb002fe028932bd2ce9a5afc21a5b591f5c51c7d587078e1290eb079659459ddf75b95424bad99642d180615153a74cfa2544b52d5cc92fda8fe46dcad69105476ce46cde19c1df51a2d1b4b931b25589925846f6d563334dec9b35f7ff3e79c7d03333d2f4c7e91fab87489"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xfffffffffffff800}]}}}, @hopopts_2292={{0xb0, 0x29, 0x36, {0xbf, 0x12, [], [@hao={0xc9, 0x10, @local}, @generic={0x5, 0x7e, "68aad02b96a2e6aa9d0ebdcc24e921d34188f3a42f556e359048c01104c0ff5ce033559ec9ccbb74ae192019d87a0c245ca941eff7b5ce7e191109a513694399fc80ea11ba0cbe0a454609d6eb5308dc9903d07f05faacc66fdb3680b1a1be7350ab00b684063fc1853386b284c75563ab9919f14d4144ab233f9bb2cda8"}, @ra={0x5, 0x2, 0x1}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x7f, 0x0, [], [@enc_lim={0x4, 0x1, 0x9}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @tclass={{0x14, 0x29, 0x43, 0x4}}], 0x1d8}}, {{&(0x7f0000005500)={0xa, 0x7, 0x36ce, @remote, 0x10000}, 0x1c, &(0x7f0000005700)=[{&(0x7f0000005540)="6b2c053be94bd62ec3bd31301e1251e8a89471bbe03cb3760538a8d5b48a43f92b673c5b74b44d400676000cbb3f4ef547f198b958e5a7ad868d1eaf40fa09a2fe08a3204bb9216d4dbc41ea62a265ff0738d3132f20db312785b65321e1b79acf4e847305", 0x65}, {&(0x7f00000055c0)="6153b09a3fd95b15a91a27f33b5e3a6cfe30a3175b24de3304357b29f8eb3817d6eeb61f70e46eee2afa213ef084f2e1ba015b9887014247eb17aeb759bc8a85b46e403b35b065a0949ed7a51fc70a6b70eeb1a85686648d90010da9bea48cd56a5f95b4c187e6c6b40916faa15e698d698ba95f0d29d9cdecdd94513d83d777a4494b0b", 0x84}, {&(0x7f0000005680)="f9434c5e1dfef1bd06311f91690dc6ac70f8dbcd56045a9a69fac42ae4ee8c4c834694bf300db8e6302be463e7c214d86e650005ea9d094a63ef6acc01b2ace5d93c7614d6c0a2cd54551cb175db5d9499481cbe2bb601e3ee8a34f72f04b6c85070dfa4c11566", 0x67}], 0x3, &(0x7f0000005740)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @dstopts={{0x50, 0x29, 0x37, {0x32, 0x6, [], [@enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0xb}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x0, 0x6, 0x1, 0x0, 0x0, [@local, @rand_addr="c6a5151e9dd98f3f1ac19d08e88d93b0", @empty]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @rthdr={{0x88, 0x29, 0x39, {0x3b, 0xe, 0x0, 0x6, 0x0, [@remote, @remote, @empty, @ipv4={[], [], @loopback}, @mcast1, @dev={0xfe, 0x80, [], 0x18}, @mcast1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffffffff80000000}}, @hopopts={{0x80, 0x29, 0x36, {0x33, 0xc, [], [@calipso={0x7, 0x40, {0x701b, 0xe, 0x0, 0x2, [0x1, 0x9, 0x4, 0x40000000, 0x7ff, 0x6, 0x0]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @ipv4={[], [], @empty}}, @enc_lim={0x4, 0x1, 0x7fffffff}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x100000000}}], 0x218}}, {{&(0x7f0000005980)={0xa, 0x4e24, 0x8000, @remote, 0x800}, 0x1c, &(0x7f0000005a00)=[{&(0x7f00000059c0)="c56133c853534ba4a6a87b581c347c751b8e0cec94aafaea11f67993e3707ee03070", 0x22}], 0x1, &(0x7f0000005a40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7fff}}, @tclass={{0x14, 0x29, 0x43, 0x9}}], 0x30}}, {{0x0, 0x0, &(0x7f0000005bc0)=[{&(0x7f0000005a80)="0ee049275b36d25aacc3df1c4485f31a5c8fa317ec4448a40758437b29c5d1b8088f77", 0x23}, {&(0x7f0000005ac0)="9678eed4cc29c4bfba3563320c5e22635984708e7289256e669f48536e18f32a8cd56752a6f1543be05b2760c3e2aae633dbf8b1b0c761ef8c84319d39bdbcac32cbf9ac0658f8c85f73c0ec66b27eef18c1fcaa31fda232147c37901fbae4e47c06876d7265eaee9532695e3d6c3146f0c76fefdcb68efd0495b07c2eeddceda0ab52e1f0e44c710083799af8426a047063cdf551e561b9e8e23ed986167b07a29b6e7e4ba73d97566f2007ad450dcce3273079c9bccd324e1776889535c7dc63c93ba62847f21dc08f5dd1d30b5101497183cbce798d5f", 0xd8}], 0x2, &(0x7f0000005c00)=[@dstopts_2292={{0xa8, 0x29, 0x4, {0xff, 0x11, [], [@calipso={0x7, 0x10, {0x5, 0x2, 0x5, 0x8, [0x7ff]}}, @generic={0xfff, 0x6f, "d17389ec470b07f51cda14524f62ae0122ab430d3b591e749371add27c3b2e3061afa45c3e965c9dee7e5ee078c0bd4443662b464a6bd3bab9084a5db631994f3b124cfcc7f369029593eba8763e5f3d582f3cb4db332e19971b03eecacdac7728359e9f23da711b8641471573df9a"}, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x8}]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x3e, 0x1, [], [@calipso={0x7, 0x8, {0x1, 0x0, 0x1, 0xffffffffffffffff}}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x6c, 0x4, 0x1, 0x5, 0x0, [@dev={0xfe, 0x80, [], 0x2a}, @rand_addr="a5d32e2944427bf256034e1684dd7ebc"]}}}], 0x108}}], 0x7, 0x1) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000005f00)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000006000)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000006040)={0x0, 0x0, 0x0}, &(0x7f0000006080)=0xc) fchown(r1, r4, r5) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000006100)=&(0x7f00000060c0)) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000006140)={0x0, 0x3f, 0x7fff, 0xaae2}, &(0x7f0000006180)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000061c0)={r6, 0xcec9}, 0x8) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) bind$inet(r3, &(0x7f0000006200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) fchown(r3, r4, r5) getgid() getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000006240)=0x3, &(0x7f0000006280)=0x1) write$UHID_CREATE(r2, &(0x7f0000006300)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000062c0)=""/31, 0x1f, 0x9, 0x8, 0x8, 0xa4, 0x4}, 0x120) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) unlinkat(r0, &(0x7f0000006440)='./file0\x00', 0x0) sendto$inet(r3, &(0x7f0000006480)="c2146a2c07a5d67de06d679473bace0fff3b07e3d6cab6caa609911b7583ca45daf98bb31ec4a7442d45563a9499f2e4762f881b7e36d975826cf53c64efcec9dadef5d06c1fc778fe9bc03897923967a06bedf30af1c676d15facc30db4366318dac739d0e0b28d4620cb0fd81f15b36466cfc2d51bba65147a0c61e4bb3c6c5f9b351933c0994a4acea62d9285992b32ee7caae5103faca2088cdb9417de89ceef58c05512518f07a5", 0xaa, 0x40010, &(0x7f0000006540)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000065c0)={0x2, &(0x7f0000006580)=[{0x0}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000006600)={r7, 0x3}) writev(r1, &(0x7f0000006880)=[{&(0x7f0000006640)="5a5ea2ba5d30404de0958510dc700e18e931d6662e69dcf7885da0c00770d1d59112df2e945335cf926b132ae361627615f0d40f267be3d6da743f80adfd44e79811ed902893399c5d0efa3ec513a074cb97708cdcc398f0d2bb", 0x5a}, {&(0x7f00000066c0)="e125f5b65a78feb165f916389ca22111a18df1d2481bafedc9134d1a114aec93804eaee4a37db688c379071ef4f1b11d0b061a49cd18500e", 0x38}, {&(0x7f0000006700)="c668d13251258adf0dee8effa6acb1912e16f7dc94955b2af3e2fd6e43c62be76704ea5a32e91ea486ec3bc32a8593c1349b41b0ab2e891c0ce24e99bdb6ca388f3cb26fa90872009c", 0x49}, {&(0x7f0000006780)="7aec19ea", 0x4}, {&(0x7f00000067c0)="9477f716e418edabad1265f198fd6e158bb143b67ea40c6113792b0e48b3f01283cc515d817167391ee1cdcc80ace96b5ce08e2c3747fcaa7a5ed613fb8fd0e43ae980318d9c11f18016c7e8779871c0a3b3b8b06ee322a005681364b2c3deb1eefb973c1c480b59abf2dc4ca431d114a7d45fb1b995c5a160e675c22ba49d15cbd44d4c51fd5c30f6de1ecc8e8af36ab1204ca870c79cffe5", 0x99}], 0x5) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x7f) fcntl$notify(r3, 0x402, 0x0) [ 252.871615] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 252.878879] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 [ 252.886464] protocol 88fb is buggy, dev hsr_slave_0 [ 252.890265] protocol 88fb is buggy, dev hsr_slave_0 [ 252.891596] protocol 88fb is buggy, dev hsr_slave_1 [ 252.896639] protocol 88fb is buggy, dev hsr_slave_1 [ 253.017623] FAULT_INJECTION: forcing a failure. [ 253.017623] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 253.029599] CPU: 1 PID: 17676 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 253.036804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.036811] Call Trace: [ 253.036833] dump_stack+0x138/0x19c [ 253.036859] should_fail.cold+0x10f/0x159 [ 253.056604] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 253.062172] __alloc_pages_nodemask+0x1d6/0x7a0 [ 253.066868] ? __alloc_pages_slowpath+0x2930/0x2930 [ 253.071897] ? refcount_inc_not_zero+0x88/0xe0 [ 253.071917] ? pskb_expand_head+0x6cc/0xc10 [ 253.071933] alloc_pages_current+0xec/0x1e0 [ 253.071945] skb_copy_ubufs+0x3f6/0x14e0 [ 253.071963] ? kvm_clock_read+0x23/0x40 [ 253.071974] ? kvm_clock_get_cycles+0x9/0x10 [ 253.071984] ? ktime_get_with_offset+0x208/0x320 [ 253.072000] dev_queue_xmit_nit+0x53b/0x8c0 [ 253.072018] dev_hard_start_xmit+0xa7/0x8b0 [ 253.072031] ? assoc_array_gc+0x1140/0x11d0 [ 253.072045] __dev_queue_xmit+0x1d95/0x25e0 [ 253.072059] ? trace_hardirqs_on+0xd/0x10 [ 253.124081] ? __local_bh_enable_ip+0x99/0x1a0 [ 253.128697] ? netdev_pick_tx+0x300/0x300 [ 253.132869] ? find_held_lock+0x35/0x130 [ 253.136945] ? ip_finish_output+0x56d/0xc60 [ 253.141294] ? mark_held_locks+0xb1/0x100 [ 253.145568] dev_queue_xmit+0x18/0x20 [ 253.149379] ? dev_queue_xmit+0x18/0x20 [ 253.153365] ip_finish_output2+0xddc/0x14a0 [ 253.153376] ? get_info+0x560/0x560 [ 253.153389] ? ip_copy_metadata+0x9b0/0x9b0 [ 253.153403] ip_finish_output+0x56d/0xc60 [ 253.153411] ? ip_finish_output+0x56d/0xc60 [ 253.153423] ip_output+0x1e6/0x590 [ 253.153433] ? ip_mc_output+0xd40/0xd40 [ 253.153444] ? __lock_is_held+0xb6/0x140 [ 253.153456] ? check_preemption_disabled+0x3c/0x250 [ 253.153468] ? ip_fragment.constprop.0+0x200/0x200 [ 253.153480] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 253.153492] ip_local_out+0x97/0x170 [ 253.153504] ip_queue_xmit+0x7d7/0x1b10 [ 253.153517] ? __tcp_v4_send_check+0x1c0/0x360 20:34:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:26 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8000, 0x101000) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000080)) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x6d0c, 0x80000) r2 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r2, 0x7, &(0x7f0000027000)) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000000)=0x1) 20:34:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x20080, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc45055e0bcfec7be001d006d2c07e6fbac5791d07f61c7889f9cba5292eba239871de1a34a64178ba1cfb54bcc958ba4ce74d1b18620a0000") r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) dup3(r0, r2, 0x80000) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008914, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x8, 0x3d, r2, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 253.214665] __tcp_transmit_skb+0x172c/0x2fe0 [ 253.219193] ? bictcp_cong_avoid+0xe50/0xe50 [ 253.223614] ? __tcp_select_window+0x6e0/0x6e0 [ 253.228204] ? kvm_clock_read+0x23/0x40 [ 253.228219] ? sched_clock_cpu+0x1b/0x1c0 [ 253.236348] ? tcp_small_queue_check+0x184/0x1e0 [ 253.241119] tcp_write_xmit+0x523/0x48b0 [ 253.245198] ? refcount_inc+0x1f/0x40 [ 253.249042] tcp_push_one+0xc1/0xf0 [ 253.252692] tcp_sendmsg_locked+0x1571/0x3400 [ 253.257200] ? save_trace+0x290/0x290 [ 253.261033] ? tcp_sendpage+0x60/0x60 [ 253.264929] ? trace_hardirqs_on_caller+0x400/0x590 [ 253.269960] ? trace_hardirqs_on+0xd/0x10 [ 253.274125] tcp_sendmsg+0x30/0x50 [ 253.277729] inet_sendmsg+0x122/0x500 [ 253.281554] ? inet_recvmsg+0x500/0x500 [ 253.285548] sock_sendmsg+0xce/0x110 [ 253.289285] SYSC_sendto+0x206/0x310 [ 253.293021] ? SYSC_connect+0x2d0/0x2d0 [ 253.297017] ? lock_downgrade+0x6e0/0x6e0 [ 253.301199] ? wait_for_completion+0x420/0x420 [ 253.305807] ? __sb_end_write+0xc1/0x100 [ 253.309894] ? fput+0xd4/0x150 [ 253.313100] ? SyS_write+0x10b/0x180 20:34:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001500)=0x0) getresuid(&(0x7f0000001540), &(0x7f0000001580), &(0x7f00000015c0)=0x0) getgroups(0x9, &(0x7f0000001600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff, 0x0, 0xee00]) sendmsg$unix(r1, &(0x7f00000016c0)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000000140)="b75f453668290d9f813c0742f2de8b3a779dc2f7949a3e6025873565d47accfce881f2c7099b302cd34ce07192d16dc1e8273826c5359dcc5f4894d3c2b3d91e38ff23ee42a7db51e79bf61dad5a1daf496877540fc92a20ceb8706b39348a8741d03e", 0x63}, {&(0x7f00000001c0)="821a0946ad63dc6b921c1dd90ae327b8b246e60ac98a4c9c30afc613ee60b34e6f27f8c50497baa5c055fe34a53e1070ab6d5574f566339d0c26dbf65dbac751cb42d27191dc9535206489b0851a7330e0a0fc4bcb3d332b13a91a107edf5bfa7634e5691e9637736e25f794b0a9b5f3cf8347f74b2fea7e775cd584b06ec9e9", 0x80}, {&(0x7f0000000000)="e1136e8eead285a2ceea0eb54b162933f66971248ba3dfe1c64d3126e4cd33d43b5def8516aff5e68e720ab5f7ed0fe79763ca5230dbc22a1f", 0x39}, {&(0x7f0000000340)="b7812129c7f3f12de03ad972cc438ff9bc934aadd8b3b74cae85ec15be247e2e5b324d9e1e32719ba0f18310894b8dc06d379fa799865c8dd79fe7ab4cc3bd3d3c86cb", 0x43}, {&(0x7f00000003c0)="37a0e233f9cd2100b9b6232e26ac95ce75528ad955bc6eccd629e9064d2850d5b77d99db4fec0bf2013274224e59126fbdcf6da45b278fe45800aa01135f99273b7b3ad4a31068513ecf2e9c1acda32ff5a225d8eb74eaac66dc63ac8b03af215709fbdc285eb4475ab17a9435a1c8d61691127b0931160a60e2cd1ca4f92096f03cb9ab4762a8452edd84af660440d82fe717e49e2acbfda5314ebcf544679caae9dfa79f349d8fa5ec17ee191a", 0xae}, {&(0x7f0000000480)="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", 0x1000}], 0x6, &(0x7f0000001640)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r0, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}], 0x48, 0x20000000}, 0x40014) [ 253.316830] SyS_sendto+0x40/0x50 [ 253.320307] ? SyS_getpeername+0x30/0x30 [ 253.324378] do_syscall_64+0x1e8/0x640 [ 253.328273] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 253.333134] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 253.338341] RIP: 0033:0x459279 [ 253.341530] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 253.341542] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 253.341548] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 20:34:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:26 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, "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", 0x1000}, 0xfffffc41) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 20:34:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x8000, 0x0) clone(0x200, &(0x7f0000000240)="fc649230e00dfa0c5bf7cabb256fdbc633553f65dcad8836865ac7d96e0977ee1344d2edc6", &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="046f14acacec00dd2d29f3de21cff96dbc4a7d3fff2b06aeafcd694e66c5907fa201a011a886066d865b7ddd3b9e0fbc2f7f0abdc9fe663c1fca7184243f23a9f8713f5632acd49f568cb72e9d6ee2d3c219015e5bd7d43b22340bb6ef23e77bee5f89b72052f4cb2a95") getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = getegid() write$FUSE_ENTRY(r1, &(0x7f0000000180)={0x90, 0xfffffffffffffff5, 0x2, {0x6, 0x3, 0x5, 0x5, 0x9, 0x1, {0x3, 0x1d73a4ed, 0x7, 0x200, 0x1, 0xd7c, 0x80000000, 0x7, 0x7, 0x101, 0x1, r2, r3, 0x8, 0x9}}}, 0x90) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1eb24cf0, 0x48007e) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000003c0)={0x8000000000000000}, 0x4) 20:34:27 executing program 1 (fault-call:6 fault-nth:9): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) [ 253.341553] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 253.341559] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 253.341564] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 [ 253.341967] protocol 88fb is buggy, dev hsr_slave_0 [ 253.364173] protocol 88fb is buggy, dev hsr_slave_1 20:34:27 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/ion\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000180)="140ae2602e45c99a8f6fb4696b", &(0x7f0000001240)="347f3a54f11a28b21efcdb1af37d27af244aa0702cddeaa0ea58b8273868e00c2b6b2cc2e10ffd75fbd888d79851be7521611b98a5fbc7bf13f034ea02cf047e1b50314047f70bb3ed72ced57170737763699736adabd8397cbb4caa513c3479ee75780fe13095fad3ddc954594ffdeaea5b98bddc046ed4a7e6e1117309c3f962a99b729a4392a96755ae1a03d9dc455d7594a23af16ca98c90b1342d2435134523896642efe9a982ee534030dc39a5e4c5788893", 0x5}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x6, 0x6, 0x0, r1}) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001400)={r2, 0x10, &(0x7f00000013c0)={&(0x7f0000001300)=""/165, 0xa5, 0xffffffffffffffff}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001440)=r4, 0x4) ioctl$CAPI_GET_SERIAL(r3, 0xc0044308, &(0x7f0000000000)=0x2) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80000, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000014c0)={0x0, r1, 0x0, 0x9, &(0x7f0000001480)='fdinfo/3\x00'}, 0x30) getpid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001500)) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001540)=0x0) r8 = getpgid(r7) ioctl$NBD_DISCONNECT(r1, 0xab08) syz_open_procfs(r8, &(0x7f0000000100)='fdinfo/3\x00') fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f00000000c0)) flistxattr(r3, &(0x7f0000000240)=""/4096, 0x1000) [ 253.502955] FAULT_INJECTION: forcing a failure. [ 253.502955] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 253.514871] CPU: 0 PID: 17710 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 253.521979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.531338] Call Trace: [ 253.533971] dump_stack+0x138/0x19c [ 253.537630] should_fail.cold+0x10f/0x159 [ 253.541792] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 253.547264] __alloc_pages_nodemask+0x1d6/0x7a0 [ 253.551946] ? __alloc_pages_slowpath+0x2930/0x2930 [ 253.556970] ? refcount_inc_not_zero+0x88/0xe0 [ 253.561575] ? pskb_expand_head+0x6cc/0xc10 [ 253.562030] QAT: Invalid ioctl [ 253.565911] alloc_pages_current+0xec/0x1e0 [ 253.565927] skb_copy_ubufs+0x3f6/0x14e0 [ 253.565945] ? kvm_clock_read+0x23/0x40 [ 253.565958] ? kvm_clock_get_cycles+0x9/0x10 [ 253.585895] ? ktime_get_with_offset+0x208/0x320 [ 253.587185] QAT: Invalid ioctl [ 253.590662] dev_queue_xmit_nit+0x53b/0x8c0 [ 253.590681] dev_hard_start_xmit+0xa7/0x8b0 [ 253.590695] ? assoc_array_gc+0x1140/0x11d0 [ 253.590708] __dev_queue_xmit+0x1d95/0x25e0 [ 253.590718] ? trace_hardirqs_on+0xd/0x10 [ 253.590733] ? __local_bh_enable_ip+0x99/0x1a0 [ 253.602101] QAT: Invalid ioctl [ 253.602577] ? netdev_pick_tx+0x300/0x300 [ 253.602592] ? find_held_lock+0x35/0x130 [ 253.602604] ? ip_finish_output+0x56d/0xc60 [ 253.602620] ? mark_held_locks+0xb1/0x100 [ 253.639824] dev_queue_xmit+0x18/0x20 [ 253.643634] ? dev_queue_xmit+0x18/0x20 [ 253.647628] ip_finish_output2+0xddc/0x14a0 [ 253.651953] ? get_info+0x560/0x560 [ 253.655594] ? ip_copy_metadata+0x9b0/0x9b0 [ 253.659934] ip_finish_output+0x56d/0xc60 [ 253.664095] ? ip_finish_output+0x56d/0xc60 [ 253.668433] ip_output+0x1e6/0x590 [ 253.671991] ? ip_mc_output+0xd40/0xd40 [ 253.675983] ? __lock_is_held+0xb6/0x140 [ 253.680056] ? check_preemption_disabled+0x3c/0x250 [ 253.685103] ? ip_fragment.constprop.0+0x200/0x200 [ 253.690042] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 253.695519] ip_local_out+0x97/0x170 [ 253.699252] ip_queue_xmit+0x7d7/0x1b10 [ 253.703334] ? __tcp_v4_send_check+0x1c0/0x360 [ 253.707942] __tcp_transmit_skb+0x172c/0x2fe0 [ 253.712462] ? bictcp_cong_avoid+0xe50/0xe50 [ 253.716885] ? __tcp_select_window+0x6e0/0x6e0 [ 253.721485] ? kvm_clock_read+0x23/0x40 [ 253.725471] ? sched_clock_cpu+0x1b/0x1c0 [ 253.729638] ? tcp_small_queue_check+0x184/0x1e0 [ 253.734403] tcp_write_xmit+0x523/0x48b0 [ 253.738474] ? refcount_inc+0x1f/0x40 [ 253.742300] tcp_push_one+0xc1/0xf0 [ 253.745940] tcp_sendmsg_locked+0x1571/0x3400 [ 253.750450] ? save_trace+0x290/0x290 [ 253.754277] ? tcp_sendpage+0x60/0x60 [ 253.758096] ? trace_hardirqs_on_caller+0x400/0x590 [ 253.763136] ? trace_hardirqs_on+0xd/0x10 [ 253.767307] tcp_sendmsg+0x30/0x50 [ 253.770862] inet_sendmsg+0x122/0x500 [ 253.774674] ? inet_recvmsg+0x500/0x500 [ 253.778659] sock_sendmsg+0xce/0x110 [ 253.782389] SYSC_sendto+0x206/0x310 [ 253.786114] ? SYSC_connect+0x2d0/0x2d0 [ 253.790102] ? lock_downgrade+0x6e0/0x6e0 [ 253.794273] ? wait_for_completion+0x420/0x420 [ 253.798880] ? __sb_end_write+0xc1/0x100 [ 253.802961] ? fput+0xd4/0x150 [ 253.806172] ? SyS_write+0x10b/0x180 [ 253.809913] SyS_sendto+0x40/0x50 [ 253.813375] ? SyS_getpeername+0x30/0x30 [ 253.817451] do_syscall_64+0x1e8/0x640 [ 253.821360] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 253.826238] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 253.831539] RIP: 0033:0x459279 [ 253.834753] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 253.842484] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 20:34:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x101000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000001c0)=0x7, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 253.850030] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 253.857314] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 253.864593] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 253.871878] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 [ 253.946218] QAT: Invalid ioctl [ 253.949894] QAT: Invalid ioctl [ 253.963385] QAT: Invalid ioctl 20:34:27 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@ax25={{0x3, @null, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)="f1289db4ad37c32b1d4a781ecf453d8c335d46104f4893477dd9a3c4c76573c0ca292d57501bf1cd2c144c9e59a19b76d3b65df01a1fe751cb7d258a218e22869d07d2f513cafcac03701e", 0x4b}, {&(0x7f0000000140)="13a2197e5a81d688180d563864679b0563f3dff87d78973d58bb12", 0x1b}, {&(0x7f0000000180)="0d6ebc19136c323e008fabc5a9e6808ec14ff1977aebc5b6dc33292c3ab6e1f017e2789aeb6b2bcfc9c26d4b88445e1d3ca623de63dd8bc54914ee5ff99e1d4d1382c3be619cac256139cc35a2021e898d0b74a313ba3974551d6a77c296f6abe9c8c160b80a0c83526b6bacc0cec86f7d3224d1b5c32a676bf858a586cbe261000af156974f94953d52f08d003f09cecdc2ba96fbf21d278c83526f968b06ceff1a2c47180978ac9976808a93ef7dc94359244a7ac15dedbc01dac15e74b5375a238f67a3c797711d7b", 0xca}, {&(0x7f0000000280)="176f7e88774522630f7a8876ade01ced0c2dd0b8abaa2f69eca08facde038be8b5dfc78fef1bb050df82d46df0736c17efcddb5fb1ea7ce18aa690dd89d55629281b3e0dc4ed6125747fac690ed85eb6bc694de01ed163ffb409a784a8b3d515a512c27f4319bf9796e68aa6ddbefc1b6c7e479e6d34c0ef555da18c318c86d0b941d006c4f1a6e001a21438c6eb901354f01920ca27bdae6d662c50a1c29b48d63eca0b9a8157255a6af3f915960f49d6999dbcc983222ee5b909853886e398f17d03aea87bb9f39635e98c9781b32adbd0", 0xd2}], 0x4}, 0x800) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r1, &(0x7f0000002580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@ip_ttl={{0x14, 0x84}}], 0x18}}], 0x1, 0x0) 20:34:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x55, 0x8000, 0xff, 0x9cc1, 0x0, 0x7, 0x8, 0x308, 0x40, 0xc8, 0x10001, 0x6, 0x38, 0x2, 0x59, 0x0, 0x21}, [{0x3, 0xffff, 0xffff, 0x100000001, 0x20, 0x10001, 0x3, 0x1fe0000000}, {0x60000001, 0x8, 0xd749, 0x8, 0x9, 0xce2, 0x9, 0xfffffffffffffffc}], "5adf93b0d3718ba4d211de3033bd4d7b28eeab1f0022785a038e58080de0b84fc4b8261ca48540aecf3dd8cc", [[], [], [], [], [], [], [], [], []]}, 0x9dc) r2 = dup(r1) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f00000000c0)=""/193) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000001c0)=0x3, 0x4) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0xa02) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000200)={0x0, 0xfc, 0x30, 0x9881, 0x8}, &(0x7f0000000240)=0x18) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000e00)={r4, 0x9, 0x1000, "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"}, 0x1008) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000080)={0x5, 0xd109, 0x3, 0x0, 0x10, 0xffffffff}) 20:34:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x8001}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040), 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000080)=0x0) getpgid(r5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getpgrp(0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r4, 0x0, r3, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) sendto$packet(r4, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 20:34:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = dup3(r0, r0, 0x80000) execveat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=[&(0x7f00000000c0)=']\x00', &(0x7f0000000100)='}ppp1\x00', &(0x7f0000000140)='/dev/swradio#\x00'], &(0x7f0000000380)=[&(0x7f00000001c0)='/dev/swradio#\x00', &(0x7f0000000200)='/dev/swradio#\x00', &(0x7f0000000340)='bdev!\xee%@%mime_type\x00'], 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:27 executing program 1 (fault-call:6 fault-nth:10): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 254.361718] FAULT_INJECTION: forcing a failure. [ 254.361718] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 254.373692] CPU: 1 PID: 17756 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 254.380814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.390183] Call Trace: [ 254.392796] dump_stack+0x138/0x19c [ 254.396468] should_fail.cold+0x10f/0x159 [ 254.400643] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 254.406142] __alloc_pages_nodemask+0x1d6/0x7a0 [ 254.410832] ? __alloc_pages_slowpath+0x2930/0x2930 [ 254.415864] ? refcount_inc_not_zero+0x88/0xe0 [ 254.420555] ? pskb_expand_head+0x6cc/0xc10 [ 254.424912] alloc_pages_current+0xec/0x1e0 [ 254.429258] skb_copy_ubufs+0x3f6/0x14e0 [ 254.433337] ? kvm_clock_read+0x23/0x40 [ 254.433347] ? kvm_clock_get_cycles+0x9/0x10 [ 254.433357] ? ktime_get_with_offset+0x208/0x320 [ 254.433372] dev_queue_xmit_nit+0x53b/0x8c0 [ 254.433387] dev_hard_start_xmit+0xa7/0x8b0 [ 254.433412] ? assoc_array_gc+0x1140/0x11d0 [ 254.433425] __dev_queue_xmit+0x1d95/0x25e0 [ 254.433434] ? trace_hardirqs_on+0xd/0x10 [ 254.433445] ? __local_bh_enable_ip+0x99/0x1a0 [ 254.433459] ? netdev_pick_tx+0x300/0x300 [ 254.433469] ? find_held_lock+0x35/0x130 [ 254.433479] ? ip_finish_output+0x56d/0xc60 [ 254.433492] ? mark_held_locks+0xb1/0x100 [ 254.433505] dev_queue_xmit+0x18/0x20 [ 254.433513] ? dev_queue_xmit+0x18/0x20 [ 254.433523] ip_finish_output2+0xddc/0x14a0 [ 254.433532] ? get_info+0x560/0x560 [ 254.433546] ? ip_copy_metadata+0x9b0/0x9b0 [ 254.472655] ip_finish_output+0x56d/0xc60 [ 254.472666] ? ip_finish_output+0x56d/0xc60 [ 254.472680] ip_output+0x1e6/0x590 [ 254.493282] ? ip_mc_output+0xd40/0xd40 [ 254.493295] ? __lock_is_held+0xb6/0x140 [ 254.493306] ? check_preemption_disabled+0x3c/0x250 [ 254.493318] ? ip_fragment.constprop.0+0x200/0x200 [ 254.493331] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 254.493344] ip_local_out+0x97/0x170 [ 254.493357] ip_queue_xmit+0x7d7/0x1b10 [ 254.493369] ? __tcp_v4_send_check+0x1c0/0x360 [ 254.493384] __tcp_transmit_skb+0x172c/0x2fe0 20:34:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) clone(0x10000000800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'ip6gretap0\x00'}) getsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, &(0x7f00000001c0)) setsockopt$inet6_opts(r2, 0x29, 0x0, 0x0, 0x0) 20:34:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1, &(0x7f0000000440)="02dca5055e0bcfec7be0705ca78e10523e3d232d8dcd2c449e83bf59cc3dcac2155fae4f37004af10e52ea3f6bc1d39d80aef4684f1faad59e13de6d6c03500d9cff3512eb3412a1722c323de6a0fdb8e67f410a57b375b47f9bfad6f008b0e0b2039937b077f0e216da502eca695026438b22c9987e0fe5718e745838b94144efe63b83bcb34b7c48ea48cbd774a80b8e7c7765c0025012d852cad54a0369685ddcbe9658bb81c89d853e9c569c49827fc142ba364301399237c0ffff4d3065fe1767") r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x1, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000040)={0x0, 0x9}) r2 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 254.493404] ? bictcp_cong_avoid+0xe50/0xe50 [ 254.566151] ? __tcp_select_window+0x6e0/0x6e0 [ 254.570745] ? kvm_clock_read+0x23/0x40 [ 254.574737] ? sched_clock_cpu+0x1b/0x1c0 [ 254.578896] ? tcp_small_queue_check+0x184/0x1e0 [ 254.583658] tcp_write_xmit+0x523/0x48b0 [ 254.587741] ? refcount_inc+0x1f/0x40 [ 254.591576] tcp_push_one+0xc1/0xf0 [ 254.595221] tcp_sendmsg_locked+0x1571/0x3400 [ 254.599725] ? save_trace+0x290/0x290 [ 254.603556] ? tcp_sendpage+0x60/0x60 [ 254.607379] ? trace_hardirqs_on_caller+0x400/0x590 20:34:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x2}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000000c0)="15c535011f2964f5fb6b2695a4a082004d2fc618f3e9b0f3ff3c32f4541e621c7a741237629c9e968a5f08eddcf79d202a326b98", 0x34}, {&(0x7f0000000100)="9c1cbf49c3f549eb9e5a7ccc4bcc20602ea586c7fff576ee8a534eae83f4d72f9944e7d9e4b921bbf363605b78f3f2a62df1873144b52be794e7ad289b1183109fdffc9f3cd8da8415ee86b40941d4becf9f4cd2dd049cc38ab212b120dc2bff26145891d026d69ad25a8a4853488c643216836eef68cf451fa5c361c292d927dca7cd9bc9db14a720ae0733da4f68852175c7c587659959c534872d0704ce35de12725681a54df8040cfc60bd91167d457a896a6caa6a3d268fa2fc38bec912aedafc80ba2084d84f7ccc9ce567ea95876ec3f1ce74ba05875090881ec2f4e793", 0xe1}, {&(0x7f0000000340)="8dbfbb9e5f3f5558257cea3ace23c0ca35d2e355b06c7e673f69e4d904e0d312ff90035742ed36d779f47c21f2ef5bfd6df1831717e2f8008ca5985e2af0bae6764e2d76397b62a199c260980237c495ce4c084166c802733ae660f5f73a8d8667", 0x61}, {&(0x7f00000003c0)="fa3559d95bd9f8230e57c67be0472f8df9c96d21aedf32dc6eaf524f6b15b514b46cc8ed014ea7954f4c57e3b399bf55a9b7cc19bcab8046a6760569aa732582909ceeaea98d6a4ed0e8364a132f9b16f8338759fdb0996cef89d2a3831dbd54", 0x60}, {&(0x7f0000000440)="0d6ca35b6a7f619233983bdc90fa3e9f3321bd9163aeaa79a0d1403ca85035090b1a22fcd7dd227fbfe10049fa4f8c2552d33584440f32cf07623303fedc5590604bd5d13635a046105a38ecc7acf2f665c1d5ad3649d59663ddb12c81902e72c073f33d25ecab0a24bb2a720a0f79c8cd77204fd45964eb2ca5fd20b82ddd18fa20b5098e599517508b16d02ec468427a95827353983f69b9eaedae24bbdadb39d6d784f68056437b635e34c08a2ca1f1adeeba9540cda189712a33cee77696b9eece3f6182f5775145e2043f68031b4c", 0xd1}, {&(0x7f0000000540)="40d936253b9cd555b2b80a13450cae52ae372ea74a1fd65bb9693dc589bf2c9e092dcc887222edb3b0047ee7909bd26e690b3b5bb0a820e14806ed40f1e997a2817fd7f2625a6fd6aeeb8486f37cad21c37931196809a0865c4e1396cc9df449d97faabe499af5a86aa957bf00a23cbba5bad7f8566dfb8dc932648397", 0x7d}], 0x6}, 0x4800) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x0, 0x82480) bind$netrom(r1, &(0x7f0000000680)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) pread64(r1, &(0x7f0000000700)=""/247, 0xf7, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 254.612423] ? trace_hardirqs_on+0xd/0x10 [ 254.616604] tcp_sendmsg+0x30/0x50 [ 254.620169] inet_sendmsg+0x122/0x500 [ 254.623983] ? inet_recvmsg+0x500/0x500 [ 254.627964] sock_sendmsg+0xce/0x110 [ 254.631698] SYSC_sendto+0x206/0x310 [ 254.635420] ? SYSC_connect+0x2d0/0x2d0 [ 254.639399] ? lock_downgrade+0x6e0/0x6e0 [ 254.643651] ? wait_for_completion+0x420/0x420 [ 254.648245] ? __sb_end_write+0xc1/0x100 [ 254.652323] ? fput+0xd4/0x150 [ 254.655523] ? SyS_write+0x10b/0x180 [ 254.659254] SyS_sendto+0x40/0x50 [ 254.662723] ? SyS_getpeername+0x30/0x30 [ 254.666801] do_syscall_64+0x1e8/0x640 [ 254.670705] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 254.675565] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 254.680786] RIP: 0033:0x459279 [ 254.683984] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 254.691711] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 254.698987] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 20:34:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000084000/0x1000)=nil, 0x1000, 0x2, 0x31, r0, 0x0) flock(r1, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x20000, 0x0) ioctl$KVM_NMI(r2, 0xae9a) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 254.706295] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 254.713571] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 254.720850] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:28 executing program 1 (fault-call:6 fault-nth:11): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) [ 254.835202] FAULT_INJECTION: forcing a failure. [ 254.835202] name failslab, interval 1, probability 0, space 0, times 0 [ 254.890703] CPU: 1 PID: 17788 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 254.897897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.907263] Call Trace: [ 254.909865] dump_stack+0x138/0x19c [ 254.913510] should_fail.cold+0x10f/0x159 [ 254.917665] should_failslab+0xdb/0x130 [ 254.921655] kmem_cache_alloc_node+0x56/0x780 [ 254.926169] ? sock_def_readable+0x170/0x3f0 [ 254.930600] __alloc_skb+0x9c/0x500 [ 254.934238] ? skb_scrub_packet+0x4b0/0x4b0 [ 254.938581] __tcp_send_ack.part.0+0x67/0x5b0 [ 254.943096] tcp_send_ack+0x7a/0xa0 [ 254.946739] __tcp_ack_snd_check+0x107/0x3a0 [ 254.951174] tcp_rcv_established+0x67e/0x1650 [ 254.955702] ? tcp_data_queue+0x3730/0x3730 [ 254.960046] ? __local_bh_enable_ip+0x99/0x1a0 [ 254.964666] tcp_v4_do_rcv+0x563/0x7e0 [ 254.968573] __release_sock+0x12d/0x350 [ 254.972565] ? tcp_keepalive_timer.cold+0x1d/0x1d [ 254.977414] __sk_flush_backlog+0x28/0x40 [ 254.981591] tcp_sendmsg_locked+0x27bb/0x3400 [ 254.986101] ? save_trace+0x290/0x290 [ 254.989949] ? tcp_sendpage+0x60/0x60 [ 254.993780] ? trace_hardirqs_on_caller+0x400/0x590 [ 254.998826] ? trace_hardirqs_on+0xd/0x10 [ 255.003018] tcp_sendmsg+0x30/0x50 [ 255.006566] inet_sendmsg+0x122/0x500 [ 255.010367] ? inet_recvmsg+0x500/0x500 [ 255.014330] sock_sendmsg+0xce/0x110 [ 255.018151] SYSC_sendto+0x206/0x310 [ 255.021868] ? SYSC_connect+0x2d0/0x2d0 [ 255.025848] ? lock_downgrade+0x6e0/0x6e0 [ 255.029994] ? wait_for_completion+0x420/0x420 [ 255.034595] ? __sb_end_write+0xc1/0x100 [ 255.038645] ? fput+0xd4/0x150 [ 255.041838] ? SyS_write+0x10b/0x180 [ 255.045548] SyS_sendto+0x40/0x50 [ 255.049010] ? SyS_getpeername+0x30/0x30 [ 255.053063] do_syscall_64+0x1e8/0x640 [ 255.056931] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 255.061785] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 255.066975] RIP: 0033:0x459279 [ 255.070148] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 255.077846] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 255.085109] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 255.092377] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 255.100777] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 255.108046] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") mmap(&(0x7f0000e97000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) msync(&(0x7f0000be9000/0x4000)=nil, 0x4000, 0x4) 20:34:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x2, 0x3, 0x4}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r3, 0x6, 0x1f, 0x1}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:28 executing program 1 (fault-call:6 fault-nth:12): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) [ 255.261581] FAULT_INJECTION: forcing a failure. [ 255.261581] name failslab, interval 1, probability 0, space 0, times 0 [ 255.308573] CPU: 1 PID: 17807 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 255.315741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.325111] Call Trace: [ 255.327736] dump_stack+0x138/0x19c [ 255.331415] should_fail.cold+0x10f/0x159 [ 255.335598] ? sock_def_readable+0x149/0x3f0 [ 255.340041] should_failslab+0xdb/0x130 [ 255.344030] kmem_cache_alloc_node_trace+0x5a/0x770 [ 255.349245] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 255.354725] __kmalloc_node_track_caller+0x3d/0x80 [ 255.359671] __kmalloc_reserve.isra.0+0x40/0xe0 [ 255.364354] __alloc_skb+0xcf/0x500 [ 255.367990] ? skb_scrub_packet+0x4b0/0x4b0 [ 255.372317] __tcp_send_ack.part.0+0x67/0x5b0 [ 255.376813] tcp_send_ack+0x7a/0xa0 [ 255.380442] __tcp_ack_snd_check+0x107/0x3a0 [ 255.384853] tcp_rcv_established+0x67e/0x1650 [ 255.389350] ? tcp_data_queue+0x3730/0x3730 [ 255.393672] ? __local_bh_enable_ip+0x99/0x1a0 [ 255.398293] tcp_v4_do_rcv+0x563/0x7e0 [ 255.402194] __release_sock+0x12d/0x350 [ 255.406182] ? tcp_keepalive_timer.cold+0x1d/0x1d [ 255.411032] __sk_flush_backlog+0x28/0x40 [ 255.415186] tcp_sendmsg_locked+0x27bb/0x3400 [ 255.419700] ? save_trace+0x290/0x290 [ 255.423536] ? tcp_sendpage+0x60/0x60 [ 255.427351] ? trace_hardirqs_on_caller+0x400/0x590 [ 255.432387] ? trace_hardirqs_on+0xd/0x10 [ 255.436555] tcp_sendmsg+0x30/0x50 [ 255.440100] inet_sendmsg+0x122/0x500 [ 255.440111] ? inet_recvmsg+0x500/0x500 [ 255.440123] sock_sendmsg+0xce/0x110 [ 255.440133] SYSC_sendto+0x206/0x310 [ 255.440145] ? SYSC_connect+0x2d0/0x2d0 [ 255.440158] ? lock_downgrade+0x6e0/0x6e0 [ 255.440180] ? wait_for_completion+0x420/0x420 [ 255.440190] ? __sb_end_write+0xc1/0x100 [ 255.440204] ? fput+0xd4/0x150 [ 255.440215] ? SyS_write+0x10b/0x180 [ 255.440231] SyS_sendto+0x40/0x50 [ 255.440241] ? SyS_getpeername+0x30/0x30 [ 255.440254] do_syscall_64+0x1e8/0x640 [ 255.440267] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 255.495316] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 255.500515] RIP: 0033:0x459279 20:34:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="c0dca5055e0bcfec7be070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0xfffffffffffffffd, 0x0) r2 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) syz_open_pts(r1, 0x420000) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f00000000c0)={0x8, 0x1, &(0x7f0000000040)="3bd614906af7760d65e38b39cfba8802d884d3c6507a709e0142e2b6f69b5806a14ec76f0921d661d3ae0ccc7c4f0d97efd21d0137f046bab49540d372b4a50fe2f6abce57026a76c774dfa8", {0x5, 0x0, 0x7335357b, 0xf, 0x20, 0xffff, 0xb, 0x1}}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 20:34:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b", 0x15}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:29 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 20:34:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x90040, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100)={0x80000000}, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) 20:34:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b", 0x15}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 255.503717] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 255.511440] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 255.518721] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 255.526092] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 255.533364] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 255.533371] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:29 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") unlink(&(0x7f0000000080)='./file0\x00') 20:34:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup3(r0, r0, 0x80000) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000002c0)={0x2}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="12dca5055e0bcfec7be070") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x40200, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000140)=0xfffffffffffffff9, &(0x7f0000000180)=0x4) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000000)=0x44) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0), 0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x100000001, 0x1}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000240)={r4, 0x5d04, 0x30, 0x9, 0xb57}, &(0x7f0000000280)=0x18) close(r0) 20:34:29 executing program 2: syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x101000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) dup2(r0, r0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x10300, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000000)={0x6, 0x707f555f, 0x4, 0x8000, 0x3, @discrete={0x2, 0x2000}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:29 executing program 1 (fault-call:6 fault-nth:13): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b", 0x15}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:29 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x88000, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000280)=0x7) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="5b2e3a3a5d3a396c3e2e3a003722cf20f09fb2be20b94e91dcc1d44db125fdc2d6fe4d86968405184e12388cdd964b8c8aed14f2c43ea14f33d716d4c0d9ef68ee73cc54d07abd25243b3c9d28d9d2aa0c203b9a6b6c783f51c0fad9e85d7cbfb8c43124214c5c599e84933ef49be75817f7a66ba76311ee8883111b56f77d146ce2898505969269db29ca4a116999ed44c7450db901b1f024df1457eb72563f66b044cd1f9c516cfb7bfa2a48f412f3421ed6f68e6b58ff78c11eb7de42672c"], &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 20:34:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) open(&(0x7f0000000000)='./file0\x00', 0x8200, 0x100) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x6, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000000)=0x4, 0x4) fcntl$setpipe(r1, 0x407, 0x100020000) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f00000000c0)={0x1, [0x0]}) 20:34:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0x1f}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 255.899279] FAULT_INJECTION: forcing a failure. [ 255.899279] name failslab, interval 1, probability 0, space 0, times 0 [ 255.910599] CPU: 0 PID: 17861 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 255.917708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.927064] Call Trace: [ 255.929662] dump_stack+0x138/0x19c [ 255.933312] should_fail.cold+0x10f/0x159 [ 255.937483] should_failslab+0xdb/0x130 [ 255.941487] kmem_cache_alloc+0x47/0x780 [ 255.945567] ? lock_acquire+0x16f/0x430 [ 255.949542] ? check_preemption_disabled+0x3c/0x250 [ 255.954572] skb_clone+0x129/0x320 [ 255.958124] dev_queue_xmit_nit+0x296/0x8c0 [ 255.962463] dev_hard_start_xmit+0xa7/0x8b0 [ 255.962478] ? assoc_array_gc+0x1140/0x11d0 [ 255.962492] __dev_queue_xmit+0x1d95/0x25e0 [ 255.962504] ? __local_bh_enable_ip+0x99/0x1a0 [ 255.962520] ? netdev_pick_tx+0x300/0x300 [ 255.962531] ? find_held_lock+0x35/0x130 [ 255.962545] ? ip_finish_output+0x56d/0xc60 [ 255.980093] ? mark_held_locks+0xb1/0x100 20:34:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0x1f}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 255.980111] dev_queue_xmit+0x18/0x20 [ 255.980120] ? dev_queue_xmit+0x18/0x20 [ 255.980132] ip_finish_output2+0xddc/0x14a0 [ 255.980148] ? ip_copy_metadata+0x9b0/0x9b0 [ 255.980163] ip_finish_output+0x56d/0xc60 [ 256.017362] ? ip_finish_output+0x56d/0xc60 [ 256.021692] ip_output+0x1e6/0x590 [ 256.025239] ? ip_mc_output+0xd40/0xd40 [ 256.029227] ? __lock_is_held+0xb6/0x140 [ 256.033299] ? check_preemption_disabled+0x3c/0x250 [ 256.038348] ? ip_fragment.constprop.0+0x200/0x200 [ 256.043326] ? rcu_lockdep_current_cpu_online+0xf2/0x140 20:34:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 256.048797] ip_local_out+0x97/0x170 [ 256.052522] ip_queue_xmit+0x7d7/0x1b10 [ 256.056512] ? __tcp_v4_send_check+0x1c0/0x360 [ 256.061113] __tcp_transmit_skb+0x172c/0x2fe0 [ 256.065642] ? __tcp_select_window+0x6e0/0x6e0 [ 256.070244] ? __alloc_skb+0x3ee/0x500 [ 256.074142] __tcp_send_ack.part.0+0x3c8/0x5b0 [ 256.074157] tcp_send_ack+0x7a/0xa0 [ 256.074170] __tcp_ack_snd_check+0x107/0x3a0 [ 256.082400] tcp_rcv_established+0x67e/0x1650 [ 256.082414] ? tcp_data_queue+0x3730/0x3730 [ 256.082424] ? __local_bh_enable_ip+0x99/0x1a0 [ 256.082438] tcp_v4_do_rcv+0x563/0x7e0 [ 256.082453] __release_sock+0x12d/0x350 [ 256.082466] ? tcp_keepalive_timer.cold+0x1d/0x1d [ 256.112985] __sk_flush_backlog+0x28/0x40 [ 256.117154] tcp_sendmsg_locked+0x27bb/0x3400 [ 256.121673] ? save_trace+0x290/0x290 [ 256.125513] ? tcp_sendpage+0x60/0x60 [ 256.129343] ? trace_hardirqs_on_caller+0x400/0x590 [ 256.134377] ? trace_hardirqs_on+0xd/0x10 [ 256.138548] tcp_sendmsg+0x30/0x50 [ 256.142102] inet_sendmsg+0x122/0x500 [ 256.145925] ? inet_recvmsg+0x500/0x500 20:34:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0x1f}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 256.149920] sock_sendmsg+0xce/0x110 [ 256.153652] SYSC_sendto+0x206/0x310 [ 256.157375] ? SYSC_connect+0x2d0/0x2d0 [ 256.161361] ? lock_downgrade+0x6e0/0x6e0 [ 256.165537] ? wait_for_completion+0x420/0x420 [ 256.170139] ? __sb_end_write+0xc1/0x100 [ 256.174228] ? fput+0xd4/0x150 [ 256.177437] ? SyS_write+0x10b/0x180 [ 256.181640] SyS_sendto+0x40/0x50 [ 256.185105] ? SyS_getpeername+0x30/0x30 [ 256.189198] do_syscall_64+0x1e8/0x640 [ 256.193100] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 256.197983] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 256.203208] RIP: 0033:0x459279 [ 256.203215] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 256.203226] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 256.203231] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 256.203236] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 256.203241] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 256.203247] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 [ 256.221398] libceph: resolve '.' (ret=-3): failed [ 256.311140] libceph: parse_ips bad ip '[.::]:9l>.' 20:34:29 executing program 1 (fault-call:6 fault-nth:14): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:29 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0xb1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) pwritev(r1, &(0x7f0000001580)=[{&(0x7f00000000c0)="1bbed10728f412577b51cc7c8a79fdaaf1f1aa2bf6e0c9bb9a38e98b55bec6816cf81170e6492817c02ce7111f85c14c901fa5b4e68a3d229c5474565698f55a87dd410362033d35fed94124b0b6675821924bb532b7927cb0caa73e531fe6db3b1754948dcec843046ef9e3a90facd1259f5f609c016892b47a6d9243803081cc173d947b340eeaf90feee3097517755a8f9767d75611ca2e3e0c6005b9ae7bf214cde08662a7bd646f41f8a10524c3ddf10c4186672a69d10f43b42c", 0xbd}, {&(0x7f0000000180)="ab750514abf70e9daeb9a00f3666663cbaf4c40d63c97ee38323965b0dd871960ed73a3a78096e4d7fa11680ca26e9982d6bfeb065b5645ac5e2d0935e936dd5331fcad22d4411f9aed438d1429a338915921a816faf7e50440108590400862aff8e3e48a5f4e89bfd920c473608c82916963a93f1abefab7bd08ed84e6cdf283abda472642eb2e36a3bd96183bf1c311b3ffcbe1372", 0x96}, {&(0x7f0000001600)="c259a7dc4ef90755165b8435cd7a6fabd3e1a07a155f40e37d31164a82a04179100e97145acc5d0dce4a8eec177edcbd04e3c005ea386b2b51a24e6f5bf7cab05bf23156c3a8a7d96c127c323b1f57021ab0bcf12307969035914a6755328b825d35e879e1bb8d5dfff25a7e6bc7162f422eb2b28f347fe8916c25511f8ae8f35bbd220bd2d5cd09f523bb2ebffa530a0fa248500ddc5d6134e4a19b049af1bc85b5ce94bb76df43744b1c0c0c78ca5a21b832a1783ea76ba8599414d7e6b53bef38ed56d074c1c48c394ce642bbcb29b9055b61deba27287fdbf14a121d5113f9a19d450bf46cbf6d47c05957ad065839c7e2646a56505f21e608639e732a7d299fe513dc30fdf6c7167d3ff11b03a2c73498337540f1fca5b236e92538af91dabfbccfa5ae128c610db99e9f1a9a8833973ccc2e0dc9", 0x137}, {&(0x7f00000003c0)="957b44007bf607f7dd602f706d4c9fc190a5d0ee087c83b71653ab1f170e30ee404d49410c24f648425adf4aec9abc1ac373b5e8a4e170f9db1b20b0ce9bd2f6245e098d7f77ee746f1bf02edbccf0e97da61202e7d0ed89dc42f5b41d955a42609b1c300cf229191aebfc1682c1e61eae57ad78beac9499fe29fdaac9", 0x7d}, {&(0x7f0000000440)="a39d2a5cedda79bbdabf32c45cc1fc9210690231ee46874e1e75e1e845d08a9efd72af4e81e14a70cf4fc343fbcf1d6f83fb42eef6f4bcbbf803ed74258a1b3ee421daf8eaf8ff415265fe8915a7945f365f4096cc39f4ee1760739a606d60212e1dd5a7", 0x64}, {&(0x7f00000004c0)="8330192a3a1a31315b395e8c0ff74983550452ac8cc1ecbd56ebd5bf3e0b1b484cc2ec24c61820bd5cd0b4621f3b924b9c85ab287274db45826b9f52a114a7dce45417bc3ed4927cc332c17dcb0d24618ac37768c943fc89a024388a2a433379d8d1322debde0ca733fbde0c84809345cffbd1c3ae924b0de98b83cad6e0d9dd2f10436c5f862cd90f6fef9bb2dc81f73dc412f99ac43c62f55415beea33b270a1fdc8a8e02eed6722727b0ec16bc515b333e3", 0xb3}, {&(0x7f0000000580)="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", 0x1000}], 0x7, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000240)=0xf002) 20:34:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffeb", 0x24}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x8, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r3, 0xa16, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x9, 0x2, 0x7]}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x2}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x20}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 20:34:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:29 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) recvfrom$netrom(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x20, &(0x7f0000001340)={{0x3, @default, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) read$alg(r0, &(0x7f00000013c0)=""/118, 0x76) prctl$PR_GET_SECUREBITS(0x1b) r2 = shmget$private(0x0, 0x4000, 0x41, &(0x7f0000ffc000/0x4000)=nil) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000001440)=r0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000014c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x24, r3, 0x100, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x7f}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8004) r4 = getpgid(0xffffffffffffffff) ptrace$peek(0x1, r4, &(0x7f00000015c0)) r5 = accept4(r0, &(0x7f0000001600)=@isdn, &(0x7f0000001680)=0x80, 0x80000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001800)={r0, &(0x7f00000016c0)="c7bf7ec314dd2fbea19f47e1bb657ebad7af5e382bcb13cd7eb4b041a6f98996807346c94994d2e30b9f91063f57208cdf84a56629d67537786f5c3a973bf5ff4370c1536d38e76d95eaa2f76a1c1fb3aa6183ca9db9c005a4f8940e7bea00c322db73aa0adce04d6782cbf0c1a8d74600ae1786372ac708c0b4226dcdae1f616621dfed0b92bb0576466397efe2ca19d2eccf4ac00ba39ba88e2c18a7db6b9c455c900378b771cd9d9a6e7b4635c35413a2d31d3431912902401ae4cad82ac39d6532fe6d7ebd65a923e0586dcf821870d8359e14c2306d451393b3ae60685901c45e1fbb5db75d71b3d249ffb79ea9", &(0x7f00000017c0)=""/46}, 0x18) close(r5) fallocate(r0, 0x51, 0x101, 0x1) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000001840)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000001940)=0xe8) fstat(r5, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000001a00), &(0x7f0000001a40)=0x0, &(0x7f0000001a80)) lstat(&(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r2, 0x1, &(0x7f0000001b80)={{0xfffffffffffffe00, r6, r7, r8, r9, 0x100, 0x4}, 0x1, 0x400, 0x0, 0x8, r4, r4, 0x1f}) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000001c00)) getrusage(0xffffffffffffffff, &(0x7f0000001c40)) getsockopt$inet_dccp_buf(r5, 0x21, 0xf, &(0x7f0000001d00)=""/163, &(0x7f0000001dc0)=0xa3) r10 = request_key(&(0x7f0000001e00)='ceph\x00', &(0x7f0000001e40)={'syz', 0x2}, &(0x7f0000001e80)='/selinux/avc/cache_stats\x00', 0xfffffffffffffffd) keyctl$get_security(0x11, r10, &(0x7f0000001ec0)=""/254, 0xfe) r11 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/mixer\x00', 0x200000, 0x0) write$P9_RFLUSH(r11, &(0x7f0000002000)={0x7, 0x6d, 0x2}, 0x7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002080)={0x2, &(0x7f0000002040)=[{0x1, 0x3, 0x5, 0x401}, {0x7, 0x9, 0x2, 0x49}]}, 0x10) 20:34:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffeb", 0x24}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 256.456206] FAULT_INJECTION: forcing a failure. [ 256.456206] name failslab, interval 1, probability 0, space 0, times 0 [ 256.481600] CPU: 0 PID: 17905 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 256.488744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.498094] Call Trace: [ 256.498119] dump_stack+0x138/0x19c 20:34:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000000)=0x78) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 256.504330] should_fail.cold+0x10f/0x159 [ 256.508495] should_failslab+0xdb/0x130 [ 256.512485] kmem_cache_alloc_node+0x287/0x780 [ 256.517078] ? tcp_established_options+0x2c5/0x420 [ 256.522030] __alloc_skb+0x9c/0x500 [ 256.525668] ? skb_scrub_packet+0x4b0/0x4b0 [ 256.525684] ? trace_hardirqs_on_caller+0x400/0x590 [ 256.525700] sk_stream_alloc_skb+0xb3/0x780 [ 256.525711] ? tcp_send_mss+0xa4/0x2f0 [ 256.525725] tcp_sendmsg_locked+0xf56/0x3400 [ 256.525736] ? save_trace+0x290/0x290 [ 256.543299] ? tcp_sendpage+0x60/0x60 20:34:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 256.543315] ? trace_hardirqs_on_caller+0x400/0x590 [ 256.543327] ? trace_hardirqs_on+0xd/0x10 [ 256.543343] tcp_sendmsg+0x30/0x50 [ 256.568036] inet_sendmsg+0x122/0x500 [ 256.571851] ? inet_recvmsg+0x500/0x500 [ 256.575838] sock_sendmsg+0xce/0x110 [ 256.579561] SYSC_sendto+0x206/0x310 [ 256.583289] ? SYSC_connect+0x2d0/0x2d0 [ 256.587277] ? lock_downgrade+0x6e0/0x6e0 [ 256.591450] ? wait_for_completion+0x420/0x420 [ 256.596050] ? __sb_end_write+0xc1/0x100 [ 256.600126] ? fput+0xd4/0x150 [ 256.603334] ? SyS_write+0x10b/0x180 20:34:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x3) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:30 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 256.607057] SyS_sendto+0x40/0x50 [ 256.610517] ? SyS_getpeername+0x30/0x30 [ 256.614590] do_syscall_64+0x1e8/0x640 [ 256.618480] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 256.623333] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 256.628526] RIP: 0033:0x459279 [ 256.628535] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 256.639433] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 256.646794] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 256.654065] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 256.661337] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 256.668613] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:30 executing program 1 (fault-call:6 fault-nth:15): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:30 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x810080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/fib_triestat\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000017c0), 0x1be, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) 20:34:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000000c0)=0x7, &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x9) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000080)=0x2) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000003880)=0x800, 0x4) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000038c0)=0x5, 0x8) recvmsg$kcm(r1, &(0x7f0000003840)={&(0x7f00000001c0)=@ax25={{0x3, @null}, [@bcast, @rose, @netrom, @netrom, @bcast, @null, @null, @default]}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/173, 0xad}, {&(0x7f0000001400)=""/142, 0x8e}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/68, 0x44}, {&(0x7f0000003540)=""/41, 0x29}, {&(0x7f0000003580)=""/232, 0xe8}, {&(0x7f0000003680)=""/18, 0x12}], 0xa, &(0x7f0000003780)=""/152, 0x98}, 0x60) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0x9, @pix={0x0, 0xffffffff00000001}}}) [ 256.836467] FAULT_INJECTION: forcing a failure. [ 256.836467] name failslab, interval 1, probability 0, space 0, times 0 [ 256.867882] CPU: 1 PID: 17941 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 256.875024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.884391] Call Trace: [ 256.887008] dump_stack+0x138/0x19c [ 256.890666] should_fail.cold+0x10f/0x159 [ 256.894853] should_failslab+0xdb/0x130 [ 256.898855] kmem_cache_alloc_node_trace+0x280/0x770 [ 256.903980] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 256.909451] __kmalloc_node_track_caller+0x3d/0x80 [ 256.914395] __kmalloc_reserve.isra.0+0x40/0xe0 [ 256.919103] __alloc_skb+0xcf/0x500 [ 256.922744] ? skb_scrub_packet+0x4b0/0x4b0 [ 256.927081] ? trace_hardirqs_on_caller+0x400/0x590 [ 256.932119] sk_stream_alloc_skb+0xb3/0x780 [ 256.936449] ? tcp_send_mss+0xa4/0x2f0 [ 256.940349] tcp_sendmsg_locked+0xf56/0x3400 [ 256.944767] ? save_trace+0x290/0x290 [ 256.948596] ? tcp_sendpage+0x60/0x60 [ 256.952410] ? trace_hardirqs_on_caller+0x400/0x590 [ 256.957443] ? trace_hardirqs_on+0xd/0x10 [ 256.961607] tcp_sendmsg+0x30/0x50 [ 256.965161] inet_sendmsg+0x122/0x500 [ 256.968979] ? inet_recvmsg+0x500/0x500 [ 256.972972] sock_sendmsg+0xce/0x110 [ 256.976707] SYSC_sendto+0x206/0x310 [ 256.980443] ? SYSC_connect+0x2d0/0x2d0 [ 256.984435] ? lock_downgrade+0x6e0/0x6e0 [ 256.988618] ? wait_for_completion+0x420/0x420 [ 256.993218] ? __sb_end_write+0xc1/0x100 [ 256.997295] ? fput+0xd4/0x150 [ 257.000500] ? SyS_write+0x10b/0x180 [ 257.004224] SyS_sendto+0x40/0x50 [ 257.007689] ? SyS_getpeername+0x30/0x30 [ 257.011760] do_syscall_64+0x1e8/0x640 [ 257.015658] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.020525] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 257.025722] RIP: 0033:0x459279 [ 257.028912] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 20:34:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f000052b000/0x1000)=nil, 0x1000, 0x5, 0x31, r1, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0)={0x2}, 0x4) 20:34:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffeb", 0x24}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:30 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 257.036634] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 257.040557] net_ratelimit: 18 callbacks suppressed [ 257.040603] protocol 88fb is buggy, dev hsr_slave_0 [ 257.043908] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 257.043916] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 257.043922] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 257.043928] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") pread64(r0, &(0x7f0000000340)=""/225, 0xe1, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x20042) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x28, &(0x7f00000000c0)}, 0x10) write$P9_RSTATFS(r1, &(0x7f0000000140)={0x43, 0x9, 0x1, {0x5a1, 0x4, 0x5, 0x9, 0x8, 0x60000000, 0x1, 0x72, 0x52}}, 0x43) r2 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 257.084144] protocol 88fb is buggy, dev hsr_slave_1 20:34:30 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 257.120153] protocol 88fb is buggy, dev hsr_slave_0 [ 257.125298] protocol 88fb is buggy, dev hsr_slave_1 20:34:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) getsockname$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) 20:34:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e", 0x27}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:30 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000100)={0x2, 0x1, 0xffffffff, 0x9, 0xffffffff}, 0xc) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f00000000c0)=0xfffffffffffffff7) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:31 executing program 1 (fault-call:6 fault-nth:16): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) [ 257.512511] FAULT_INJECTION: forcing a failure. [ 257.512511] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 257.525041] CPU: 1 PID: 17980 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 257.532169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.541534] Call Trace: [ 257.544147] dump_stack+0x138/0x19c [ 257.547798] should_fail.cold+0x10f/0x159 [ 257.551966] __alloc_pages_nodemask+0x1d6/0x7a0 [ 257.556663] ? find_held_lock+0x35/0x130 [ 257.560756] ? __alloc_pages_slowpath+0x2930/0x2930 [ 257.565791] ? iov_iter_advance+0x218/0xc60 [ 257.570135] alloc_pages_current+0xec/0x1e0 [ 257.574477] skb_page_frag_refill+0x1d3/0x3e0 [ 257.579023] ? __phys_addr_symbol+0x23/0x60 [ 257.583375] sk_page_frag_refill+0x53/0x1c0 [ 257.587737] tcp_sendmsg_locked+0x7c7/0x3400 [ 257.592170] ? save_trace+0x290/0x290 [ 257.596184] ? tcp_sendpage+0x60/0x60 [ 257.599999] ? trace_hardirqs_on_caller+0x400/0x590 [ 257.605032] ? trace_hardirqs_on+0xd/0x10 [ 257.609207] tcp_sendmsg+0x30/0x50 [ 257.612757] inet_sendmsg+0x122/0x500 [ 257.616564] ? inet_recvmsg+0x500/0x500 [ 257.620631] sock_sendmsg+0xce/0x110 [ 257.624358] SYSC_sendto+0x206/0x310 [ 257.628088] ? SYSC_connect+0x2d0/0x2d0 [ 257.632071] ? lock_downgrade+0x6e0/0x6e0 [ 257.636234] ? wait_for_completion+0x420/0x420 [ 257.640823] ? __sb_end_write+0xc1/0x100 [ 257.644982] ? fput+0xd4/0x150 [ 257.648183] ? SyS_write+0x10b/0x180 [ 257.651915] SyS_sendto+0x40/0x50 [ 257.655380] ? SyS_getpeername+0x30/0x30 [ 257.659456] do_syscall_64+0x1e8/0x640 [ 257.663348] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.668225] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 257.673416] RIP: 0033:0x459279 [ 257.676602] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 257.684294] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 257.691554] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 257.698816] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 257.706071] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 20:34:31 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e", 0x27}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x200000001, 0x84) r2 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x9, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000240)={0xfffffffffffffff8, "06595edec0676cd8a7f12e0f38f6451577aedf697bbe556fbd0710ef42a6a6bd", 0x1, 0x1}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000180)=""/79) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) r4 = getpid() sched_setattr(r4, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x8, 0x81, 0x2, 0x6, 0xbe}, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x80) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, &(0x7f00000000c0)={0x7f, 0x1000}) 20:34:31 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:31 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() write$P9_RSTATu(r2, &(0x7f0000000340)={0x79, 0x7d, 0x1, {{0x0, 0x5e, 0x3, 0x6, {0x22, 0x4, 0x2}, 0x1000000, 0x2, 0x0, 0x81, 0xe, '/dev/swradio#\x00', 0xe, '/dev/swradio#\x00', 0xe, '/dev/swradio#\x00', 0x1, '{'}, 0x6, 'md5sum', r3, r4, r5}}, 0x79) [ 257.713327] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 [ 257.720815] protocol 88fb is buggy, dev hsr_slave_0 [ 257.725909] protocol 88fb is buggy, dev hsr_slave_1 [ 257.731084] protocol 88fb is buggy, dev hsr_slave_0 [ 257.736175] protocol 88fb is buggy, dev hsr_slave_1 20:34:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e", 0x27}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:31 executing program 1 (fault-call:6 fault-nth:17): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:31 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:31 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000000000000000feffffffffffffff00000000000000d91249be17ccf2213bb4b67fff310f49000000000000000000000000000700"/72]) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:31 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:31 executing program 2: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x80, 0x80400) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000340)=""/4096) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x80, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) connect$unix(r0, &(0x7f0000001340)=@abs={0x1, 0x0, 0x4e23}, 0x64) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e26", 0x28}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 257.932215] FAULT_INJECTION: forcing a failure. [ 257.932215] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 257.983387] CPU: 0 PID: 18004 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 257.990548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.999912] Call Trace: [ 258.002519] dump_stack+0x138/0x19c [ 258.006164] should_fail.cold+0x10f/0x159 [ 258.010337] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 258.015814] __alloc_pages_nodemask+0x1d6/0x7a0 [ 258.020499] ? find_held_lock+0x35/0x130 [ 258.024577] ? __alloc_pages_slowpath+0x2930/0x2930 20:34:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:31 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 258.029613] ? iov_iter_advance+0x218/0xc60 [ 258.034038] alloc_pages_current+0xec/0x1e0 [ 258.038375] skb_page_frag_refill+0x1d3/0x3e0 [ 258.042887] ? __phys_addr_symbol+0x23/0x60 [ 258.047230] sk_page_frag_refill+0x53/0x1c0 [ 258.051569] tcp_sendmsg_locked+0x7c7/0x3400 [ 258.056024] ? tcp_sendpage+0x60/0x60 [ 258.059850] ? trace_hardirqs_on_caller+0x400/0x590 [ 258.064870] ? trace_hardirqs_on+0xd/0x10 [ 258.064888] tcp_sendmsg+0x30/0x50 [ 258.064900] inet_sendmsg+0x122/0x500 [ 258.064909] ? inet_recvmsg+0x500/0x500 [ 258.064920] sock_sendmsg+0xce/0x110 [ 258.064931] SYSC_sendto+0x206/0x310 [ 258.064943] ? SYSC_connect+0x2d0/0x2d0 [ 258.064955] ? lock_downgrade+0x6e0/0x6e0 [ 258.096742] ? wait_for_completion+0x420/0x420 [ 258.101341] ? __sb_end_write+0xc1/0x100 [ 258.105420] ? fput+0xd4/0x150 [ 258.108635] ? SyS_write+0x10b/0x180 [ 258.112372] SyS_sendto+0x40/0x50 [ 258.115837] ? SyS_getpeername+0x30/0x30 [ 258.119919] do_syscall_64+0x1e8/0x640 [ 258.123825] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.128783] entry_SYSCALL_64_after_hwframe+0x42/0xb7 20:34:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) write(r1, &(0x7f0000000200)="d53e4a8e2af4b1105b341ff6e1b6ad3afc28243773c34963604951bf5d9ab08d8c1fc359a77d5d40b845574f167abbac84d2e25ff6b9df1012ae2bf7936dd2bbc0b75804c6e0cfbd732ed2334999ab47afd770b03ea1057f9e522370f56324dc6a2cb6f0b8655d1e9454e594f9217c2fbc7c3d455e5f5e88d62d1616e0f92375059d5230492edd38e2e7be132d", 0x8d) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$unix(r1, &(0x7f0000000080)="9aadd2347897c80f4d0a4ce700794381f44ca54be1c8e5ab70d091cc08038e266c4a80980bee54cb9aea539263896476bc1a4d0e5d37cf60216a91932554ddfe764a9d5478008c07f5b50f307773eb1cadae5661f8405159fb43aed08d34bb26afe501833152a1229cb2063a9d559e06a13dc664482ecba1f878722a75eeac021a352b36d0bda60c90ac2acb110a81fc2d3b80e2d802f72787bc9d63a722572aef9e7e0b8849a77dfb3afad1d6a132713598a4d106fde6723b688c7bd05800dfc3988a2b1574da4bba6ee65cd185d6aa1fa2886e21e5bb7c238df3a484cc95c489f2735d891cc2a3f09b9ec3", 0xec, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:31 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:31 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e26", 0x28}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 258.133987] RIP: 0033:0x459279 [ 258.137194] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 258.144921] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 258.152221] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 258.159510] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 258.166816] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 258.174099] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 [ 258.240145] protocol 88fb is buggy, dev hsr_slave_0 [ 258.240183] protocol 88fb is buggy, dev hsr_slave_1 20:34:31 executing program 1 (fault-call:6 fault-nth:18): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000100)) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r1) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000580)={0x3f}, 0x4) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@dev, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) ioprio_get$uid(0x3, r2) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000000)={0x3, 0x8000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000380)={{0x1, 0x6}, 'port1\x00', 0x82, 0x40, 0x3f, 0xf26e, 0x7, 0xfffffffffffffffc, 0x800, 0x0, 0x2, 0x200}) 20:34:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e26", 0x28}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d657461636f70793d6f6e2c696e6465783d6f6e2c6d657461636f70793d6f66662c6673757569643d77773b00631967772d77637a642d7f3732312d76342c736d61636b66736861743d7d232c00"]) 20:34:31 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:31 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x101000) r2 = fcntl$getown(r0, 0x9) getresuid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0, 0x0}, &(0x7f0000000980)=0xc) r5 = getpgid(0x0) stat(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, &(0x7f0000000f00)=0xc) r8 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000010c0)={0x0, 0xffffffffffffff9c, 0x0, 0xb, &(0x7f0000001080)='proc!wlan0\x00', 0xffffffffffffffff}, 0x30) stat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getgid() r14 = getpid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000011c0)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000012c0)=0xe8) stat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000013c0)={0x0}, &(0x7f0000001400)=0xc) r18 = geteuid() getresgid(&(0x7f0000001440)=0x0, &(0x7f0000001480), &(0x7f00000014c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001540)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001500)='\x00'}, 0x30) r21 = getuid() r22 = getegid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001580)=0x0) fstat(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r25 = getgid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000001640)=0x0) r27 = geteuid() r28 = getegid() sendmmsg$unix(r1, &(0x7f00000017c0)=[{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000100)="bc67834edfc6a9d41b78d6e58a4de5411b8d0698c3a60e48a527d63660bfa035727a6a0080de2e6aff045c510fe5edea317fdbb1a7b0df343e15d263fde0e5a22b6ffbe5b8b9eb9b98dff5a1f1c2de4e9c1c55173ff55dc4b977b8721c71d327006bf0ec5070ec229d1b43154b581418089550eb84c2880f56c1879bb17f28e168521c6d6ae9135542fe2e6e7da51072042d4f7242ea16b64573c4ddbc053af0342467ea18d46a6b444e4555da3c37905c55da20872cecbc2707bd661bebedd3f942ad521e", 0xc5}, {&(0x7f0000000200)="8d774d222899897f070b3bb2a3ff38d50234e2693d08a7183c6cba2365dd5e40c3d5b1af9d8820a994e2deb8ce4bad3d23f69b77a99186072e61153190dc37dc1e8aedf67d754ea57241", 0x4a}, {&(0x7f0000000280)="d68089e52e2701dc1ebab7fcdb455f9d8a86dd051856a96aa9584b7c2151dbb1bf8033ea9e567fc2054911c79bab92a15f153d53d36ab8f8f70261d1e8eb382a16184a246f0c0bb7d2bb02c3a2baa74888233afc9c5e768649ee9882d0735b2e9ec242288d32e7b1dc8e5045e9afcc109350b9e0378d14df310ee5d6136d7fbbffe1b6847fa8c2822a49b455f1f655230389584380be780ad775f9b55564cd553e43492e77c19b73cbbd1044e433", 0xae}, {&(0x7f0000000340)="930fc5b730f2e67f5805f595d6f533025946d52aeef44c28614d42fe7dcdc87a81130fb4dc73c9e1835d9acab308b726020afdaa8e082bb2c2e99010e53e0fc6eac2872c876aa2d99b2d16bd7f52b2a5e103c2d7e56e1f33e6e1ce97e6c90d073edacc10026aa8f4cc5133d4", 0x6c}, {&(0x7f0000000400)="2c3d005a95bffd1366033e0110b829c5a57f16850f888a6b18a51e0735d2e14c203ee8e6f200ca8ce1bdbec85536caffd4eb34c3fa5497589d13d690ca3b7d4d56d1c861d2d2be35267e6012edd1f43a5c08c14785df42cd9ec7bfd0219a567cf0c88fcfb39b8bf5c4d43a54d1f82539a79b7a9679209a856178e6d1aa09354a80c843cffbf3dbeaddfe7664a541b53d4161e165718d0cf488e4c5a594d0b83bda7bead14c52e2710e61c158110340df47589b4403986b9a5d9a657a9171bfb7de31c686d492997904d2", 0xca}, {&(0x7f0000000500)="b4cb", 0x2}, {&(0x7f0000000540)="46594300684462421e3e6a306d6afc8211ca4593a3558fad9570c30f9d9e92ef6e7b0ffa0e07a8b2eeec0a498ac845dc410fae793f734f0d09bdedf818d5296c01d60c445d86340f9721e0c8877573e2a30c2187321cf220d47f1c6763be84fd5d72d3e97e3fdb862f0003bae5a1805dd162ebfb31b512550fb2d52ad807d434d7e0b87b3c688d72fb8263c983b3ba90f360", 0x92}, {&(0x7f0000000600)="4717b08e5b7cb43cb6922d1b62396c9383f725a5223f0a223c51f1bfe9a384d86c40633c888b5151be6ebac4df2d717924d8758047d8017053ff838a6f97593ee882d82aae5561e04b8c935b225f61311480f437d4c591be40c0fddc1aedc61a96e312f05771e794c340377447454c9c70eefe870de5cf090a206bc0bd1adf73340173860372e382d9fe0c47c8fb387922ae95a32a46b943a0f8d8c59869044636", 0xa1}, {&(0x7f00000006c0)="ec69d711044a59ebf5eb214321f6ada7d370f5af3fd7336aab64146f0f481d9fa7061fd84d5f3669d0948c290cb8203692fe6f19089f88bf35584208b126bc55c7e7ccc8ece05b2ae16455a425826488e465cdf40544d58e6ca0b58fa36bcb740b3b8d8e2832d01602e82970baec35b7c42d5d005cf47a140e6203f97541b6eefb590a09f72885b5b93e3adc757f17f407c4089fa88f371c97b2eca69fa338876e18cc3bcd5cc1cb0f4ed926dcaf42a84b49acded0141b620fbdeb56f6e8bb4809ccebca65dc3a94553a874b7b0fcae39b61a632148b84066f3a2036796e65632d4f9b0c4a6b01d0324b26d3fb18c7191bd42a1f", 0xf4}], 0x9, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}}], 0x50, 0x8000}, {&(0x7f0000000a40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000ac0)="e1b9b94d90faa19c0eacf80d03cf2f674ab06414a9601071950ec8216ad85aa4c8f4338c2175dc7da21d7245ab9bb1fd3cc3b202ec55d4", 0x37}, {&(0x7f0000000b00)="0ad6", 0x2}, {&(0x7f0000000b40)="1a4663dac1b4d42b911b855a52ede8f7e143d5fb70b6f1b63eac8a55f9e8a0b56ff0efca8ec9ca329d1074dc6618d413ee5434129ebaeb379b7ff65d4f216914ef213d8d3e9d2400856270fe307d9c7b506e4e1c8edd8713ef271c579b2437d912f38cdf4c536eecb264a1ce506434e1b3450fefefac3c2ebfee0ccef671688b890f56d442766f7db576", 0x8a}, {&(0x7f0000000c00)="0b3cf54cf22a7cbb43b246ecc85a88d4ad0b8f4b6b82b6c227e26ef2eccf28aa58250c23f589477bbc14799146f23b91dba78c1f015b46d86bceed5a4d88e01739fce6dd5a8f4e5c77d7b4e53c0685bda66dd3769eb4a6590113372275df67b41756fa9ec6bfa1da60916b8bbd7a51dcf110b0210d85e052aaf374ac10633874a671c3b326fe831053b3444599ba0d1a87462a00926a9251389dbe7e2b8ce57fda4df55995735353732f9727a255496b", 0xb0}, {&(0x7f0000000cc0)="a291c00087aaf679c6c4b2c673520a9385a90d734403cb8200e256eb133ee0a075c6af040a8937911de750a20c556272b68872a3d45317778c5af3d8eae716218853e947775ec4096a8d4bcd9905bf42b266bf987d8ebf1b5b868ac652bfc8274c43dbe5c5c50f9e1051a4941c2ae892dac77b4d995d8888a00677542e1a9246439d64eeaba80caf86", 0x89}], 0x5, &(0x7f0000001680)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @cred={{0x1c, 0x1, 0x2, {r23, r24, r25}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}], 0x118, 0x4040}], 0x2, 0x4004844) r29 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r29, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 258.477114] FAULT_INJECTION: forcing a failure. [ 258.477114] name failslab, interval 1, probability 0, space 0, times 0 [ 258.488489] CPU: 0 PID: 18055 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 258.495621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.505171] Call Trace: [ 258.507794] dump_stack+0x138/0x19c [ 258.511451] should_fail.cold+0x10f/0x159 [ 258.515631] should_failslab+0xdb/0x130 [ 258.519636] kmem_cache_alloc+0x47/0x780 20:34:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/autofs\x00', 0x2, 0x0) recvfrom$x25(r1, &(0x7f0000000700)=""/209, 0xd1, 0x121, &(0x7f0000000800)={0x9, @remote={[], 0x2}}, 0x12) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r3 = dup(r0) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x1) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:32 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 258.523712] ? lock_acquire+0x16f/0x430 [ 258.527698] ? check_preemption_disabled+0x3c/0x250 [ 258.532733] skb_clone+0x129/0x320 [ 258.536289] dev_queue_xmit_nit+0x296/0x8c0 [ 258.540656] dev_hard_start_xmit+0xa7/0x8b0 [ 258.544988] ? assoc_array_gc+0x1140/0x11d0 [ 258.549358] __dev_queue_xmit+0x1d95/0x25e0 [ 258.553744] ? __local_bh_enable_ip+0x99/0x1a0 [ 258.553759] ? netdev_pick_tx+0x300/0x300 [ 258.553770] ? find_held_lock+0x35/0x130 [ 258.553781] ? ip_finish_output+0x56d/0xc60 [ 258.553795] ? mark_held_locks+0xb1/0x100 20:34:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 258.553808] dev_queue_xmit+0x18/0x20 [ 258.553816] ? dev_queue_xmit+0x18/0x20 [ 258.553824] ip_finish_output2+0xddc/0x14a0 [ 258.553839] ? ip_copy_metadata+0x9b0/0x9b0 [ 258.553855] ip_finish_output+0x56d/0xc60 [ 258.553863] ? ip_finish_output+0x56d/0xc60 [ 258.553875] ip_output+0x1e6/0x590 [ 258.603599] ? ip_mc_output+0xd40/0xd40 [ 258.607587] ? __lock_is_held+0xb6/0x140 [ 258.611658] ? check_preemption_disabled+0x3c/0x250 [ 258.616682] ? ip_fragment.constprop.0+0x200/0x200 [ 258.621617] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 258.621630] ip_local_out+0x97/0x170 [ 258.621642] ip_queue_xmit+0x7d7/0x1b10 [ 258.621655] ? __tcp_v4_send_check+0x1c0/0x360 [ 258.639446] __tcp_transmit_skb+0x172c/0x2fe0 [ 258.639468] ? bictcp_cong_avoid+0xe50/0xe50 [ 258.639480] ? __tcp_select_window+0x6e0/0x6e0 [ 258.639494] ? kvm_clock_read+0x23/0x40 [ 258.639507] ? sched_clock_cpu+0x1b/0x1c0 [ 258.639519] ? tcp_small_queue_check+0x184/0x1e0 [ 258.665856] tcp_write_xmit+0x523/0x48b0 [ 258.669938] ? iov_iter_advance+0x218/0xc60 20:34:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 258.674281] __tcp_push_pending_frames+0xa6/0x260 [ 258.679151] tcp_sendmsg_locked+0x264c/0x3400 [ 258.683682] ? tcp_sendpage+0x60/0x60 [ 258.687504] ? trace_hardirqs_on_caller+0x400/0x590 [ 258.692544] ? trace_hardirqs_on+0xd/0x10 [ 258.696714] tcp_sendmsg+0x30/0x50 [ 258.700278] inet_sendmsg+0x122/0x500 [ 258.704101] ? inet_recvmsg+0x500/0x500 [ 258.708090] sock_sendmsg+0xce/0x110 [ 258.711827] SYSC_sendto+0x206/0x310 [ 258.715560] ? SYSC_connect+0x2d0/0x2d0 [ 258.719554] ? lock_downgrade+0x6e0/0x6e0 [ 258.723721] ? wait_for_completion+0x420/0x420 [ 258.728310] ? __sb_end_write+0xc1/0x100 [ 258.732388] ? fput+0xd4/0x150 [ 258.735598] ? SyS_write+0x10b/0x180 [ 258.739326] SyS_sendto+0x40/0x50 [ 258.742780] ? SyS_getpeername+0x30/0x30 [ 258.742796] do_syscall_64+0x1e8/0x640 [ 258.742805] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.742821] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 258.742829] RIP: 0033:0x459279 [ 258.742834] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 20:34:32 executing program 1 (fault-call:6 fault-nth:19): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) getresgid(&(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) fchown(r0, r1, r3) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000002c0)={0x51, 0x75, 0x9, {0x9, 0x24}, {0x4, 0x5}, @period={0x58, 0x8, 0x1, 0xfff, 0x3f, {0x3ff, 0x7, 0x0, 0x800}, 0x5, &(0x7f0000000280)=[0x100, 0x79b4, 0x2, 0x4, 0x0]}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) write$P9_RSTATu(r4, &(0x7f0000000300)={0xad, 0x7d, 0x1, {{0x0, 0x6d, 0x0, 0xfffffffffffffffc, {0x1, 0x2, 0x4}, 0x0, 0x6, 0x0, 0x5, 0xd, '#vmnet0ppp1/\\', 0xf, '/dev/sequencer\x00', 0xf, '/dev/sequencer\x00', 0xf, '/dev/sequencer\x00'}, 0x2b, ')trustedvmnet1keyringvboxnet1vmnet0vboxnet0', r1, r2, r1}}, 0xad) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) lookup_dcookie(0x0, &(0x7f0000000000)=""/45, 0x2d) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 258.742845] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 258.742851] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 258.742857] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 258.742863] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 258.742872] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:32 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:32 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:32 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 258.951427] FAULT_INJECTION: forcing a failure. [ 258.951427] name failslab, interval 1, probability 0, space 0, times 0 20:34:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000080)={{0x7, 0x4}, {0x5, 0x4}, 0x1, 0x6, 0x8000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000001c0)={0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}]}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 259.041436] CPU: 0 PID: 18090 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 259.048601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.057961] Call Trace: [ 259.060580] dump_stack+0x138/0x19c [ 259.064237] should_fail.cold+0x10f/0x159 [ 259.068412] should_failslab+0xdb/0x130 [ 259.072402] kmem_cache_alloc_node+0x287/0x780 [ 259.077169] ? tcp_established_options+0x2c5/0x420 [ 259.082132] __alloc_skb+0x9c/0x500 [ 259.085782] ? skb_scrub_packet+0x4b0/0x4b0 [ 259.090130] ? trace_hardirqs_on_caller+0x400/0x590 [ 259.095169] sk_stream_alloc_skb+0xb3/0x780 [ 259.099520] ? tcp_send_mss+0xa4/0x2f0 [ 259.103429] tcp_sendmsg_locked+0xf56/0x3400 [ 259.107865] ? tcp_sendpage+0x60/0x60 [ 259.111674] ? trace_hardirqs_on_caller+0x400/0x590 [ 259.116703] ? trace_hardirqs_on+0xd/0x10 [ 259.120868] tcp_sendmsg+0x30/0x50 [ 259.124426] inet_sendmsg+0x122/0x500 [ 259.128415] ? inet_recvmsg+0x500/0x500 [ 259.132409] sock_sendmsg+0xce/0x110 [ 259.136145] SYSC_sendto+0x206/0x310 20:34:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 259.139899] ? SYSC_connect+0x2d0/0x2d0 [ 259.143884] ? lock_downgrade+0x6e0/0x6e0 [ 259.148062] ? wait_for_completion+0x420/0x420 [ 259.152660] ? __sb_end_write+0xc1/0x100 [ 259.156741] ? fput+0xd4/0x150 [ 259.159956] ? SyS_write+0x10b/0x180 [ 259.163689] SyS_sendto+0x40/0x50 [ 259.167176] ? SyS_getpeername+0x30/0x30 [ 259.171265] do_syscall_64+0x1e8/0x640 [ 259.175166] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.181665] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 259.186873] RIP: 0033:0x459279 [ 259.190059] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 259.197787] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 259.205100] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 259.212482] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 259.219778] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 259.227251] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:32 executing program 1 (fault-call:6 fault-nth:20): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:32 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x9, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x1, 0xfffffffffffffffd, 0x3}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r2, 0x100000000, 0xa, [0x101, 0x3, 0x6, 0x80000001, 0x1, 0xfffffffffffffffe, 0x1, 0x3ff, 0x101, 0x81]}, &(0x7f00000001c0)=0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4800, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0x200) 20:34:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x1ff, 0x20000009, 0x80100000000001, {0xb, @sdr={0x50323234, 0x8001}}}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0x1000, "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"}, &(0x7f0000000000)=0x1008) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1e, 0x0, "4ae90e5a4ce2f53ce00b93eaa876dfc008013420c25aab4bf6fbd09ba532c3925812d2420f69f224df337bb0758387d23842cb3a9dfe6eb4c3f1d97e31266c94", "23b86f4dadd737d6194e485e10b741b41c4ed9c00a1fd0d3eb37c48bdb02cb21f7d28a20e6e9fa86dadfdc1f7a8f9ec035ffb10bc25e5a92470f63cf7803eb07", "575eb09701efe41f21f9e52d9ba6025873158ac1ec7d96142ddc36db82e1a0f7", [0x3, 0x6]}) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x3, 0xdf2e, 0xf5}, &(0x7f0000000100)=0x10) writev(r0, &(0x7f0000001640)=[{&(0x7f0000000180)="43339b9e", 0x4}, {&(0x7f0000001480)="f58daf5559f7a4e9a6e142a26b8987ff80b3d8335d43daafbcd35a9564a853185efe359bb591a65c29b0b3712aa2496500b46f0f7c3e230913744f5ec1fb655c13c692cc9f41537ad827c16a862d9ca1e8f009ae404ff3f51ef11661f5bd8fbe921d2caf10ba2297594b554f808b761ad35f41619f82f2590282d428f09e757bf00a74aa8000e8dbc84d065b5b2810d56ff65883901c8e5ede8ba178bf29ce0e2eeb969502707bedc56b01265d", 0xad}, {&(0x7f00000001c0)="b59f8316ca318a2e3aa1438f1c9400e154350f3d43819a9e8d87a87c8bbfcb00def4812716a52b57f78a037493b663aa2ad0ccaa9bc4e7c8f2e650f9371e0a64b642a462", 0x44}, {&(0x7f0000001540)="ff2ed57e03b7c67ffab5a06de47574e1b59b3176d80cf8debe6adc843a1a50084a21f1e75b0303a7fbc30f5440e2eb9f5ec3ecb53ba0a7f388994a32e379ef0ba24329f14a697efc273502f2c0509b2f14de78def8e4cf049c705ade4da825d79b3154991c128b2cae4ac574fcdc702045aa0b35bbe3faa4b3aac634ac19c7e0ab75c45a751d3afac5044b5d53325ef81692c45b70cfa1c4b8ab82bd6836daabadec5f98ef6ab674f3caacd764177bc5043d9e93a2ade0eb29b979e291659d15adb058", 0xc3}], 0x4) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000140)={0x443, 0x3, 0x8}) 20:34:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:32 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 259.376101] FAULT_INJECTION: forcing a failure. [ 259.376101] name failslab, interval 1, probability 0, space 0, times 0 [ 259.407851] CPU: 1 PID: 18129 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 259.415010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.415016] Call Trace: [ 259.415040] dump_stack+0x138/0x19c [ 259.415062] should_fail.cold+0x10f/0x159 [ 259.434803] should_failslab+0xdb/0x130 [ 259.438810] kmem_cache_alloc_node_trace+0x280/0x770 [ 259.443942] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 259.449423] __kmalloc_node_track_caller+0x3d/0x80 [ 259.454369] __kmalloc_reserve.isra.0+0x40/0xe0 [ 259.459053] __alloc_skb+0xcf/0x500 [ 259.462700] ? skb_scrub_packet+0x4b0/0x4b0 [ 259.467025] ? trace_hardirqs_on_caller+0x400/0x590 [ 259.467042] sk_stream_alloc_skb+0xb3/0x780 [ 259.467052] ? tcp_send_mss+0xa4/0x2f0 [ 259.467067] tcp_sendmsg_locked+0xf56/0x3400 [ 259.467094] ? tcp_sendpage+0x60/0x60 [ 259.488527] ? trace_hardirqs_on_caller+0x400/0x590 [ 259.493560] ? trace_hardirqs_on+0xd/0x10 [ 259.497722] tcp_sendmsg+0x30/0x50 [ 259.497738] inet_sendmsg+0x122/0x500 [ 259.497750] ? inet_recvmsg+0x500/0x500 [ 259.497763] sock_sendmsg+0xce/0x110 [ 259.497775] SYSC_sendto+0x206/0x310 [ 259.497787] ? SYSC_connect+0x2d0/0x2d0 [ 259.516749] ? lock_downgrade+0x6e0/0x6e0 [ 259.516776] ? wait_for_completion+0x420/0x420 [ 259.516787] ? __sb_end_write+0xc1/0x100 [ 259.516802] ? fput+0xd4/0x150 [ 259.529688] ? SyS_write+0x10b/0x180 [ 259.540635] SyS_sendto+0x40/0x50 [ 259.544094] ? SyS_getpeername+0x30/0x30 [ 259.544111] do_syscall_64+0x1e8/0x640 [ 259.544121] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.544140] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 259.544151] RIP: 0033:0x459279 [ 259.565293] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 259.573012] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 20:34:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="11dca5055e0bcf0a7ce0090000005a5731fe4f09f90016c1b2c00b22c1cfcd6ed999152c5f81ae7784133461df4429af043d6b35f09c7d87fbab54cee91b1b2ff09400"/80) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 259.580290] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 259.587574] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 259.594849] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 259.602130] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x30040, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [{0x20, 'memory.current\x00'}, {0x20, 'J\\'}, {0x20, '/dev/vcs\x00'}], 0xa, "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"}, 0x1028) r2 = socket$inet6_sctp(0xa, 0x2, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0), 0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x42000, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) getsockopt$inet6_buf(r3, 0x29, 0xff, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) 20:34:33 executing program 1 (fault-call:6 fault-nth:21): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:33 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfe97be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000440)={0x0, 0x4000000004, 0x4, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x50002, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000080)) fcntl$setpipe(r0, 0x407, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0xffffffffffffffba) 20:34:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 259.848743] FAULT_INJECTION: forcing a failure. [ 259.848743] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:34:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:33 executing program 4: r0 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x7, &(0x7f0000000080)={r1, r2+30000000}) [ 259.941193] CPU: 1 PID: 18174 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 259.948355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.948361] Call Trace: [ 259.948386] dump_stack+0x138/0x19c [ 259.948407] should_fail.cold+0x10f/0x159 [ 259.968254] __alloc_pages_nodemask+0x1d6/0x7a0 [ 259.972942] ? find_held_lock+0x35/0x130 [ 259.977017] ? __alloc_pages_slowpath+0x2930/0x2930 [ 259.982059] ? iov_iter_advance+0x218/0xc60 [ 259.986407] alloc_pages_current+0xec/0x1e0 [ 259.990756] skb_page_frag_refill+0x1d3/0x3e0 [ 259.995270] ? __phys_addr_symbol+0x23/0x60 [ 259.999611] sk_page_frag_refill+0x53/0x1c0 [ 260.003956] tcp_sendmsg_locked+0x7c7/0x3400 [ 260.008393] ? tcp_sendpage+0x60/0x60 [ 260.012224] ? trace_hardirqs_on_caller+0x400/0x590 [ 260.017260] ? trace_hardirqs_on+0xd/0x10 [ 260.021428] tcp_sendmsg+0x30/0x50 [ 260.024983] inet_sendmsg+0x122/0x500 [ 260.028797] ? inet_recvmsg+0x500/0x500 [ 260.032778] sock_sendmsg+0xce/0x110 [ 260.032793] SYSC_sendto+0x206/0x310 20:34:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000004c0)={0x0, 0x0}) getresuid(&(0x7f0000000700)=0x0, &(0x7f0000000540), &(0x7f0000000580)) fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = gettid() getresuid(&(0x7f0000000640), &(0x7f0000000680)=0x0, &(0x7f00000006c0)) r7 = getgid() ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000900)={0xa, 0x8, 0x9, 0x0, r1}) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) syncfs(r1) r9 = getegid() sendmsg$unix(r1, &(0x7f00000008c0)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000140)="3d4f5daa8a5484d5adca1e1c07575de4d45b18b30a70e3f653ff885f3c9e7d46e629f24b87356ff906a844a06fbb0cbd783c1d3984d4a88f8935c925cfd32108c4b47a01fe9d7b0e117d1cf7de83e732a70f5cd58c8ed1ff5680006df7be322901caf20df975c01755f447450f74a63409b3f5cf72313e41633781b1c3ce1a", 0x7f}, {&(0x7f0000000340)="424a105b11cb2c8fbf21ab08217997f0a2c067612db16e8f6acb5b5431cf3b8435d91428749bdd995bafc7e7fe2d972abbdbeac6d2b5859c19fe86017f245028925ed5122c64cdea2074e1ffe7d6ae5aca884d97317064cefb094d954ebcb663dabddf14e3c9cf40404157bfac4ce4c4dbd94a6267334d749e04148ed5fd6b34ab75c16a468469d907ec71d16f335d8af783822585d96fcadcaa49b5a12258d03788d4501bee2c0ee38304ef49447b9343ba2c33aa", 0xb5}, {&(0x7f00000001c0)="c57f9a34bf581acc6f7b319a666debfa056be9887ea4c62cea54adac89daa701e8d26cd14e94090b26d79a91cb7093f82de1592078ac0b932f9022a72619dc6aede87d6dab81b2c045717680e74b1be992d8e3c21e246016cc04fdd167338cfc5d6e98e757ad4551efd2b4db1635f3b2b81ad098c067bfd702bdd4", 0x7b}, {&(0x7f0000000400)="85f8b48aa05c6c9b583613bede8be57a1aa36006c3b707f823199e4fe219963f992eca28b86715b062ca95d5be74024c4779c5a5104c042756cb8f3a3f94a183ed61", 0x42}], 0x4, &(0x7f0000000800)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x98, 0x80}, 0x8800) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r10 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$SIOCAX25ADDUID(r10, 0x89e1, &(0x7f0000000500)={0x3, @default, r3}) ioctl$VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 260.032807] ? SYSC_connect+0x2d0/0x2d0 [ 260.032820] ? lock_downgrade+0x6e0/0x6e0 [ 260.032842] ? wait_for_completion+0x420/0x420 [ 260.052996] ? __sb_end_write+0xc1/0x100 [ 260.057087] ? fput+0xd4/0x150 [ 260.060292] ? SyS_write+0x10b/0x180 [ 260.060312] SyS_sendto+0x40/0x50 [ 260.060323] ? SyS_getpeername+0x30/0x30 [ 260.060335] do_syscall_64+0x1e8/0x640 [ 260.060343] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.060361] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 260.060369] RIP: 0033:0x459279 20:34:33 executing program 1 (fault-call:6 fault-nth:22): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) write$selinux_context(r2, &(0x7f0000000080)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:33 executing program 4: r0 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 260.060374] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 260.060386] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 260.060392] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 260.060397] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 260.060402] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 260.060407] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) link(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl(r0, 0x1000008911, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = dup(r0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000340)={@isdn={0x22, 0x3, 0x6, 0x2, 0x8}, {&(0x7f0000000100)=""/229, 0xe5}, &(0x7f0000000200), 0x1}, 0xa0) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r3 = geteuid() getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x3, &(0x7f0000000680)=[{&(0x7f0000000480)="a362b3307e1c4810c5aa886f4a9e9a76d66850dfef9daf8301a74ebcc141abb5fd1a32598e43b85abe485042abeaae1e1cdcc47006c7cb7ebe0b83b2ce27f5e7f0028c7b3961d008cada425286ee823f1b654569dd4808dda8bbf59219675f691f2f29c18f2198f4d80bd9f56546eba759992f0af102817067a5cbec0ef327aa9381636cb42d539f5d59c91be2f219b90beb70c5f5a886a1a59162e245f02c4c2a64ac8dfb", 0xa5, 0x66}, {&(0x7f0000000540)="c22fc4772b53877a997c600e411522", 0xf, 0x3}, {&(0x7f0000000580)="6e66e3d579d151afcd55614207a358afb33c25b5bc32aac8433694bf7c06d768e833447438e6f2028033796b6081122772bf2dc8e85d888725ff90d73ed84d21192394cd15b9b9a8dc16ae497a63def5b577d1d3b1221623c880b15855614ecbf992fdb647b9af46dfdae0fb9717b171f3bd0de012255e00a4758083dd90de10b87f8c708e0b0faa0899b72f2684a30f689b6093910c8db73221da24bd45ce46ff63c3aeac412c0eac6f8e686f14f0825874ffe15d440768d8fb15303b5a3c28db6773f7a55ebd90063804155345ec84fb7b9f6e3563fbf4c148c31c96417b442ece3cb3c13a3f9596394ef12f678af41e03d3c0baba", 0xf6, 0x7}], 0x40041, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask', 0x3d, 0x8}}, {@fmask={'fmask', 0x3d, 0xffffffffffffb1f6}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x1}}, {@case_sensitive_no='case_sensitive=no'}, {@case_sensitive_no='case_sensitive=no'}, {@disable_sparse_no='disable_sparse=no'}, {@uid={'uid', 0x3d, r3}}, {@disable_sparse_no='disable_sparse=no'}], [{@audit='audit'}, {@fowner_lt={'fowner<', r4}}]}) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000900)={0x6, 0x9, 0x1, {0x1000000000000c, @pix={0x0, 0xffffffff00000001}}}) 20:34:33 executing program 4: r0 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 260.301476] FAULT_INJECTION: forcing a failure. [ 260.301476] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 260.343176] CPU: 1 PID: 18209 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 260.350343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.360146] Call Trace: [ 260.360171] dump_stack+0x138/0x19c [ 260.360192] should_fail.cold+0x10f/0x159 [ 260.360206] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 260.360222] __alloc_pages_nodemask+0x1d6/0x7a0 [ 260.360234] ? find_held_lock+0x35/0x130 [ 260.360250] ? __alloc_pages_slowpath+0x2930/0x2930 [ 260.360270] ? iov_iter_advance+0x218/0xc60 [ 260.360292] alloc_pages_current+0xec/0x1e0 [ 260.398532] skb_page_frag_refill+0x1d3/0x3e0 [ 260.403045] ? __phys_addr_symbol+0x23/0x60 [ 260.407391] sk_page_frag_refill+0x53/0x1c0 [ 260.411736] tcp_sendmsg_locked+0x7c7/0x3400 [ 260.416210] ? tcp_sendpage+0x60/0x60 [ 260.420022] ? trace_hardirqs_on_caller+0x400/0x590 [ 260.425054] ? trace_hardirqs_on+0xd/0x10 [ 260.429220] tcp_sendmsg+0x30/0x50 [ 260.429236] inet_sendmsg+0x122/0x500 [ 260.429247] ? inet_recvmsg+0x500/0x500 [ 260.429262] sock_sendmsg+0xce/0x110 [ 260.444270] SYSC_sendto+0x206/0x310 [ 260.447999] ? SYSC_connect+0x2d0/0x2d0 [ 260.451998] ? lock_downgrade+0x6e0/0x6e0 [ 260.452025] ? wait_for_completion+0x420/0x420 [ 260.452037] ? __sb_end_write+0xc1/0x100 [ 260.452052] ? fput+0xd4/0x150 [ 260.452064] ? SyS_write+0x10b/0x180 [ 260.471755] SyS_sendto+0x40/0x50 [ 260.475223] ? SyS_getpeername+0x30/0x30 [ 260.479311] do_syscall_64+0x1e8/0x640 [ 260.483207] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.488073] entry_SYSCALL_64_after_hwframe+0x42/0xb7 20:34:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x1000}, 0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 260.493266] RIP: 0033:0x459279 [ 260.496458] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 260.504173] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 260.511448] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 260.518722] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 260.525996] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 260.533273] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:34 executing program 1 (fault-call:6 fault-nth:23): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="20dca51a5e0bcfec7be0706ad0284e57943f5b91d9b4222cb1ab253d197cd855cc98b08d0e25bee458248c83a16e2000000000000000b3afe7c455") r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 260.811707] FAULT_INJECTION: forcing a failure. [ 260.811707] name failslab, interval 1, probability 0, space 0, times 0 [ 260.823063] CPU: 1 PID: 18257 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 260.830185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.839553] Call Trace: [ 260.842159] dump_stack+0x138/0x19c [ 260.842179] should_fail.cold+0x10f/0x159 [ 260.842201] should_failslab+0xdb/0x130 [ 260.842217] kmem_cache_alloc+0x47/0x780 [ 260.842231] ? lock_acquire+0x16f/0x430 20:34:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:34 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 260.842246] ? check_preemption_disabled+0x3c/0x250 [ 260.842263] skb_clone+0x129/0x320 [ 260.842277] dev_queue_xmit_nit+0x296/0x8c0 [ 260.842297] dev_hard_start_xmit+0xa7/0x8b0 [ 260.842314] ? assoc_array_gc+0x1140/0x11d0 [ 260.850090] __dev_queue_xmit+0x1d95/0x25e0 [ 260.850113] ? trace_hardirqs_on+0xd/0x10 [ 260.850125] ? __local_bh_enable_ip+0x99/0x1a0 [ 260.850140] ? netdev_pick_tx+0x300/0x300 [ 260.850152] ? find_held_lock+0x35/0x130 [ 260.883639] ? ip_finish_output+0x56d/0xc60 [ 260.900862] ? mark_held_locks+0xb1/0x100 [ 260.900881] dev_queue_xmit+0x18/0x20 [ 260.900890] ? dev_queue_xmit+0x18/0x20 [ 260.900901] ip_finish_output2+0xddc/0x14a0 [ 260.900909] ? get_info+0x560/0x560 [ 260.900923] ? ip_copy_metadata+0x9b0/0x9b0 [ 260.900937] ip_finish_output+0x56d/0xc60 [ 260.900945] ? ip_finish_output+0x56d/0xc60 [ 260.900957] ip_output+0x1e6/0x590 [ 260.900968] ? ip_mc_output+0xd40/0xd40 [ 260.900978] ? __lock_is_held+0xb6/0x140 [ 260.900989] ? check_preemption_disabled+0x3c/0x250 20:34:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x0, 0x84) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200200, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0xe303) open_by_handle_at(r2, &(0x7f0000000400)={0x1008, 0xa46f, "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"}, 0x4fe932bd296444f9) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x88, "9ef4f2faea6e5d549619218c64647a8c1178457d18e5db4c81b90cedd86df22269c9cbbdb41298cfafa5eab8242dd74d1a148c86dd55c56a5c11597bf39f01bf9aba6476cc6a7b08f35eeafa48f70213d2e530f716dec62c92e6f1ac462aa1d184f4099ea883aa09b6957c1144c2e03b303e7c5491843d0e652c25e3ca2357f79540a5780c314e4d"}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r3, 0x5, 0x10}, &(0x7f00000001c0)=0xc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 260.901000] ? ip_fragment.constprop.0+0x200/0x200 [ 260.901012] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 260.968964] ip_local_out+0x97/0x170 [ 260.972708] ip_queue_xmit+0x7d7/0x1b10 [ 260.976707] ? __tcp_v4_send_check+0x1c0/0x360 [ 260.981313] __tcp_transmit_skb+0x172c/0x2fe0 [ 260.985830] ? __tcp_select_window+0x6e0/0x6e0 [ 260.990431] ? kvm_clock_read+0x23/0x40 [ 260.994426] ? sched_clock_cpu+0x1b/0x1c0 [ 260.998587] ? tcp_small_queue_check+0x184/0x1e0 [ 261.003357] tcp_write_xmit+0x523/0x48b0 [ 261.007438] ? iov_iter_advance+0x218/0xc60 20:34:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 261.011791] tcp_push_one+0xc1/0xf0 [ 261.015451] tcp_sendmsg_locked+0x1571/0x3400 [ 261.020000] ? tcp_sendpage+0x60/0x60 [ 261.023837] ? trace_hardirqs_on_caller+0x400/0x590 [ 261.028882] ? trace_hardirqs_on+0xd/0x10 [ 261.033052] tcp_sendmsg+0x30/0x50 [ 261.036615] inet_sendmsg+0x122/0x500 [ 261.040426] ? inet_recvmsg+0x500/0x500 [ 261.044413] sock_sendmsg+0xce/0x110 [ 261.048141] SYSC_sendto+0x206/0x310 [ 261.051871] ? SYSC_connect+0x2d0/0x2d0 [ 261.055866] ? lock_downgrade+0x6e0/0x6e0 [ 261.060040] ? wait_for_completion+0x420/0x420 [ 261.064647] ? __sb_end_write+0xc1/0x100 [ 261.068741] ? fput+0xd4/0x150 [ 261.072218] ? SyS_write+0x10b/0x180 [ 261.075959] SyS_sendto+0x40/0x50 [ 261.079424] ? SyS_getpeername+0x30/0x30 [ 261.083491] do_syscall_64+0x1e8/0x640 [ 261.083501] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.083518] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 261.083527] RIP: 0033:0x459279 [ 261.083533] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 20:34:34 executing program 1 (fault-call:6 fault-nth:24): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="51652d127028a2bfb35f5ac2b12811b4701f3b8f4be543e49d8b10bb382ce90573981478fc7e99912640e9") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 261.083544] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 261.083549] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 261.083555] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 261.083561] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 261.083566] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d00", 0xe}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 261.206939] FAULT_INJECTION: forcing a failure. [ 261.206939] name failslab, interval 1, probability 0, space 0, times 0 [ 261.245546] CPU: 0 PID: 18282 Comm: syz-executor.1 Not tainted 4.14.124 #18 20:34:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1800008912, &(0x7f0000000080)='\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\b') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 261.252704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.262069] Call Trace: [ 261.264675] dump_stack+0x138/0x19c [ 261.268338] should_fail.cold+0x10f/0x159 [ 261.272504] should_failslab+0xdb/0x130 [ 261.276494] kmem_cache_alloc_node+0x287/0x780 [ 261.281092] ? tcp_established_options+0x2c5/0x420 [ 261.286049] __alloc_skb+0x9c/0x500 [ 261.289690] ? skb_scrub_packet+0x4b0/0x4b0 [ 261.294033] ? trace_hardirqs_on_caller+0x400/0x590 [ 261.299068] sk_stream_alloc_skb+0xb3/0x780 [ 261.303410] ? tcp_send_mss+0xa4/0x2f0 20:34:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000100)={0x18, 0x0, 0x4, {0xf406}}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0), 0x4) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000080)) ioctl$UI_DEV_DESTROY(r3, 0x5502) [ 261.307310] tcp_sendmsg_locked+0xf56/0x3400 [ 261.311738] ? tcp_sendpage+0x60/0x60 [ 261.315554] ? trace_hardirqs_on_caller+0x400/0x590 [ 261.320586] ? trace_hardirqs_on+0xd/0x10 [ 261.324751] tcp_sendmsg+0x30/0x50 [ 261.328301] inet_sendmsg+0x122/0x500 [ 261.332109] ? inet_recvmsg+0x500/0x500 [ 261.336096] sock_sendmsg+0xce/0x110 [ 261.339819] SYSC_sendto+0x206/0x310 [ 261.343549] ? SYSC_connect+0x2d0/0x2d0 [ 261.347538] ? lock_downgrade+0x6e0/0x6e0 [ 261.351704] ? wait_for_completion+0x420/0x420 20:34:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = dup2(r0, r0) set_thread_area(&(0x7f00000000c0)={0x3, 0xffffffffffffffff, 0x5000, 0xfffffffffffffffd, 0xb68d, 0x81, 0x100, 0x2, 0x5, 0x4c4}) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000100), 0x4) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1c12) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000c4d000/0x1000)=nil, 0x1000, 0x5, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 261.356303] ? __sb_end_write+0xc1/0x100 [ 261.360377] ? fput+0xd4/0x150 [ 261.363575] ? SyS_write+0x10b/0x180 [ 261.367331] SyS_sendto+0x40/0x50 [ 261.370793] ? SyS_getpeername+0x30/0x30 [ 261.374866] do_syscall_64+0x1e8/0x640 [ 261.378760] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.383618] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 261.388989] RIP: 0033:0x459279 [ 261.392181] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 261.399906] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 20:34:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 261.407191] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 261.414466] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 261.421743] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 261.429021] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:35 executing program 1 (fault-call:6 fault-nth:25): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:35 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = msgget(0x2, 0x200) msgctl$IPC_RMID(r2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x5, 0x6) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x0, @local, 0x80000000}}, 0x100000001}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r4, 0x1e73}, 0x8) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d00", 0xe}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0x10001) 20:34:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d00", 0xe}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:35 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 261.676771] FAULT_INJECTION: forcing a failure. [ 261.676771] name failslab, interval 1, probability 0, space 0, times 0 [ 261.764920] CPU: 1 PID: 18328 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 261.772098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.781470] Call Trace: [ 261.784080] dump_stack+0x138/0x19c [ 261.787733] should_fail.cold+0x10f/0x159 [ 261.791899] should_failslab+0xdb/0x130 [ 261.795881] kmem_cache_alloc_node_trace+0x280/0x770 [ 261.800999] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 261.801016] __kmalloc_node_track_caller+0x3d/0x80 20:34:35 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 261.801030] __kmalloc_reserve.isra.0+0x40/0xe0 [ 261.801043] __alloc_skb+0xcf/0x500 [ 261.801054] ? skb_scrub_packet+0x4b0/0x4b0 [ 261.801068] ? trace_hardirqs_on_caller+0x400/0x590 [ 261.811463] sk_stream_alloc_skb+0xb3/0x780 [ 261.811473] ? tcp_send_mss+0xa4/0x2f0 [ 261.811486] tcp_sendmsg_locked+0xf56/0x3400 [ 261.811513] ? tcp_sendpage+0x60/0x60 [ 261.811529] ? trace_hardirqs_on_caller+0x400/0x590 [ 261.845523] ? trace_hardirqs_on+0xd/0x10 [ 261.845543] tcp_sendmsg+0x30/0x50 [ 261.858266] inet_sendmsg+0x122/0x500 [ 261.862080] ? inet_recvmsg+0x500/0x500 [ 261.866065] sock_sendmsg+0xce/0x110 [ 261.866080] SYSC_sendto+0x206/0x310 [ 261.866093] ? SYSC_connect+0x2d0/0x2d0 [ 261.866114] ? lock_downgrade+0x6e0/0x6e0 [ 261.881641] ? wait_for_completion+0x420/0x420 [ 261.886241] ? __sb_end_write+0xc1/0x100 [ 261.890320] ? fput+0xd4/0x150 [ 261.893513] ? SyS_write+0x10b/0x180 [ 261.893532] SyS_sendto+0x40/0x50 [ 261.893542] ? SyS_getpeername+0x30/0x30 [ 261.893556] do_syscall_64+0x1e8/0x640 [ 261.900713] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.900733] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 261.900742] RIP: 0033:0x459279 [ 261.900747] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 261.900759] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 261.900765] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 261.900770] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 261.900776] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 20:34:35 executing program 1 (fault-call:6 fault-nth:26): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:35 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01", 0x15}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 261.900782] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = gettid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) tgkill(r1, r2, 0x1c) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa5, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xa}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x99, &(0x7f0000000140)=""/153, 0x41f00, 0x2, [], 0x0, 0xc, r3, 0x8, &(0x7f0000000200)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0xa, 0xd3d, 0x5}, 0x10}, 0x70) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 20:34:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0xffffffffffffff17, 0x20000) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000080)={{0x2, 0xf4ca}, 'port1\x00', 0x36, 0x50002, 0xae30, 0x1ff, 0x209d, 0x100000001, 0x4, 0x0, 0x4, 0x3f}) 20:34:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01", 0x15}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:35 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x0, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 262.049131] FAULT_INJECTION: forcing a failure. [ 262.049131] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 262.105981] CPU: 0 PID: 18361 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 262.113158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.122522] Call Trace: [ 262.125126] dump_stack+0x138/0x19c [ 262.125150] should_fail.cold+0x10f/0x159 [ 262.125168] __alloc_pages_nodemask+0x1d6/0x7a0 [ 262.132967] ? find_held_lock+0x35/0x130 [ 262.132982] ? __alloc_pages_slowpath+0x2930/0x2930 20:34:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 262.133001] ? iov_iter_advance+0x218/0xc60 [ 262.133018] alloc_pages_current+0xec/0x1e0 [ 262.141835] skb_page_frag_refill+0x1d3/0x3e0 [ 262.141848] ? __phys_addr_symbol+0x23/0x60 [ 262.141862] sk_page_frag_refill+0x53/0x1c0 [ 262.141874] tcp_sendmsg_locked+0x7c7/0x3400 [ 262.141902] ? tcp_sendpage+0x60/0x60 [ 262.167024] ? trace_hardirqs_on_caller+0x400/0x590 [ 262.167037] ? trace_hardirqs_on+0xd/0x10 [ 262.167055] tcp_sendmsg+0x30/0x50 [ 262.167068] inet_sendmsg+0x122/0x500 [ 262.175712] ? inet_recvmsg+0x500/0x500 20:34:35 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x0, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 262.175726] sock_sendmsg+0xce/0x110 [ 262.175739] SYSC_sendto+0x206/0x310 [ 262.175751] ? SYSC_connect+0x2d0/0x2d0 [ 262.175764] ? lock_downgrade+0x6e0/0x6e0 [ 262.184004] ? wait_for_completion+0x420/0x420 [ 262.184016] ? __sb_end_write+0xc1/0x100 [ 262.184031] ? fput+0xd4/0x150 [ 262.184042] ? SyS_write+0x10b/0x180 [ 262.193213] SyS_sendto+0x40/0x50 [ 262.193226] ? SyS_getpeername+0x30/0x30 [ 262.193240] do_syscall_64+0x1e8/0x640 [ 262.193250] ? trace_hardirqs_off_thunk+0x1a/0x1c 20:34:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x28c0) write$capi20(r1, &(0x7f00000000c0)={0x10, 0x1000, 0x1, 0x80}, 0x10) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f00000001c0)=0xfff) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000100)=0x5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) 20:34:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01", 0x15}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 262.193267] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 262.200598] RIP: 0033:0x459279 [ 262.200604] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 262.200614] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 262.200621] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 262.200627] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 262.200634] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 262.200639] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:35 executing program 1 (fault-call:6 fault-nth:27): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:35 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x0, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) epoll_wait(r2, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x6) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000", 0x18}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 262.400149] net_ratelimit: 21 callbacks suppressed [ 262.400154] protocol 88fb is buggy, dev hsr_slave_0 [ 262.410146] protocol 88fb is buggy, dev hsr_slave_0 [ 262.410196] protocol 88fb is buggy, dev hsr_slave_1 [ 262.415274] protocol 88fb is buggy, dev hsr_slave_1 20:34:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000", 0x18}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 262.463932] FAULT_INJECTION: forcing a failure. [ 262.463932] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 262.490069] CPU: 0 PID: 18392 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 262.497223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.497230] Call Trace: [ 262.497254] dump_stack+0x138/0x19c [ 262.497275] should_fail.cold+0x10f/0x159 [ 262.497293] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 262.522491] __alloc_pages_nodemask+0x1d6/0x7a0 [ 262.527190] ? find_held_lock+0x35/0x130 [ 262.531268] ? __alloc_pages_slowpath+0x2930/0x2930 [ 262.536301] ? iov_iter_advance+0x218/0xc60 [ 262.540639] alloc_pages_current+0xec/0x1e0 [ 262.544977] skb_page_frag_refill+0x1d3/0x3e0 [ 262.549484] ? __phys_addr_symbol+0x23/0x60 [ 262.549500] sk_page_frag_refill+0x53/0x1c0 [ 262.558159] tcp_sendmsg_locked+0x7c7/0x3400 [ 262.562609] ? tcp_sendpage+0x60/0x60 [ 262.562624] ? trace_hardirqs_on_caller+0x400/0x590 [ 262.562639] ? trace_hardirqs_on+0xd/0x10 [ 262.571471] tcp_sendmsg+0x30/0x50 [ 262.571486] inet_sendmsg+0x122/0x500 [ 262.571498] ? inet_recvmsg+0x500/0x500 [ 262.571511] sock_sendmsg+0xce/0x110 [ 262.571522] SYSC_sendto+0x206/0x310 [ 262.571534] ? SYSC_connect+0x2d0/0x2d0 [ 262.571547] ? lock_downgrade+0x6e0/0x6e0 [ 262.571570] ? wait_for_completion+0x420/0x420 [ 262.602647] ? __sb_end_write+0xc1/0x100 [ 262.602661] ? fput+0xd4/0x150 [ 262.602671] ? SyS_write+0x10b/0x180 [ 262.602686] SyS_sendto+0x40/0x50 [ 262.602698] ? SyS_getpeername+0x30/0x30 [ 262.602713] do_syscall_64+0x1e8/0x640 [ 262.614560] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.614583] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 262.614596] RIP: 0033:0x459279 [ 262.642916] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 262.650641] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 20:34:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000", 0x18}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:36 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0x0, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x38) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x80000000, 0x400000) 20:34:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xffffffffffffff81, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x40000000000484, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000080)={0x3, 0x2}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0xffffffffffffff4f) [ 262.657927] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 262.665211] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 262.672488] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 262.679764] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:36 executing program 1 (fault-call:6 fault-nth:28): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:36 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0x0, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0xffff, 0x208, 0x6, 0xffffffffffff2af7, 0x86b1, 0x2, 0x2, r2}, 0x20) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x200) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f010000001901", 0x1a}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:36 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0x0, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 262.936655] FAULT_INJECTION: forcing a failure. [ 262.936655] name failslab, interval 1, probability 0, space 0, times 0 [ 262.947998] CPU: 0 PID: 18439 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 262.955120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.964495] Call Trace: [ 262.967105] dump_stack+0x138/0x19c [ 262.970758] should_fail.cold+0x10f/0x159 [ 262.974929] should_failslab+0xdb/0x130 [ 262.978922] kmem_cache_alloc+0x47/0x780 [ 262.982994] ? lock_acquire+0x16f/0x430 20:34:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 262.986983] ? check_preemption_disabled+0x3c/0x250 [ 262.992029] skb_clone+0x129/0x320 [ 262.995582] dev_queue_xmit_nit+0x296/0x8c0 [ 262.999926] dev_hard_start_xmit+0xa7/0x8b0 [ 263.004265] ? assoc_array_gc+0x1140/0x11d0 [ 263.008640] __dev_queue_xmit+0x1d95/0x25e0 [ 263.012985] ? trace_hardirqs_on+0xd/0x10 [ 263.017234] ? __local_bh_enable_ip+0x99/0x1a0 [ 263.021845] ? netdev_pick_tx+0x300/0x300 [ 263.026101] ? find_held_lock+0x35/0x130 [ 263.030194] ? ip_finish_output+0x56d/0xc60 20:34:36 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 263.034544] ? mark_held_locks+0xb1/0x100 [ 263.038711] dev_queue_xmit+0x18/0x20 [ 263.042522] ? dev_queue_xmit+0x18/0x20 [ 263.046552] ip_finish_output2+0xddc/0x14a0 [ 263.050884] ? get_info+0x560/0x560 [ 263.054526] ? ip_copy_metadata+0x9b0/0x9b0 [ 263.058867] ip_finish_output+0x56d/0xc60 [ 263.063025] ? ip_finish_output+0x56d/0xc60 [ 263.067357] ip_output+0x1e6/0x590 [ 263.070904] ? ip_mc_output+0xd40/0xd40 [ 263.074886] ? __lock_is_held+0xb6/0x140 [ 263.078964] ? check_preemption_disabled+0x3c/0x250 20:34:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:36 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 263.083999] ? ip_fragment.constprop.0+0x200/0x200 [ 263.088945] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 263.094416] ip_local_out+0x97/0x170 [ 263.098150] ip_queue_xmit+0x7d7/0x1b10 [ 263.102149] ? __tcp_v4_send_check+0x1c0/0x360 [ 263.106750] __tcp_transmit_skb+0x172c/0x2fe0 [ 263.111272] ? __tcp_select_window+0x6e0/0x6e0 [ 263.115872] ? kvm_clock_read+0x23/0x40 [ 263.119878] ? sched_clock_cpu+0x1b/0x1c0 [ 263.124040] ? tcp_small_queue_check+0x184/0x1e0 [ 263.128816] tcp_write_xmit+0x523/0x48b0 [ 263.132893] ? iov_iter_advance+0x218/0xc60 [ 263.137242] tcp_push_one+0xc1/0xf0 [ 263.140880] tcp_sendmsg_locked+0x1571/0x3400 [ 263.145400] ? tcp_sendpage+0x60/0x60 [ 263.149218] ? trace_hardirqs_on_caller+0x400/0x590 [ 263.154243] ? trace_hardirqs_on+0xd/0x10 [ 263.158414] tcp_sendmsg+0x30/0x50 [ 263.161971] inet_sendmsg+0x122/0x500 [ 263.165788] ? inet_recvmsg+0x500/0x500 [ 263.169778] sock_sendmsg+0xce/0x110 [ 263.173511] SYSC_sendto+0x206/0x310 [ 263.177240] ? SYSC_connect+0x2d0/0x2d0 [ 263.182717] ? lock_downgrade+0x6e0/0x6e0 [ 263.182742] ? wait_for_completion+0x420/0x420 [ 263.182751] ? __sb_end_write+0xc1/0x100 [ 263.182764] ? fput+0xd4/0x150 [ 263.182773] ? SyS_write+0x10b/0x180 [ 263.182789] SyS_sendto+0x40/0x50 [ 263.182800] ? SyS_getpeername+0x30/0x30 [ 263.182814] do_syscall_64+0x1e8/0x640 [ 263.195611] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 263.195633] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 263.195643] RIP: 0033:0x459279 [ 263.195649] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 20:34:36 executing program 1 (fault-call:6 fault-nth:29): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:36 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 263.195660] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 263.195669] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 263.202572] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 263.202579] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 263.202584] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r0, r0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:36 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f010000001901", 0x1a}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 263.372394] FAULT_INJECTION: forcing a failure. [ 263.372394] name failslab, interval 1, probability 0, space 0, times 0 20:34:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f010000001901", 0x1a}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 263.440175] protocol 88fb is buggy, dev hsr_slave_0 [ 263.445314] protocol 88fb is buggy, dev hsr_slave_1 [ 263.476539] CPU: 0 PID: 18468 Comm: syz-executor.1 Not tainted 4.14.124 #18 20:34:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="06369d7df6a7af9acb2cd1ad58a8df0039ce8bd0e0f7aa97407989208cb35151205b43a55a850a561c49ea8ba374cd1a6737c1a9a6d8e026bfef74927151eddbf1efb32fa760fe2f7f8a63ba012787695d501f77a6429838248d50dc84d1264fb7725f9fd63e84bcbb7ea83dd59b81d64ac90639bb1a6b33cc75b00b0d76") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 263.483694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.493058] Call Trace: [ 263.495673] dump_stack+0x138/0x19c [ 263.499331] should_fail.cold+0x10f/0x159 [ 263.503515] should_failslab+0xdb/0x130 [ 263.507519] kmem_cache_alloc_node+0x287/0x780 [ 263.512124] ? tcp_established_options+0x2c5/0x420 [ 263.517075] __alloc_skb+0x9c/0x500 [ 263.520721] ? skb_scrub_packet+0x4b0/0x4b0 [ 263.525058] ? trace_hardirqs_on_caller+0x400/0x590 [ 263.530090] sk_stream_alloc_skb+0xb3/0x780 [ 263.534430] ? tcp_send_mss+0xa4/0x2f0 20:34:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 263.538332] tcp_sendmsg_locked+0xf56/0x3400 [ 263.542769] ? tcp_sendpage+0x60/0x60 [ 263.546592] ? trace_hardirqs_on_caller+0x400/0x590 [ 263.551653] ? trace_hardirqs_on+0xd/0x10 [ 263.555826] tcp_sendmsg+0x30/0x50 [ 263.559401] inet_sendmsg+0x122/0x500 [ 263.563227] ? inet_recvmsg+0x500/0x500 [ 263.567298] sock_sendmsg+0xce/0x110 [ 263.571034] SYSC_sendto+0x206/0x310 [ 263.574752] ? SYSC_connect+0x2d0/0x2d0 [ 263.578738] ? lock_downgrade+0x6e0/0x6e0 [ 263.582912] ? wait_for_completion+0x420/0x420 20:34:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x400000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000080)={0x6, 0xd272, 0xc60, 0x7}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 263.587510] ? __sb_end_write+0xc1/0x100 [ 263.591585] ? fput+0xd4/0x150 [ 263.594815] ? SyS_write+0x10b/0x180 [ 263.598547] SyS_sendto+0x40/0x50 [ 263.602026] ? SyS_getpeername+0x30/0x30 [ 263.606104] do_syscall_64+0x1e8/0x640 [ 263.609996] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 263.614860] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 263.620055] RIP: 0033:0x459279 [ 263.623342] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 263.631070] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 20:34:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 263.638359] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 263.645639] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 263.652919] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 263.660217] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 [ 263.670258] protocol 88fb is buggy, dev hsr_slave_0 [ 263.675347] protocol 88fb is buggy, dev hsr_slave_1 20:34:37 executing program 1 (fault-call:6 fault-nth:30): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:37 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x80000001, 0x800) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x6, {0x9, 0x1f, 0x8, 0x1, 0x7f, 0xfffffffffffffffc}, 0x8000, 0xc6}, 0xe) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$setflags(r1, 0x2, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40440, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 263.822621] FAULT_INJECTION: forcing a failure. [ 263.822621] name failslab, interval 1, probability 0, space 0, times 0 20:34:37 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:37 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000180)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x7, @sliced={0x3, [0x3, 0x3f, 0x93, 0x2, 0x1, 0xfc93, 0x40, 0x2, 0x10000, 0x2, 0x8, 0x6, 0x7, 0x2, 0x1f, 0x7, 0x5, 0x7fff, 0x0, 0x401, 0x8, 0x3, 0x3fba, 0xe76, 0x0, 0x6, 0x81, 0xef2, 0x6fd7, 0x0, 0x10000, 0xffff, 0x400, 0x6, 0x7fff, 0x1f, 0x100000000000, 0x1, 0x5918, 0xffffffffffffff80, 0x7, 0x1, 0x18000000000000, 0x9, 0x7, 0xfffffffffffffff9, 0x7a, 0xffffffff], 0x3d6}}) [ 263.905659] CPU: 0 PID: 18508 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 263.912830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.922211] Call Trace: [ 263.924822] dump_stack+0x138/0x19c [ 263.928478] should_fail.cold+0x10f/0x159 [ 263.932649] should_failslab+0xdb/0x130 [ 263.936646] kmem_cache_alloc_node_trace+0x280/0x770 [ 263.941765] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 263.947228] __kmalloc_node_track_caller+0x3d/0x80 [ 263.952174] __kmalloc_reserve.isra.0+0x40/0xe0 [ 263.956863] __alloc_skb+0xcf/0x500 [ 263.960498] ? skb_scrub_packet+0x4b0/0x4b0 [ 263.964832] ? trace_hardirqs_on_caller+0x400/0x590 [ 263.964848] sk_stream_alloc_skb+0xb3/0x780 [ 263.964860] ? tcp_send_mss+0xa4/0x2f0 [ 263.978109] tcp_sendmsg_locked+0xf56/0x3400 [ 263.982551] ? tcp_sendpage+0x60/0x60 [ 263.986374] ? trace_hardirqs_on_caller+0x400/0x590 [ 263.991413] ? trace_hardirqs_on+0xd/0x10 [ 263.995588] tcp_sendmsg+0x30/0x50 [ 263.999152] inet_sendmsg+0x122/0x500 20:34:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 264.002979] ? inet_recvmsg+0x500/0x500 [ 264.006967] sock_sendmsg+0xce/0x110 [ 264.010688] SYSC_sendto+0x206/0x310 [ 264.014415] ? SYSC_connect+0x2d0/0x2d0 [ 264.018403] ? lock_downgrade+0x6e0/0x6e0 [ 264.022582] ? wait_for_completion+0x420/0x420 [ 264.027194] ? __sb_end_write+0xc1/0x100 [ 264.031286] ? fput+0xd4/0x150 [ 264.034491] ? SyS_write+0x10b/0x180 [ 264.038243] SyS_sendto+0x40/0x50 [ 264.041717] ? SyS_getpeername+0x30/0x30 [ 264.041731] do_syscall_64+0x1e8/0x640 [ 264.041740] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 264.041758] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 264.041770] RIP: 0033:0x459279 [ 264.049829] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 264.070792] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 264.078075] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 264.085361] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 264.092734] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 20:34:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:37 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x99, 0x2) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000180)) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000540)=ANY=[@ANYBLOB="010400008c0000002c62cf0e19364603cce1dcc285f9862a7d073f76e43c02908ab8ac3e22b377812261fb951e01000000003f4b80eab7c6c182621c56931c53f5899bc79d92a08dc2f90ad4bd106ab18d6d2966430553724711fd28dfe7e8834cec85c6acb621b0d01e94e7cc48892658071ff15bc01c0017c7890da1e2fe76d774df27aee9a7d899aeb056d67433f61fa7e29c330acc0b2c4e79420a028f1ad13de918e651435cd20046a968fd807a33c87ada5a4eacb394fd057799aff22dd7a9222df61f3948b93b427b97a90e6d75b5bb28b79654b2b2def356f8d5f97476293c4a3a09feec6b7bf8c31c8270630aa86de75c00"/256]) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00') r3 = accept4$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in=@initdev, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000900)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000d00)={@local, @loopback, 0x0}, &(0x7f0000000d40)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003040)={'caif0\x00', 0x0}) accept4$packet(r1, &(0x7f0000003080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000030c0)=0x14, 0x800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003140)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000003240)=0xe8) accept$packet(r1, &(0x7f0000003280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000032c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000033c0)={'veth1_to_bridge\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0x3e2) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000003540)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000003640)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000003680)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@empty}}, &(0x7f0000003780)=0xe8) accept$packet(r1, &(0x7f00000037c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003800)=0x14) recvmsg$kcm(r0, &(0x7f0000006040)={&(0x7f0000003a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000005ec0)=[{&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/217, 0xd9}, {&(0x7f0000004b80)=""/238, 0xee}, {&(0x7f0000004c80)=""/200, 0xc8}, {&(0x7f0000004d80)=""/211, 0xd3}, {&(0x7f0000004e80)=""/55, 0x37}, {&(0x7f0000004ec0)=""/4096, 0x1000}], 0x7, &(0x7f0000005f40)=""/237, 0xed}, 0x40010020) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006080)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', r10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000006100)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000006200)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f000000a3c0)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0x48) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f000000a500)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f000000a600)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000000a640)={{{@in6=@ipv4={[], [], @multicast1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f000000a740)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f000000aa80)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f000000ab80)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f000000b340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9000000}, 0xc, &(0x7f000000b300)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c070000", @ANYRES16=r2, @ANYBLOB="000225bd7000fddbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="7001020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400000400003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRESOCT=r17, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000700000038000100240001006e6f7469735f696e74657a76616c00000000000000000000000800030024000100757365725f6c296e6b75700000000000000000000000000000000000170000000800030006000000040004000800060000000000000000", @ANYRES32=r5, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c00040000000504050000000100d6063f000000010000010400000008000100", @ANYRES32=r6, @ANYBLOB="c000020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000700000008000600", @ANYRES32=r7, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000008000100", @ANYRES32=r8, @ANYBLOB="380102003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001400040002000008ff07000099002c000800000040000100240001006c625f686173685f73746174730000000043000000000000000000000000000000080003000b00000008000400380e0000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040002000000080001", @ANYRES32=r11, @ANYBLOB="7400020038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000008000300030000000800040000f8ffff38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000500000008000100", @ANYRES32=r12, @ANYBLOB="7c0002003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="34020200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=r15, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000600000008000600", @ANYRES32=r17, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b75700000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400af04000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000090000008000600", @ANYRES32=r18, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r20, @ANYBLOB="08000100", @ANYRES32=r21, @ANYBLOB="44000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=r22], 0x2a}, 0x1, 0x0, 0x0, 0x7b8c34696a91a91}, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x20040, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0xfffffffffffffffa, 0x9, 0x1, {0x1, @pix_mp={0x0, 0x8000000000000, 0x0, 0x6, 0x1, [{0xfffffffffffffff7, 0x3}, {0x7, 0x251}, {0x78bf, 0x3}, {0x5, 0x6}, {0x0, 0x400}, {0x1, 0xa4}, {0x8001, 0xbd5c026}, {0x9, 0x4}], 0x4, 0x5, 0x2, 0x3}}}) [ 264.100023] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 [ 264.110141] protocol 88fb is buggy, dev hsr_slave_0 [ 264.115262] protocol 88fb is buggy, dev hsr_slave_1 20:34:37 executing program 1 (fault-call:6 fault-nth:31): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:37 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x400000) write$FUSE_STATFS(r1, &(0x7f0000000080)={0x60, 0xfffffffffffffff5, 0x7, {{0xffffffffffffffff, 0x260, 0x9, 0x1f, 0x0, 0x1800000000000, 0x3f, 0x5}}}, 0x60) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x0, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="2f68e03a00000072448ed0") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x7f}}, 0x18) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0xff, 0x2, [], &(0x7f0000000000)=0x8}) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x4, 0x0, "4bf51863190c96daeea3083ff5e6f6ca9c74cedca6dfc150298bb275e55776c9a2c03c6dd90cc1e421ee83426d5b05f385b56a221d4845b99e70abe67d6032ef8400efca48905d6d027e5f54a18751b6"}, 0xd8) 20:34:37 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) [ 264.330252] FAULT_INJECTION: forcing a failure. [ 264.330252] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:34:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x0, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 264.433142] CPU: 1 PID: 18557 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 264.440315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.449776] Call Trace: [ 264.452388] dump_stack+0x138/0x19c [ 264.456148] should_fail.cold+0x10f/0x159 [ 264.460335] __alloc_pages_nodemask+0x1d6/0x7a0 [ 264.465033] ? find_held_lock+0x35/0x130 [ 264.469113] ? __alloc_pages_slowpath+0x2930/0x2930 [ 264.474149] ? iov_iter_advance+0x218/0xc60 [ 264.478491] alloc_pages_current+0xec/0x1e0 [ 264.482836] skb_page_frag_refill+0x1d3/0x3e0 [ 264.487344] ? __phys_addr_symbol+0x23/0x60 [ 264.491694] sk_page_frag_refill+0x53/0x1c0 [ 264.496036] tcp_sendmsg_locked+0x7c7/0x3400 [ 264.500488] ? tcp_sendpage+0x60/0x60 [ 264.504303] ? trace_hardirqs_on_caller+0x400/0x590 [ 264.509379] ? trace_hardirqs_on+0xd/0x10 [ 264.513557] tcp_sendmsg+0x30/0x50 [ 264.517123] inet_sendmsg+0x122/0x500 [ 264.520983] ? inet_recvmsg+0x500/0x500 [ 264.524978] sock_sendmsg+0xce/0x110 [ 264.528731] SYSC_sendto+0x206/0x310 20:34:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)='\x00'/11) ptrace$getsig(0x4202, 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="061381f7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000180)=0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0xbe49740, 0x1, 0x1, 0x4}, 0x8) 20:34:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 264.532462] ? SYSC_connect+0x2d0/0x2d0 [ 264.536455] ? lock_downgrade+0x6e0/0x6e0 [ 264.540619] ? wait_for_completion+0x420/0x420 [ 264.545215] ? __sb_end_write+0xc1/0x100 [ 264.549287] ? fput+0xd4/0x150 [ 264.552490] ? SyS_write+0x10b/0x180 [ 264.556220] SyS_sendto+0x40/0x50 [ 264.559691] ? SyS_getpeername+0x30/0x30 [ 264.563769] do_syscall_64+0x1e8/0x640 [ 264.567668] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 264.572540] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 264.577752] RIP: 0033:0x459279 20:34:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x0, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 264.580950] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 264.588679] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 264.595978] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 264.603275] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 264.610576] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 264.617869] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:38 executing program 1 (fault-call:6 fault-nth:32): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:38 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 20:34:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3f, &(0x7f0000000040)="11dc25055e0acfec7bce70") r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x505040, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)=0x0) write$FUSE_LK(r1, &(0x7f0000000100)={0x28, 0xfffffffffffffff5, 0x4, {{0x9, 0x200000000000003, 0x0, r3}}}, 0x28) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x38}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000200)={r5, 0x2}, &(0x7f0000000340)=0x8) 20:34:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0x0, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:38 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0x0, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:38 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 20:34:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x10, 0x80000) write$FUSE_STATFS(r1, &(0x7f0000000340)={0x60, 0x0, 0x6, {{0x2000000000, 0x56, 0x68c, 0xb5, 0x1, 0x7fff, 0xfffffffffffffffc, 0x100000001}}}, 0x60) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000540)={0x6, 0x9, 0x2, {0xd, @vbi={0x0, 0x8001, 0x0, 0x7747575a, [0x200, 0x7], [0x40, 0x2], 0x1}}}) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000200)={0x46, &(0x7f00000003c0)="8f2e9a140da2375789d13d704f6e6ab64c26693e5b28eebdd102dcb88d6a0f9098cca4fc4f842b2043757d4ef12a3ed9b58d678d51d8e81fce408da447d19185bdece3424b5d"}) 20:34:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100)=0x7fff, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0xd30, @mcast1, 0x74aa}, 0x1c) socket$inet6_sctp(0xa, 0x21, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f00000000c0)={0x4}, 0x8, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x0) [ 264.994088] FAULT_INJECTION: forcing a failure. [ 264.994088] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:34:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) [ 265.074161] CPU: 1 PID: 18604 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 265.081320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.090679] Call Trace: [ 265.093290] dump_stack+0x138/0x19c [ 265.093314] should_fail.cold+0x10f/0x159 [ 265.101094] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 265.106556] __alloc_pages_nodemask+0x1d6/0x7a0 [ 265.111255] ? find_held_lock+0x35/0x130 [ 265.115328] ? __alloc_pages_slowpath+0x2930/0x2930 [ 265.120361] ? iov_iter_advance+0x218/0xc60 [ 265.120378] alloc_pages_current+0xec/0x1e0 [ 265.120395] skb_page_frag_refill+0x1d3/0x3e0 [ 265.120405] ? __phys_addr_symbol+0x23/0x60 [ 265.120418] sk_page_frag_refill+0x53/0x1c0 [ 265.120431] tcp_sendmsg_locked+0x7c7/0x3400 [ 265.120457] ? tcp_sendpage+0x60/0x60 [ 265.120470] ? trace_hardirqs_on_caller+0x400/0x590 [ 265.120480] ? trace_hardirqs_on+0xd/0x10 [ 265.120495] tcp_sendmsg+0x30/0x50 [ 265.129144] inet_sendmsg+0x122/0x500 [ 265.129155] ? inet_recvmsg+0x500/0x500 [ 265.129169] sock_sendmsg+0xce/0x110 [ 265.129183] SYSC_sendto+0x206/0x310 [ 265.179808] ? SYSC_connect+0x2d0/0x2d0 [ 265.183788] ? lock_downgrade+0x6e0/0x6e0 [ 265.187969] ? wait_for_completion+0x420/0x420 [ 265.192566] ? __sb_end_write+0xc1/0x100 [ 265.196654] ? fput+0xd4/0x150 [ 265.199881] ? SyS_write+0x10b/0x180 [ 265.203715] SyS_sendto+0x40/0x50 [ 265.207187] ? SyS_getpeername+0x30/0x30 [ 265.221362] do_syscall_64+0x1e8/0x640 [ 265.221374] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.221392] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 265.221400] RIP: 0033:0x459279 [ 265.221405] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 265.221415] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 265.221421] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 265.221427] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 265.221432] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 265.221438] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:39 executing program 1 (fault-call:6 fault-nth:33): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0x0, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:39 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) socketpair(0xf, 0xd52ec7771c52e5c3, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x7, 0xff, 0xc9, 0xffffffffffff59c9, 0x2}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000100)={r3, @in={{0x2, 0x4e22, @local}}, 0x101, 0x0, 0x23c8, 0x0, 0x10001}, &(0x7f00000001c0)=0x98) 20:34:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) 20:34:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 265.596300] FAULT_INJECTION: forcing a failure. [ 265.596300] name failslab, interval 1, probability 0, space 0, times 0 [ 265.607653] CPU: 0 PID: 18630 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 265.614830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.624203] Call Trace: [ 265.626809] dump_stack+0x138/0x19c [ 265.630453] should_fail.cold+0x10f/0x159 [ 265.634619] should_failslab+0xdb/0x130 [ 265.638605] kmem_cache_alloc+0x47/0x780 [ 265.642675] ? lock_acquire+0x16f/0x430 [ 265.646666] ? check_preemption_disabled+0x3c/0x250 [ 265.651700] skb_clone+0x129/0x320 [ 265.651714] dev_queue_xmit_nit+0x296/0x8c0 [ 265.651729] dev_hard_start_xmit+0xa7/0x8b0 [ 265.651741] ? assoc_array_gc+0x1140/0x11d0 [ 265.651753] __dev_queue_xmit+0x1d95/0x25e0 [ 265.651763] ? trace_hardirqs_on+0xd/0x10 [ 265.651774] ? __local_bh_enable_ip+0x99/0x1a0 [ 265.651788] ? netdev_pick_tx+0x300/0x300 [ 265.651798] ? find_held_lock+0x35/0x130 [ 265.651812] ? ip_finish_output+0x56d/0xc60 [ 265.693962] ? mark_held_locks+0xb1/0x100 [ 265.698140] dev_queue_xmit+0x18/0x20 [ 265.701948] ? dev_queue_xmit+0x18/0x20 [ 265.705933] ip_finish_output2+0xddc/0x14a0 [ 265.710268] ? get_info+0x560/0x560 [ 265.710283] ? ip_copy_metadata+0x9b0/0x9b0 [ 265.710297] ip_finish_output+0x56d/0xc60 [ 265.710305] ? ip_finish_output+0x56d/0xc60 [ 265.710317] ip_output+0x1e6/0x590 [ 265.730285] ? ip_mc_output+0xd40/0xd40 [ 265.734271] ? __lock_is_held+0xb6/0x140 [ 265.738347] ? check_preemption_disabled+0x3c/0x250 [ 265.743381] ? ip_fragment.constprop.0+0x200/0x200 [ 265.748331] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 265.753792] ip_local_out+0x97/0x170 [ 265.757511] ip_queue_xmit+0x7d7/0x1b10 [ 265.761491] ? __tcp_v4_send_check+0x1c0/0x360 [ 265.766094] __tcp_transmit_skb+0x172c/0x2fe0 [ 265.770626] ? __tcp_select_window+0x6e0/0x6e0 [ 265.770641] ? kvm_clock_read+0x23/0x40 [ 265.770659] ? sched_clock_cpu+0x1b/0x1c0 [ 265.779237] ? tcp_small_queue_check+0x184/0x1e0 [ 265.779251] tcp_write_xmit+0x523/0x48b0 [ 265.779267] ? iov_iter_advance+0x218/0xc60 [ 265.779288] tcp_push_one+0xc1/0xf0 [ 265.800207] tcp_sendmsg_locked+0x1571/0x3400 [ 265.804740] ? tcp_sendpage+0x60/0x60 [ 265.808578] ? trace_hardirqs_on_caller+0x400/0x590 [ 265.813602] ? trace_hardirqs_on+0xd/0x10 [ 265.817773] tcp_sendmsg+0x30/0x50 [ 265.821328] inet_sendmsg+0x122/0x500 [ 265.825144] ? inet_recvmsg+0x500/0x500 [ 265.829148] sock_sendmsg+0xce/0x110 [ 265.832896] SYSC_sendto+0x206/0x310 [ 265.836633] ? SYSC_connect+0x2d0/0x2d0 [ 265.840651] ? lock_downgrade+0x6e0/0x6e0 20:34:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x2, &(0x7f00000000c0)="11dc86055e0b07ec7be070") syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff86, 0x3}]}}, @icmp=@timestamp_reply}}}}, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) 20:34:39 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x40, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x9b0000, 0x5, 0x5, [], &(0x7f0000000180)={0x574a482f91a9dd1c, 0x6, [], @p_u32=&(0x7f0000000140)=0x10000}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000280)=0x40) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f00000000c0)={0x5, "1044fa26c94b7814c30d2dc436a8094f1d6b514f4462195eee5bbc27420f8c24"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000003c0), 0x4) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000340)=0x3, &(0x7f0000000380)=0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip_vti0\x00', 0x4}, 0x18) get_thread_area(&(0x7f00000002c0)={0x5, 0x20000000, 0x0, 0x1, 0x3, 0x9f3e, 0x1000, 0x8, 0xcc82, 0xff}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000300)=0x1, 0x4) [ 265.844837] ? wait_for_completion+0x420/0x420 [ 265.849455] ? __sb_end_write+0xc1/0x100 [ 265.853543] ? fput+0xd4/0x150 [ 265.856744] ? SyS_write+0x10b/0x180 [ 265.860484] SyS_sendto+0x40/0x50 [ 265.863951] ? SyS_getpeername+0x30/0x30 [ 265.868030] do_syscall_64+0x1e8/0x640 [ 265.871928] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.872079] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip_vti0, syncid = 4, id = 0 [ 265.876791] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 265.876802] RIP: 0033:0x459279 20:34:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x0) [ 265.876808] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 265.876820] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 265.876827] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 265.876833] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 265.876840] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 265.876846] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:39 executing program 1 (fault-call:6 fault-nth:34): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:39 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, r1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7fff, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x7, 0x8, 0x2004, 0x7, 0x7, 0x7, 0x1}}) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x0) 20:34:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x4000001, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x1) close(r2) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000100)=0x5833, 0x4) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f00000000c0)={0x0, 0x1}) 20:34:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 266.209053] FAULT_INJECTION: forcing a failure. [ 266.209053] name failslab, interval 1, probability 0, space 0, times 0 [ 266.226917] CPU: 0 PID: 18673 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 266.234065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.243420] Call Trace: [ 266.243446] dump_stack+0x138/0x19c [ 266.249655] should_fail.cold+0x10f/0x159 [ 266.249673] should_failslab+0xdb/0x130 [ 266.249685] kmem_cache_alloc_node+0x287/0x780 [ 266.249700] ? tcp_established_options+0x2c5/0x420 [ 266.267350] __alloc_skb+0x9c/0x500 [ 266.271009] ? skb_scrub_packet+0x4b0/0x4b0 [ 266.275359] ? trace_hardirqs_on_caller+0x400/0x590 [ 266.280405] sk_stream_alloc_skb+0xb3/0x780 [ 266.284744] ? tcp_send_mss+0xa4/0x2f0 [ 266.290382] tcp_sendmsg_locked+0xf56/0x3400 [ 266.294832] ? tcp_sendpage+0x60/0x60 [ 266.298653] ? trace_hardirqs_on_caller+0x400/0x590 [ 266.303691] ? trace_hardirqs_on+0xd/0x10 [ 266.307864] tcp_sendmsg+0x30/0x50 [ 266.311428] inet_sendmsg+0x122/0x500 [ 266.315251] ? inet_recvmsg+0x500/0x500 [ 266.319266] sock_sendmsg+0xce/0x110 [ 266.322993] SYSC_sendto+0x206/0x310 [ 266.326718] ? SYSC_connect+0x2d0/0x2d0 [ 266.330756] ? lock_downgrade+0x6e0/0x6e0 [ 266.330780] ? wait_for_completion+0x420/0x420 [ 266.330789] ? __sb_end_write+0xc1/0x100 [ 266.330803] ? fput+0xd4/0x150 [ 266.330813] ? SyS_write+0x10b/0x180 [ 266.330828] SyS_sendto+0x40/0x50 [ 266.330841] ? SyS_getpeername+0x30/0x30 [ 266.358327] do_syscall_64+0x1e8/0x640 [ 266.362241] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.367117] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 266.372332] RIP: 0033:0x459279 [ 266.375530] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 266.383254] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 266.390539] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 266.397819] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 20:34:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x3, 0x2000) recvfrom$rose(r1, &(0x7f0000000100)=""/33, 0x21, 0x1, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x80, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x1010, r0, 0x0) 20:34:40 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 266.405102] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 266.412379] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:40 executing program 1 (fault-call:6 fault-nth:35): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x0) 20:34:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000100)=r2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) [ 266.541830] FAULT_INJECTION: forcing a failure. [ 266.541830] name failslab, interval 1, probability 0, space 0, times 0 [ 266.571471] CPU: 0 PID: 18703 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 266.578619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.587994] Call Trace: [ 266.588038] dump_stack+0x138/0x19c [ 266.588057] should_fail.cold+0x10f/0x159 [ 266.588077] should_failslab+0xdb/0x130 [ 266.588093] kmem_cache_alloc_node_trace+0x280/0x770 [ 266.588109] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 266.588126] __kmalloc_node_track_caller+0x3d/0x80 [ 266.588140] __kmalloc_reserve.isra.0+0x40/0xe0 [ 266.588155] __alloc_skb+0xcf/0x500 [ 266.588168] ? skb_scrub_packet+0x4b0/0x4b0 [ 266.588180] ? trace_hardirqs_on_caller+0x400/0x590 [ 266.588206] sk_stream_alloc_skb+0xb3/0x780 [ 266.588218] ? tcp_send_mss+0xa4/0x2f0 [ 266.588236] tcp_sendmsg_locked+0xf56/0x3400 [ 266.588268] ? tcp_sendpage+0x60/0x60 [ 266.588280] ? trace_hardirqs_on_caller+0x400/0x590 [ 266.588292] ? trace_hardirqs_on+0xd/0x10 [ 266.588309] tcp_sendmsg+0x30/0x50 [ 266.588322] inet_sendmsg+0x122/0x500 [ 266.588335] ? inet_recvmsg+0x500/0x500 [ 266.626870] sock_sendmsg+0xce/0x110 [ 266.676963] SYSC_sendto+0x206/0x310 [ 266.680708] ? SYSC_connect+0x2d0/0x2d0 [ 266.684703] ? lock_downgrade+0x6e0/0x6e0 [ 266.688892] ? wait_for_completion+0x420/0x420 [ 266.693487] ? __sb_end_write+0xc1/0x100 [ 266.697575] ? fput+0xd4/0x150 [ 266.700784] ? SyS_write+0x10b/0x180 [ 266.704514] SyS_sendto+0x40/0x50 [ 266.707980] ? SyS_getpeername+0x30/0x30 [ 266.712058] do_syscall_64+0x1e8/0x640 [ 266.715955] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.720843] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 266.726047] RIP: 0033:0x459279 [ 266.729236] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 20:34:40 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x2900, 0x0) write$P9_RCLUNK(r2, &(0x7f0000000100)={0x7, 0x79, 0x1}, 0x7) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x31, 0xffffffffffffffff, 0xfffffffffffffffc) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$P9_RMKDIR(r3, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x2, 0x1, 0x7}}, 0x14) 20:34:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) 20:34:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) 20:34:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:40 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) [ 266.736959] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 266.744250] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 266.751538] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 266.758824] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 266.766113] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:40 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x2b, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x4, 0x5}, 0x0, 0x0, &(0x7f0000000300)={0x5, 0x9, 0x5}, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x3}}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) write$smack_current(r0, &(0x7f0000001800)='\x00', 0x1) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @pic={0x3f000000, 0x6, 0x6, 0x1, 0x7fff, 0x3, 0x258d5df3, 0x1, 0xfa3, 0x0, 0x401, 0x4, 0x5ac93709, 0x6, 0xffffffff, 0xfffffffffffffff7}}) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000640)={0x0, 0x9, 0x7d256ea2b7e61e2e, {0xb, @win={{0x1f, 0x8, 0x6, 0x8}, 0x7, 0x6, &(0x7f0000000200)={{0x5, 0x6, 0x8, 0x7f}, &(0x7f00000001c0)={{0x7, 0x200, 0x2, 0x8249}, &(0x7f0000000000)={{0x6, 0x8a96703, 0x7, 0x100}}}}, 0x6, &(0x7f0000000440)="09d4be9e539b2098d9ea5e5b267504b7a92b737fb578bd2f0b86ff545ca33db03dc154ccf47c884953fd5fbc832d906e9d7997ca2ff03c58d1cbe2775eba7b3405d92da49a0e425e44c202bde6f50a919ec110e5d24cb28ab689e0c4f5435d2e9abc3450d87c168af78c657a6194cc8cd2eca0ce85cd9c1be26d1dae1bda281c3fc07c52a6d0c70fc7d9382024ba10115e6f7a723dd8b0866c43c67788aae6146b98e81e29ebe25e69178002230ce708513f02ef7799f924b96672b1f25a1cb02bc761d03014b849957a3bce12c5209f1594bc2d2aadc38780484de2b257b98a2a", 0xfffffffffffffffb}}}) clone(0x8000, &(0x7f0000000740)="1457c8659420a247476d9145329dde1c9178fa15200f333306306a3da3a839214ed57ad848fbda181b0467f1f37bea65e80cf8f41967cd6e69b950ea5c6b41422b2de4b3511d6281e1aa44061a010d77f1dfbd66d01b280ad87256b15243166488798ad5b7d151c9290bc28c1631abfeb6db29939e390c42a9295bb7728072cedf522e9dc0af436ad8db6b541808abcfd3938f48c5a9729b60878df31ff7637ec3d2bfb664", &(0x7f0000000400), &(0x7f0000000600), &(0x7f0000000800)="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") 20:34:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @dev, @default, 0x0, [@netrom, @default, @remote, @default, @default, @null]}, &(0x7f0000000080)=0x40, 0x80800) 20:34:40 executing program 1 (fault-call:6 fault-nth:36): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 20:34:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:40 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x0, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 266.983361] FAULT_INJECTION: forcing a failure. [ 266.983361] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:34:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000080)={&(0x7f00002cd000/0x4000)=nil, 0x3, 0x7, 0x20, &(0x7f0000708000/0x1000)=nil, 0xe0c}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 267.062584] CPU: 0 PID: 18739 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 267.069746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.079119] Call Trace: [ 267.081728] dump_stack+0x138/0x19c [ 267.081748] should_fail.cold+0x10f/0x159 [ 267.081768] __alloc_pages_nodemask+0x1d6/0x7a0 [ 267.094223] ? find_held_lock+0x35/0x130 [ 267.094239] ? __alloc_pages_slowpath+0x2930/0x2930 [ 267.094258] ? iov_iter_advance+0x218/0xc60 [ 267.094275] alloc_pages_current+0xec/0x1e0 [ 267.094291] skb_page_frag_refill+0x1d3/0x3e0 [ 267.116523] ? __phys_addr_symbol+0x23/0x60 [ 267.120897] sk_page_frag_refill+0x53/0x1c0 [ 267.125237] tcp_sendmsg_locked+0x7c7/0x3400 [ 267.125270] ? tcp_sendpage+0x60/0x60 [ 267.125285] ? trace_hardirqs_on_caller+0x400/0x590 [ 267.125296] ? trace_hardirqs_on+0xd/0x10 [ 267.125310] tcp_sendmsg+0x30/0x50 [ 267.138557] inet_sendmsg+0x122/0x500 [ 267.150063] ? inet_recvmsg+0x500/0x500 [ 267.154196] sock_sendmsg+0xce/0x110 [ 267.158199] SYSC_sendto+0x206/0x310 [ 267.161938] ? SYSC_connect+0x2d0/0x2d0 [ 267.165937] ? lock_downgrade+0x6e0/0x6e0 [ 267.170121] ? wait_for_completion+0x420/0x420 [ 267.174728] ? __sb_end_write+0xc1/0x100 [ 267.180272] ? fput+0xd4/0x150 [ 267.183485] ? SyS_write+0x10b/0x180 [ 267.187228] SyS_sendto+0x40/0x50 [ 267.190693] ? SyS_getpeername+0x30/0x30 [ 267.194770] do_syscall_64+0x1e8/0x640 [ 267.198670] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.198692] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 267.208741] RIP: 0033:0x459279 20:34:40 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x7, 0x4}) 20:34:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 20:34:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x9, 0x10000) write$binfmt_elf32(r0, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x10001, 0x7, 0x8, 0x5, 0x8, 0x3, 0x7, 0x5, 0x2ec, 0x38, 0x13b, 0x8, 0x2, 0x20, 0x1, 0x200, 0x0, 0x80000001}, [{0x5, 0xffffffff, 0x1, 0x7, 0x1, 0x400, 0x3, 0x3}], "ed8a70ffaeb2fc47848a3583", [[], [], [], [], [], [], [], [], []]}, 0x964) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000000c0)={0x7, 0x0, 'client1\x00', 0x4, "810ccc03a08362ac", "830d62b67e3ebb30994d234a99af7b6abefebff5df0571f619316eafd593ece8", 0x9, 0x3}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 20:34:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 267.211942] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 267.219696] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 267.226977] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 267.226984] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 267.226990] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 267.226995] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:40 executing program 1 (fault-call:6 fault-nth:37): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:40 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x0, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 20:34:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000100)=0x6c79) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) ioprio_set$pid(0x2, r2, 0x81) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000000)=0x1) 20:34:40 executing program 3: r0 = memfd_create(&(0x7f0000000140)='/selinux/policy\x00', 0x2) mmap(&(0x7f000086e000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x101, 0x1, 0x9, 0xff, 0x7f, 0x7fffffff, 0x2, 0x800, 0x3f, 0x800, 0x9, 0x2, 0x3, 0x200, 0x9, 0x10000], 0x10000, 0x30081}) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x100, 0x0) pwritev(r3, &(0x7f0000000580)=[{&(0x7f00000001c0)="c920eb3d0d90f140d61fa81ce5425a89bfa56967799183fdc25a76a608b2afff40fe5b76fc96e212633089f9c96f4267c8d6a48d4d995de586829e04002e5b6f7abe8aca8228f63302ce5898c5a6be025a3b819bb3f7e9270579918503ba47af0f1f3002770e95fbd21c68006722c82b8873097d55ccdc7437dcd109bc5db05a63f9655b444198ef3338bc22ff775ee3f35036d41106f067a71b863d90a574102e82c2fc771c32ee51416308199b50ed30db30bb42c8a8c7bbc915b92791c5ed3e1db3928076d91eaf8380322f58c8f5c7f0dce53c198a6deedaedf22d66ca5ba07fedb147d54ae495bcf362d0170e0d8a03", 0xf2}, {&(0x7f00000002c0)="cbb9be4242", 0x5}, {&(0x7f0000000300)}, {&(0x7f0000000340)="883e647a4925ad1726887f242fd58d1c94faf7024683c79f6c45bf", 0x1b}, {&(0x7f0000000400)="c34ad08c39978da89d27578f4252076563b10360fe00abe9aaafb21dd1c7243debe9f0e4596618a035569b161a52e3e1cb3e07b3371b746cc984a01ce35d6817d0f27de8a610bb5d0a00ce711696c4df61b28d2a6fa82d0d69ebb59887309550600a290122efc9c01c250ee8e9e87741154c60fe4910d45025780d47254d709472f20b17636ac4fcf11b38505bf807be556b0a16f29ac5cb703cd73b30343e73904913a9232a509887dfb16a3f9fedc30a42742a57d30e45d5e0fd4b39611593567c43ed3b553678daa7c40c3187fec5c4a02e19f14ddd71823dcd6499f6fb2109ba1bc8", 0xe4}, {&(0x7f0000000500)="dad90d26cdf72ab0ea256a373ed382cf78a0c5da0ed1687e9cd85b094debccd93a3adc079fa677a33a635093295ed0b7b33c33e268388f71be6eb901cdc0301c0ba5df8d154f050d4d7549293bda7fb44fbced456a11907c82d4955ff3f145ab65ac", 0x62}], 0x6, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x1, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 20:34:41 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x0, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 267.461415] FAULT_INJECTION: forcing a failure. [ 267.461415] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 267.492495] CPU: 0 PID: 18785 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 267.499645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.509005] Call Trace: [ 267.511609] dump_stack+0x138/0x19c [ 267.515253] should_fail.cold+0x10f/0x159 [ 267.519409] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 267.524872] __alloc_pages_nodemask+0x1d6/0x7a0 [ 267.529556] ? find_held_lock+0x35/0x130 [ 267.533671] ? __alloc_pages_slowpath+0x2930/0x2930 [ 267.538704] ? iov_iter_advance+0x218/0xc60 [ 267.543047] alloc_pages_current+0xec/0x1e0 [ 267.547386] skb_page_frag_refill+0x1d3/0x3e0 [ 267.551901] ? __phys_addr_symbol+0x23/0x60 [ 267.556281] sk_page_frag_refill+0x53/0x1c0 20:34:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") pipe2(&(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/vcs\x00', 0x80602, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001700)='/selinux/mls\x00', 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) sendmsg$nfc_llcp(r3, &(0x7f0000001640)={&(0x7f00000000c0)={0x27, 0x1, 0x0, 0x3, 0x6, 0x2, "2b1c2bdcf3143f4c377dd55f673ba3b81406639c1d01995a48bbb788019081d918cceb332e74ef4a7825f2929853ab4c33fcfb1e9cf6cb418f6c29f0a25642", 0xd}, 0x60, &(0x7f0000001580)=[{&(0x7f0000000140)="f741b5ff7e12587d71b221679448320e46721b9ce2b871a57aee53d1b840a689d1521646a38f2fea8f69c78beec49b132643554ecc9f65cd3d8547bf0094d8341b7ee7bb96e2760d28223bce45056ecb0dc40c89fd5d2c524830568db7f108e74d59bb6b32", 0x65}, {&(0x7f0000000000)="16bdb8d0c1820e996ab95022952061abbdc3457048623d46bb756a859fc174ec77ce6832f8", 0x25}, {&(0x7f0000000340)="d6de38b1e3b5d4b20ee2bc91ea1e0dfc6a4bdc08cb00f591f6199122d5250ca2a05bdf47fdea9302c4380abfed4432da3836a8297be8d356492e05b6103eb353ee36dfbe8d7d403555cbc0f7ce7265859f93fd44cf4f954b28a17697a01b353f10270b0d8694178b7cb8f32e5f331d1eadf1d9297f6bfd83933376712ab5785e71e713d95a4af6b0714c651210a151fdf5e376369bc2749e171c2087c15c0e572be972bf09d4636d14bcd27393dcc5962cbf881c5677fc18dbb9894a496b59a356e1ccd5343ed2bc43ffa4d237a85c6b8f4edb425c22d988fc4e527ee4a145dce988d8e13407922f3eb321037ec88ade1c70ffb25bce2c4f362ec2f32345aac2d0f1f8a56c2528f811d0d70da6d956a78d5fa7d19851096061f57020b4b2207a0ede407bbdb8062db67df40959c4319e3973b78990973f78ee91b826e4d3cf2cc6bea913e0dfdd95f278873a665075cc871c0b32dbc14d67c14c69bbb9302d36f7e9603e4481403ee631462df46d28a437b771d36cfb9aa56fe232cd79b4ce3d328abbf664aa88295f8747b6bd62324dbdd822b6916f51594c8f4eff6c595d0985f673f70fb38f5fd2469010d13a8200eac33c1d0b3dd15e8cb0b29db42249ef86cf16cabde1ff378e15a662546dd051e50be04be78dbb446e6567391a69b6a3ddabeabefbcec853764f1f0abf8b2b162fffce7c7064f12198053e10c819dcb02171bfcc52c19b69d57deec387fb79c540b8ac8f87e233501a4d9f1d1315a4646c9ae8a52ec4a35291b8822712bd9a6ed4c94972800ade1ceb6e4eb68c685d9b578a954ca9f243fd3b34020188221a8aa1314348d555cb54635aaa80f3793e4caabfceeee8b0745b4a7ddd54d9c62c9782d4f22b3e3912365777541c530110c80016fe6fbd00fe5edd79a21f12ab8e0674dbb437de3800d158643d57f571b521839d96af34d2a4a6250c861c71d2defd9d833b4347a5ffb70149dd302b07799228f5d1c2b122c94e1780df11d1d241f6e05ff89536ba65936a0486d118cccb4238f8e43b95dd3d2d91d47777da6c67ac8753e185806f6ddf6f97d7e167cde356ffa1bfd851d4d206dd6a79d1ec8eaf0970aa8e16434eda77225ec8382fe19fcfa70d8ee1cd599f7750be20d6c56f8034b248dd45c7074ca0a1e33666c8579a83f6adab7e7a123a1ccf0c71cd7f1646790c573cf11bd641792cfe28254632e5ea7c9ad6b06efd4ddd253b6851594921cbab5190663ff210d550ba9e9207fa413a75c250afe44467c9b44c80ade084a04a3cb8a08e06fd78edef95a086f2e2d855c51dee9416bccef349df9fa4a86a3d3d3e8ecf7271813a66f28ec83f4d9e08d6e7fdc180c487e4e5e94777d19d53abb0499ac93ebe4cc838304a4e58c6a00f74819c555d40bee4c41ab1bb43334b1a891a5baf76aae6378abcdfd4e3d13876eda3fb4bf1390fcf4025ffa7a81be9cecd1a3cbeca1522325fb68f082df4357d36d886744bf84386688cc9c11ca5ff3284db8859766f899d0edcb7f73a407c135edf9d06d8148f5ac2efc1eef5f2f36ec983c5291ce36b34d2220e1c3ae65cc668ebcb238eb2b63f17f71bc2af21bff825a329295e93a14e672bc4587b67fdae8e6693f7bf2ae344a28dd2e1b050a1691604bf35d1bac260523702030c163d20f8d4d10449804afbb421f29628a90c6d79860966c3eae210314ef45f931ee6b6e7fd0c7db722e5dd84e4d0e2a2067a358aabd929ffb9d7be3c5c3d63cad3ae1cacc74809863ebcaba5b2d269600454a7834f35d3349641903c295809b0b5e96c9e26b10be4494f8c5d9742fb45b5b0351370df3e939738c7d089022fd3af957cf7c3ecfe70edde704adf96a1daff352c5e95d11cab065dd7f16d139adae970416b7dc0c3ee54acb62ee2532fd2a7a8289ab1c1238748816eca5ac7a256c3d6496d6b429d7af0b571113d9be009c89665371279e267dd8d2e6276bf53f191c18fa033320af7b732189f264b9b1eebe73261d643d9bec67683e686c439aa08eb2560c3b03eafe3f4df305ea9cf82235cb72d4f10c21f1fc2c427b24917dd5b8ef7e9145cb9d4c137c0366db746b8dd3fb162398e72bcaa33bb2d3e8263ea9d48b5ab4dfb880d4320a17288ddeb434f73f8586467d61083b7a99b3b52595c42dcaa6ca03ecaeaf06434d91bc8fcb11bf227aa2cf6247c6683b67feb5f8249e4be861c11325f031a7b1db11700d4cd275b46c6918c2abdbdb517a1942dee687b0fa9adfaeb2f5c6aea21f1a32857ce2503fa5cc72d376ed58c37730db736000b1d95cc95fdb35c9717c194c90170be3f91a364aa2a0db39c231528a146c9d43e45cc3ebd87c4daab63f5ba2b37dcf8f1c4466b288ca87a805541f4561e86dc9aff4512fedc1ced4e213973a774b92c9d76b4a925eccc211b17c6013e7ae3b6dee9c5a2f9739f75d65fd9bb4275f9399d54b49b123dba4c76109febfac632adb68bcd18f6304d9c9fefd549002033b48b065eb96b83cc42d0a473d8758bea0281706bcc2a69b1575a7e6bca8dd27b0269af5630750702b4cd019682ce7b5b1a97d2da24b6aaae466243079a4fce0189c31a4932f53a3119dbd9b77aef7bcba77b44080d0e9b126979685bc974fe8ef3bd2292f9e2ce1fc69dfa274b49acd90cb892a1200ed21180bd62e9ceb609fdecb1403106abd4904a955ee74b96f9d52053bc896650a89afb920d6ef4be4321c90a6aa46210da33ca37825563cec511c569332fc32bec7bfc273784244886f12e84c29af7d32164646ebceb933a4acb7c02e7e41fecc367bdd78d29049c1e83ac4d4320d71bdbdb7d0204c14f7b96678afa2cf5e8cd1d35727f8fafc53796e41e94e8eca45ccfef131323d55c0d39cb3c9fb167226aa932b036afd4d182450e0d5e399dbbddec89d1191fa61d14a5afd79161996a8d2fdcc4ec8d3704391433385a493414b22967587a1d71461db3b89fd278c6972d7d48753a7c4b4057dabf1b1b739c6d75e5ac96202303961bcd5bd0cf678f3338adb9102ad2d44313465df4ffdf3cce16324f780373e1d52e3852e1ab375c42380bd7abc6b310ff4b6bc7fd7b9a821bf37a6558b1a9ae0222adab9cd8b4189f4d40369db55973f88c259437c96390f6f1625a51895eab92db7f87fc4b1a8e30f4867dfb7b3051b595aa090b0ea54c8e49f97604e1ecb5ca4a66f2c2f21982de5fe0b586e0f8bfec87588e584e40971e747697b6c8c08406e4be727e1ddafbeb8178bd3d354d967dd1c76569b3535a8d0f37cb4ec8fdb0134c66fcecf624db972f7d626030f3dae9930dde4c2b45fcaba8487c53d48b7832ca6cc1eac428612a4500c6074750677167516744a53032311afac01819ad55c0cc41dc418b8740c7d7273c07158bee916896d0c4802597043b3a618612c154a3be6f60f4c6d903f378c478b2bb0b0d31a430c216fcf46a527c6a24b2847e2dff7b1713424184a790b605e3dfc00c722201b0a068be6badfa6e6d06d498dda4bda465314cc96a849ec903e218b4722d619cd86b383c7c203a0485d1135a637be7ae6bca5cc7970c9c37e4f509114fe1740d6b2ffd2d967b92b892aaec08365b8db2991ef78c7e04c30af073beee4de4cc8cd5ecf641b8d2ce0ce5dd2bfa20e1d1c79c4368509873465076f4a2dbf1014d31d012493017fcf7720afa6565f243567ffa97d979212dcac9ddbbfbe28351b0c9ae8b56d3b0ccbdfa3414da2a1cac74aa328d06f50c539cda4dabf6c7ee7ed706da4e3b7a29431db461f85626bba90236176d62251990253417fe4d1349c58eb7f2a8bb3dfbedb61ddf1df3d02c522be55ccf948ec38b98cfc5df5e2fcfbe85da3a322eb6def21d76639c0402c4a28ef05c816fcf4d9fe6a8277d31a66c20b803025a312b05399bd0197be58b96475b9aefba177099bf5945db3097c66b63c753756846f749b2ff179d3ca6b2c0520321b90807b14535c9d3ef2f60467c2ee7b347d0e75b1c74f6256542fc1d99e0c04c13d23810d0e8c7558ae1585c4bd5767bd1a7520d9d27bd40c77bd68f91bc4cb324930463b3f65bd72890db5d25dfcbae0d52e61a113fa241619383bc6789356e3b2da931ce9c4e35b7724927c19a7d3b109b415a509a62d3a69b74f47801cb3d02c7455f56c0739a16c1294a01a53c10156499a822c5386db06ad3d88c7c8ffb79dc6ce49e2633b6e3e66443379dba7c4ca174c5c0f4a69290ddf90b84908ac7b77bbeb6f6a5c944b26ab18ff0550b24c12001956752da2109ae8ff2fb0fdf2764f6210a2ff9b26049cb36f199c7eb8b5d05b60cdaeb3cc3698eb415f36adfde66b8aacb9fda6905fb7dfdb225e353b3c221c6735f40a436d9c4c83dea39d34de5939952dfbb3ef9087df66f4afa7c98b84c0eb5310aec4c269d3cbcd73384e2462e6ee91a395ea135d08c267005cab8e221c09adf45afed82159911b9b39164cc05df641fd44993b51f81d1a134160a5b316e61049ca83313e36d69089262197f78ecd9cd96ead9c8487766f6c5339b4f4bf75d5b4d337d947b261b8d572436a8efdebad6ed8e1628ac4d56293d453e86d0af1db15c2168cabd1181efac48ec0a539681185dcff33e86a4e88a5b966516f3f6e7f913592b3d09906d38f38c229223461b258c86f21f57c2d9b78ac7d1cf1f341cf8e516927d3c9b6343c5ad485af193799772bb01a3c8bd83d479441911956e88bdbc51cca1ff7fc254b3d4b03431f1141245e8cbb40a6b345ea23cd5a716bf9f8b7b8b5774ee098cb6a5956b52cfbca8748b50c87cbd63a7209e86f94a8c25b89c1a50fcdedb834d78732783c0ead206d0a8189f1de25b1540a066d935b461fbd915faafd6b13d1bb161802adc93423f49cbf233146c3fb83f7f0d33c0d18689008ad7b2549ed808224279582e54aeaa53b7255c0e6fd94bfa580632888e0aeff9782ef0aaab69b4e05fab816c2f017db9ff92d8da13e5d21c6ce759884bade71c7b30758eb27b1dea5599982c5b524ca86dae70ec665391127403a1872ccb68e15ef9375cf3304f56478540ad3c04d3432b9cfa78e280d301fd41f9e9cfb6546e3d054bde9dd342145f40fb95cf4b642e87010336538e70185fd795d136c75867ed66f27a44fc66443dcaa0ccc821ee993edbd523abdfa354a231f27009db9694b14fba5630d35711ff7dedb2f558c493051f4b79dc8ea830cc27e9a4875d314674dff263e520454e13ee4b6cce0641b6180f022dcc2087162dfa3876eb48744a351718d0502817ecc36154612fbba1c35f2c0d82e1c4480decfb5b79efee8ef003a4a771a78092ff8cbdd33767f329c4430ce3102c7c0be9f66907b2da91051a6233a5bc477ded647e8667d275247b7e0655f8be051871e21df1e9e424b9ae9adcea43ec1382e1e937aaab9165e6a1566f7421e3a9495a8c9c860c105d59b52f649467b78a636f7f4aea4c4d8051cfb13d3143d283855e9daac456ef8bb7457887b23e0dc7c1c764a5826ab91752ede5eedf86493c1eb4f10c0e99c001e419d4b0d05811bf0f236801ea8ce40483730950b2f28214b4a7d056198e82207d1580e4d1c14af99fe25b047c5c1b969c70772f4093fcce1a7ee88ae995622b6e92bc426f84f03759d72dab994c073294bdff9afd94d634f849b673bdace186e757bb135b0be8062e3dbc3470bc464cf6bf3609a2c28accbcc0336565f2879863cc3fbef3e2954d472e6c6920469af51adad10c954811fc00bd6d72b1463859ff250655b8a997960e3ab45b76203d92cf0d66bf38", 0x1000}, {&(0x7f0000001340)="5f7c39f069333a9b55e01a84601ecd4d5e2ab9381df23b12db13b5c23d6e7b9d5c7fdc67a47397fb686d4be1b2c0f54ea06fb43743f1b242d85fb227f89fa56059d43c67460a968580334bdf253b79798b74fc764cbcd6c4d5284570aa493b92921020aafbd45b9b59f1b10e9c918f5656c8061052ae5dce85ab9d82e80814d969b742339a4d93e2ef035ddd21bad8f9355fbbb22bb65d831a08d097179330cfdaae7a5e9e0a56e3c9286e4e5454c4a98b094833606fa2394a7b5dda5fd4e776ae5f0ae31e", 0xc5}, {&(0x7f0000001440)="7e3c3416fb05a8aa120ad421b1d1c08ed91ae44fc020afb6d45d5b67a29632e36a6410e82566993a13ec80cfc61376f4fac28433623b8b5bde1b27b0b7f0102c21c0100b66a9a033585e08f6c3a09b2dc419242768704a4a584720233fd0cdcd18f675e867f9b6f88ac1fe62ce76e8bc76e674a0da70c50dbf838da52027166bf0723b9d6ae4b22741430be713d86f7d26d6a3bf0109e5c3d3171082825d1a307a058c", 0xa3}, {&(0x7f00000001c0)="d39e02125b0bf74855ad6a0a2ee2516e1514b4f472cb67413a1513fe334fc0f5d0d6a1cd5cc59e5365e5cfd4f23c636af7f6ae266bca4cebb7429deeb8a0f029523ff343af65ea820ed956d2782141d66879505c5f61c2e2901f4ecb5f2f9baacd86", 0x62}, {&(0x7f0000001500)="864039abe013f56c74aaf8d4c228fa95bdb714fd2f21965c54d3b157088e0209f5b3aac9c6a069fe0d7dfb9a9183c95f3e7ca7995e4bb5d6df3e4b41ba999b50976cfd3c06eb58c9b2cdf0765cf48cc46ee84b39fffa04d7170afebd9178c5b14169d9c5", 0x64}], 0x7, &(0x7f0000001740)=ANY=[@ANYBLOB="184a39d4dea192e5b026d0340000"], 0x18, 0x10}, 0x0) 20:34:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) fcntl$setsig(r0, 0xa, 0x1b) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000740)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0x447) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x884080, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfa2}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions='default_permissions'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\'@selinux*](mime_typevboxnet0bdev('}}, {@obj_user={'obj_user', 0x3d, '&'}}]}}) [ 267.560631] tcp_sendmsg_locked+0x7c7/0x3400 [ 267.565085] ? tcp_sendpage+0x60/0x60 [ 267.568915] ? trace_hardirqs_on_caller+0x400/0x590 [ 267.573965] ? trace_hardirqs_on+0xd/0x10 [ 267.578141] tcp_sendmsg+0x30/0x50 [ 267.581697] inet_sendmsg+0x122/0x500 [ 267.585507] ? inet_recvmsg+0x500/0x500 [ 267.589965] sock_sendmsg+0xce/0x110 [ 267.589980] SYSC_sendto+0x206/0x310 20:34:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x0, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 267.589994] ? SYSC_connect+0x2d0/0x2d0 20:34:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000080)={0x0, 0x3ff, 0xf1, 0x4}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r2, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30) r4 = getpgrp(0x0) kcmp(r3, r4, 0x7, r0, r1) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 267.590009] ? lock_downgrade+0x6e0/0x6e0 [ 267.590031] ? wait_for_completion+0x420/0x420 [ 267.590042] ? __sb_end_write+0xc1/0x100 [ 267.590056] ? fput+0xd4/0x150 [ 267.590067] ? SyS_write+0x10b/0x180 [ 267.590082] SyS_sendto+0x40/0x50 [ 267.590093] ? SyS_getpeername+0x30/0x30 20:34:41 executing program 1 (fault-call:6 fault-nth:38): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:41 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0x0, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x0, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x4, 0x4, 0x3, {0x2, @pix={0x3, 0x2c3f, 0x41564e57, 0x7, 0xd3, 0x316, 0x0, 0x0, 0x1, 0x6, 0x1, 0x6}}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 267.590107] do_syscall_64+0x1e8/0x640 [ 267.590115] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.590133] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 267.590142] RIP: 0033:0x459279 [ 267.590148] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 267.590160] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 267.590166] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 267.590172] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 267.590178] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 267.590195] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 [ 267.600138] net_ratelimit: 18 callbacks suppressed [ 267.600144] protocol 88fb is buggy, dev hsr_slave_0 20:34:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x109000) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000080)=0x100000001) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 267.600262] protocol 88fb is buggy, dev hsr_slave_1 [ 267.875614] FAULT_INJECTION: forcing a failure. [ 267.875614] name failslab, interval 1, probability 0, space 0, times 0 [ 267.934353] CPU: 1 PID: 18822 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 267.934366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.950864] Call Trace: [ 267.953483] dump_stack+0x138/0x19c [ 267.957218] should_fail.cold+0x10f/0x159 [ 267.961382] should_failslab+0xdb/0x130 [ 267.965365] kmem_cache_alloc+0x47/0x780 20:34:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f00000004c0)='/dev/swradio#\x00', 0x0, 0x2) getpeername$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c) r2 = syz_open_dev$usb(&(0x7f0000000380)='/dev/bus/usb/00#/00#\x00', 0x2, 0x48000) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000000)=0x7) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f00000003c0)=0xffff) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x280000c}, 0xc, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="593c9bf01915d5aa97b8fecbb724faaebab331129f2adf98ef04104117beb88478a18d44eaaaa2de8597965b58c00589c6ede99c71ab9e74384d0e3e5eda8b79417e694ade6adeed765e", @ANYRES16=r3, @ANYBLOB="080127bd7000fcdbdf2505000000200001000c0006006e6f6e65000000000800010002000000080004004e2200000800060001800000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048044}, 0x40) getsockname$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000280)=0x1c) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000580)=0x0) fstat(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000800)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xc) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000001c0)=0xb4e4, 0x4) sendmsg$unix(r2, &(0x7f0000000900)={&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080), 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0x40, 0x20000000}, 0x20000000) symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000400)={0x9, 0x200800000000, [{0x1, 0x0, 0x8}, {0x7fffffff, 0x0, 0x1f}, {0x31, 0x0, 0x9}, {0xffffffff}, {0x6, 0x0, 0x2}, {0xdf50, 0x0, 0x64d1}, {0x6, 0x0, 0x2}, {0x3, 0x0, 0x1}, {0xa1a1, 0x0, 0x200}]}) 20:34:41 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0x0, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 267.969433] ? lock_acquire+0x16f/0x430 [ 267.973424] ? check_preemption_disabled+0x3c/0x250 [ 267.978544] skb_clone+0x129/0x320 [ 267.982090] dev_queue_xmit_nit+0x296/0x8c0 [ 267.982107] dev_hard_start_xmit+0xa7/0x8b0 [ 267.982119] ? assoc_array_gc+0x1140/0x11d0 [ 267.982132] __dev_queue_xmit+0x1d95/0x25e0 [ 267.982143] ? __local_bh_enable_ip+0x99/0x1a0 [ 267.982158] ? netdev_pick_tx+0x300/0x300 [ 267.982169] ? find_held_lock+0x35/0x130 [ 267.982180] ? ip_finish_output+0x56d/0xc60 [ 267.982195] ? mark_held_locks+0xb1/0x100 [ 267.982209] dev_queue_xmit+0x18/0x20 [ 267.982220] ? dev_queue_xmit+0x18/0x20 [ 267.995182] ip_finish_output2+0xddc/0x14a0 [ 267.995201] ? ip_copy_metadata+0x9b0/0x9b0 [ 267.995218] ip_finish_output+0x56d/0xc60 [ 267.995227] ? ip_finish_output+0x56d/0xc60 [ 267.995240] ip_output+0x1e6/0x590 [ 267.995252] ? ip_mc_output+0xd40/0xd40 [ 268.028818] ? __lock_is_held+0xb6/0x140 [ 268.028831] ? check_preemption_disabled+0x3c/0x250 [ 268.028847] ? ip_fragment.constprop.0+0x200/0x200 20:34:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000100)={0x800100b, 0x9, 0x3}) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000080)={0x2, 0x0, 0x3016, 0x2cd, 0x200, 0x7, 0xfff, 0x1}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 268.028859] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 268.028872] ip_local_out+0x97/0x170 [ 268.028889] ip_queue_xmit+0x7d7/0x1b10 [ 268.062666] ? __tcp_v4_send_check+0x1c0/0x360 [ 268.062691] __tcp_transmit_skb+0x172c/0x2fe0 [ 268.062711] ? __tcp_select_window+0x6e0/0x6e0 [ 268.062726] ? kvm_clock_read+0x23/0x40 [ 268.062741] ? sched_clock_cpu+0x1b/0x1c0 [ 268.062750] ? tcp_small_queue_check+0x184/0x1e0 [ 268.062761] tcp_write_xmit+0x523/0x48b0 [ 268.062777] ? iov_iter_advance+0x218/0xc60 [ 268.062800] __tcp_push_pending_frames+0xa6/0x260 20:34:41 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0x0, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 268.062813] tcp_sendmsg_locked+0x264c/0x3400 [ 268.125109] ? tcp_sendpage+0x60/0x60 [ 268.128923] ? trace_hardirqs_on_caller+0x400/0x590 [ 268.133954] ? trace_hardirqs_on+0xd/0x10 [ 268.138137] tcp_sendmsg+0x30/0x50 [ 268.141704] inet_sendmsg+0x122/0x500 [ 268.145516] ? inet_recvmsg+0x500/0x500 [ 268.149501] sock_sendmsg+0xce/0x110 [ 268.153255] SYSC_sendto+0x206/0x310 [ 268.156991] ? SYSC_connect+0x2d0/0x2d0 [ 268.160987] ? lock_downgrade+0x6e0/0x6e0 [ 268.165167] ? wait_for_completion+0x420/0x420 [ 268.169783] ? __sb_end_write+0xc1/0x100 [ 268.173876] ? fput+0xd4/0x150 [ 268.177088] ? SyS_write+0x10b/0x180 [ 268.180819] SyS_sendto+0x40/0x50 [ 268.184277] ? SyS_getpeername+0x30/0x30 [ 268.188354] do_syscall_64+0x1e8/0x640 [ 268.192255] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 268.197113] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 268.202319] RIP: 0033:0x459279 20:34:41 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x44800, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xf, 0x1f, 0x1, 0x5}, 0xf) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca5054f970600000000000000000000000000000066a82f2afc0e6318950e154846346d44d8e3a97cf69fefe66a1b227f3435fb1ea5774c47bcb2c53c523f09336e013ac2a5d60035f527147dd285ced7a14e09bb94cc096190504ed498908042ceb57faba8046f9431b6322b38c877fdbe96a23d5f1137ead03445a5c770436abb2d3c385fb7864e7217932b8a0cb0082e3295719d3347ef5370deb28de8a3093218621fe79cd288a9ea23beb48adcdb21e3eab4348efc4d6d025c789a0b624b5faf00000000") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:41 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 268.205515] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 268.221615] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 268.228898] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 268.236176] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 268.243458] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 268.250742] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 [ 268.258276] protocol 88fb is buggy, dev hsr_slave_0 [ 268.263405] protocol 88fb is buggy, dev hsr_slave_1 [ 268.268661] protocol 88fb is buggy, dev hsr_slave_0 [ 268.273812] protocol 88fb is buggy, dev hsr_slave_1 [ 268.278979] protocol 88fb is buggy, dev hsr_slave_0 [ 268.284113] protocol 88fb is buggy, dev hsr_slave_1 20:34:41 executing program 1 (fault-call:6 fault-nth:39): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:41 executing program 0 (fault-call:5 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x0, {0xb, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:41 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x0, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0x75c) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@remote, @in6=@local}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x800, 0x0) 20:34:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0x0, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x9, 0x10000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) fcntl$getflags(r1, 0x409) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 268.485612] FAULT_INJECTION: forcing a failure. [ 268.485612] name failslab, interval 1, probability 0, space 0, times 0 [ 268.497671] FAULT_INJECTION: forcing a failure. [ 268.497671] name failslab, interval 1, probability 0, space 0, times 0 20:34:42 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x0, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 268.561652] CPU: 0 PID: 18862 Comm: syz-executor.0 Not tainted 4.14.124 #18 [ 268.568802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.578160] Call Trace: [ 268.580777] dump_stack+0x138/0x19c [ 268.584435] should_fail.cold+0x10f/0x159 [ 268.588608] should_failslab+0xdb/0x130 [ 268.592599] kmem_cache_alloc_node+0x287/0x780 [ 268.597226] __alloc_skb+0x9c/0x500 [ 268.600864] ? skb_scrub_packet+0x4b0/0x4b0 [ 268.605219] ? netlink_autobind.isra.0+0x1c9/0x290 [ 268.610167] netlink_sendmsg+0x874/0xc60 [ 268.614244] ? netlink_unicast+0x780/0x780 [ 268.618496] ? security_socket_sendmsg+0x89/0xb0 [ 268.623253] ? netlink_unicast+0x780/0x780 [ 268.627489] sock_sendmsg+0xce/0x110 [ 268.631225] ___sys_sendmsg+0x349/0x840 [ 268.635215] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 268.639988] ? find_held_lock+0x35/0x130 [ 268.644052] ? __fget+0x210/0x370 [ 268.647537] ? __fget+0x237/0x370 [ 268.651098] ? __fget_light+0x172/0x1f0 [ 268.655078] ? __fdget+0x1b/0x20 [ 268.658453] ? sockfd_lookup_light+0xb4/0x160 [ 268.662967] __sys_sendmmsg+0x152/0x3a0 [ 268.666954] ? SyS_sendmsg+0x50/0x50 [ 268.670681] ? lock_downgrade+0x6e0/0x6e0 [ 268.674847] ? __mutex_unlock_slowpath+0x71/0x800 [ 268.679707] ? check_preemption_disabled+0x3c/0x250 [ 268.684758] ? wait_for_completion+0x420/0x420 [ 268.689363] ? __sb_end_write+0xc1/0x100 [ 268.693445] ? SyS_write+0x10b/0x180 [ 268.697171] SyS_sendmmsg+0x35/0x60 [ 268.700812] ? __sys_sendmmsg+0x3a0/0x3a0 [ 268.704968] do_syscall_64+0x1e8/0x640 [ 268.708859] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 268.713712] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 268.718911] RIP: 0033:0x459279 [ 268.722122] RSP: 002b:00007fda18baec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 268.729897] RAX: ffffffffffffffda RBX: 00007fda18baec90 RCX: 0000000000459279 [ 268.737180] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000004 [ 268.744500] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 268.752564] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fda18baf6d4 20:34:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0x0, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 268.759842] R13: 00000000004c6847 R14: 00000000004db7d8 R15: 0000000000000005 [ 268.767146] CPU: 1 PID: 18863 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 268.767374] protocol 88fb is buggy, dev hsr_slave_0 [ 268.774274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.774279] Call Trace: [ 268.774300] dump_stack+0x138/0x19c [ 268.774317] should_fail.cold+0x10f/0x159 [ 268.774332] should_failslab+0xdb/0x130 [ 268.779410] protocol 88fb is buggy, dev hsr_slave_1 [ 268.788721] kmem_cache_alloc_node+0x287/0x780 [ 268.788733] ? tcp_established_options+0x2c5/0x420 [ 268.788750] __alloc_skb+0x9c/0x500 [ 268.788764] ? skb_scrub_packet+0x4b0/0x4b0 [ 268.788779] ? trace_hardirqs_on_caller+0x400/0x590 [ 268.830835] sk_stream_alloc_skb+0xb3/0x780 [ 268.835184] ? tcp_send_mss+0xa4/0x2f0 [ 268.839092] tcp_sendmsg_locked+0xf56/0x3400 [ 268.843533] ? tcp_sendpage+0x60/0x60 [ 268.847358] ? trace_hardirqs_on_caller+0x400/0x590 [ 268.852382] ? trace_hardirqs_on+0xd/0x10 [ 268.856563] tcp_sendmsg+0x30/0x50 20:34:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0x0, @pix_mp={0x80, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 268.860119] inet_sendmsg+0x122/0x500 [ 268.863933] ? inet_recvmsg+0x500/0x500 [ 268.867912] sock_sendmsg+0xce/0x110 [ 268.871639] SYSC_sendto+0x206/0x310 [ 268.875369] ? SYSC_connect+0x2d0/0x2d0 [ 268.879366] ? lock_downgrade+0x6e0/0x6e0 [ 268.883544] ? wait_for_completion+0x420/0x420 [ 268.888147] ? __sb_end_write+0xc1/0x100 [ 268.892225] ? fput+0xd4/0x150 [ 268.895428] ? SyS_write+0x10b/0x180 [ 268.899165] SyS_sendto+0x40/0x50 [ 268.902631] ? SyS_getpeername+0x30/0x30 [ 268.906713] do_syscall_64+0x1e8/0x640 [ 268.910614] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 268.915480] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 268.920680] RIP: 0033:0x459279 [ 268.923884] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 268.931611] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 268.938902] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 268.946181] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 268.953462] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 268.960739] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:42 executing program 1 (fault-call:6 fault-nth:40): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0xd, &(0x7f0000000080)=0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:42 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x0, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:42 executing program 0 (fault-call:5 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x448, 0x230, 0x230, 0x230, 0x360, 0x360, 0x360, 0x4, &(0x7f00000000c0), {[{{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, @mac=@random="eb431635125a", {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x1, 0xfff, 0x1f, 0x8, 0x2, 0x8, 'netdevsim0\x00', 'nlmon0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x80000000}}}, {{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@arp={@multicast2, @multicast1, 0xff000000, 0xffffffff, @mac=@dev={[], 0x22}, {[0xff, 0xff, 0xff, 0xff, 0xff]}, @mac=@local, {[0x0, 0xff, 0x0, 0xff]}, 0xff, 0x2, 0xfffffffffffffff8, 0x8, 0x1, 0x80, 'ip6gre0\x00', 'ifb0\x00', {0xff}, {0xff}, 0x0, 0x29}, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x9cdb, 0x0, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x498) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, {0xff, 0x60, 0x10000, 0x100, 0x2, 0x9}}, 0x8) 20:34:42 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 269.085039] FAULT_INJECTION: forcing a failure. [ 269.085039] name failslab, interval 1, probability 0, space 0, times 0 [ 269.123625] FAULT_INJECTION: forcing a failure. [ 269.123625] name failslab, interval 1, probability 0, space 0, times 0 [ 269.141342] CPU: 0 PID: 18897 Comm: syz-executor.0 Not tainted 4.14.124 #18 [ 269.148498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.157877] Call Trace: [ 269.160488] dump_stack+0x138/0x19c [ 269.164138] should_fail.cold+0x10f/0x159 [ 269.168306] should_failslab+0xdb/0x130 [ 269.172294] kmem_cache_alloc_node_trace+0x280/0x770 [ 269.177413] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 269.184366] __kmalloc_node_track_caller+0x3d/0x80 20:34:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000000)=0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = dup3(r0, r0, 0x80000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x100, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x40) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) fcntl$setlease(r0, 0x400, 0x0) r3 = accept(r0, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x6f5}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r4, 0x2}, &(0x7f0000000200)=0x8) r5 = socket$inet6_sctp(0xa, 0x9, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r6, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 269.189326] __kmalloc_reserve.isra.0+0x40/0xe0 [ 269.194010] __alloc_skb+0xcf/0x500 [ 269.197659] ? skb_scrub_packet+0x4b0/0x4b0 [ 269.202003] ? netlink_autobind.isra.0+0x1c9/0x290 [ 269.206965] netlink_sendmsg+0x874/0xc60 [ 269.211059] ? netlink_unicast+0x780/0x780 [ 269.215326] ? security_socket_sendmsg+0x89/0xb0 [ 269.220105] ? netlink_unicast+0x780/0x780 [ 269.224371] sock_sendmsg+0xce/0x110 [ 269.228097] ___sys_sendmsg+0x349/0x840 [ 269.232093] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 269.236869] ? find_held_lock+0x35/0x130 [ 269.240944] ? __fget+0x210/0x370 [ 269.244425] ? __fget+0x237/0x370 [ 269.247890] ? __fget_light+0x172/0x1f0 [ 269.251881] ? __fdget+0x1b/0x20 [ 269.255401] ? sockfd_lookup_light+0xb4/0x160 [ 269.260011] __sys_sendmmsg+0x152/0x3a0 [ 269.264030] ? SyS_sendmsg+0x50/0x50 [ 269.267852] ? lock_downgrade+0x6e0/0x6e0 [ 269.272029] ? __mutex_unlock_slowpath+0x71/0x800 [ 269.276898] ? check_preemption_disabled+0x3c/0x250 [ 269.282026] ? wait_for_completion+0x420/0x420 [ 269.286725] ? __sb_end_write+0xc1/0x100 20:34:42 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 269.290831] ? SyS_write+0x10b/0x180 [ 269.294667] SyS_sendmmsg+0x35/0x60 [ 269.298354] ? __sys_sendmmsg+0x3a0/0x3a0 [ 269.302520] do_syscall_64+0x1e8/0x640 [ 269.306423] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 269.311382] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 269.316587] RIP: 0033:0x459279 [ 269.319775] RSP: 002b:00007fda18baec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 269.327486] RAX: ffffffffffffffda RBX: 00007fda18baec90 RCX: 0000000000459279 [ 269.334759] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000004 [ 269.342564] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 269.349849] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fda18baf6d4 [ 269.357130] R13: 00000000004c6847 R14: 00000000004db7d8 R15: 0000000000000005 [ 269.364437] CPU: 1 PID: 18900 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 269.371583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.380948] Call Trace: [ 269.383549] dump_stack+0x138/0x19c [ 269.387198] should_fail.cold+0x10f/0x159 [ 269.391372] should_failslab+0xdb/0x130 [ 269.395367] kmem_cache_alloc_node_trace+0x280/0x770 [ 269.400485] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 269.405996] __kmalloc_node_track_caller+0x3d/0x80 [ 269.410955] __kmalloc_reserve.isra.0+0x40/0xe0 [ 269.415649] __alloc_skb+0xcf/0x500 [ 269.419304] ? skb_scrub_packet+0x4b0/0x4b0 [ 269.423639] ? trace_hardirqs_on_caller+0x400/0x590 [ 269.428861] sk_stream_alloc_skb+0xb3/0x780 [ 269.428874] ? tcp_send_mss+0xa4/0x2f0 [ 269.437114] tcp_sendmsg_locked+0xf56/0x3400 20:34:43 executing program 0 (fault-call:5 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:43 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 269.441571] ? tcp_sendpage+0x60/0x60 [ 269.445446] ? trace_hardirqs_on_caller+0x400/0x590 [ 269.450502] ? trace_hardirqs_on+0xd/0x10 [ 269.450520] tcp_sendmsg+0x30/0x50 [ 269.450534] inet_sendmsg+0x122/0x500 [ 269.450545] ? inet_recvmsg+0x500/0x500 [ 269.450556] sock_sendmsg+0xce/0x110 [ 269.450566] SYSC_sendto+0x206/0x310 [ 269.450577] ? SYSC_connect+0x2d0/0x2d0 [ 269.450588] ? lock_downgrade+0x6e0/0x6e0 [ 269.450609] ? wait_for_completion+0x420/0x420 [ 269.450621] ? __sb_end_write+0xc1/0x100 [ 269.450638] ? fput+0xd4/0x150 [ 269.458397] ? SyS_write+0x10b/0x180 [ 269.458416] SyS_sendto+0x40/0x50 [ 269.458427] ? SyS_getpeername+0x30/0x30 [ 269.458441] do_syscall_64+0x1e8/0x640 [ 269.470015] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 269.470038] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 269.470046] RIP: 0033:0x459279 [ 269.470051] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 269.470062] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 269.470068] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 269.470075] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 269.470081] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 269.470086] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 [ 269.493700] FAULT_INJECTION: forcing a failure. [ 269.493700] name failslab, interval 1, probability 0, space 0, times 0 [ 269.527398] CPU: 1 PID: 18924 Comm: syz-executor.0 Not tainted 4.14.124 #18 [ 269.537846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.552402] Call Trace: [ 269.552425] dump_stack+0x138/0x19c [ 269.552443] should_fail.cold+0x10f/0x159 [ 269.552454] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 269.552469] should_failslab+0xdb/0x130 [ 269.552481] kmem_cache_alloc+0x47/0x780 [ 269.552501] skb_clone+0x129/0x320 [ 269.552518] __netlink_deliver_tap+0x55e/0x7d0 [ 269.552533] netlink_unicast+0x663/0x780 [ 269.567196] ? netlink_attachskb+0x6a0/0x6a0 [ 269.567212] ? security_netlink_send+0x81/0xb0 [ 269.567227] netlink_sendmsg+0x7c4/0xc60 [ 269.594910] ? netlink_unicast+0x780/0x780 [ 269.594928] ? security_socket_sendmsg+0x89/0xb0 [ 269.594938] ? netlink_unicast+0x780/0x780 [ 269.594955] sock_sendmsg+0xce/0x110 [ 269.660272] ___sys_sendmsg+0x349/0x840 [ 269.664298] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 269.669068] ? find_held_lock+0x35/0x130 [ 269.673144] ? __fget+0x210/0x370 [ 269.676620] ? __fget+0x237/0x370 [ 269.680083] ? __fget_light+0x172/0x1f0 [ 269.684063] ? __fdget+0x1b/0x20 [ 269.687467] ? sockfd_lookup_light+0xb4/0x160 [ 269.691958] __sys_sendmmsg+0x152/0x3a0 [ 269.695930] ? SyS_sendmsg+0x50/0x50 [ 269.699635] ? lock_downgrade+0x6e0/0x6e0 [ 269.703782] ? __mutex_unlock_slowpath+0x71/0x800 [ 269.708639] ? check_preemption_disabled+0x3c/0x250 [ 269.713647] ? wait_for_completion+0x420/0x420 [ 269.718232] ? __sb_end_write+0xc1/0x100 [ 269.722287] ? SyS_write+0x10b/0x180 [ 269.725996] SyS_sendmmsg+0x35/0x60 [ 269.729609] ? __sys_sendmmsg+0x3a0/0x3a0 [ 269.733752] do_syscall_64+0x1e8/0x640 [ 269.737621] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 269.742460] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 269.747660] RIP: 0033:0x459279 [ 269.750848] RSP: 002b:00007fda18baec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 269.758540] RAX: ffffffffffffffda RBX: 00007fda18baec90 RCX: 0000000000459279 [ 269.765971] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000004 [ 269.773233] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 269.780498] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fda18baf6d4 20:34:43 executing program 1 (fault-call:6 fault-nth:41): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:43 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0xc51, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x0, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x10000000005, 0x31, r1, 0x0) ioctl(r1, 0x5, &(0x7f00000000c0)="53f6ecf8c89ad8097b") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000380)={r0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000001400)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000001440)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000001480)={r3, 0x1}, &(0x7f00000014c0)=0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000200)={r0}) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000001500)='team0\x00') r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="022dbd7000fcdbdf25050000000c0008000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40040) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x0) sendmsg$inet6(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c31ba265ab6b80029bef999d7be191b0e8d006ddde4e3c11a4a1f8d37891a7118ae59143aafed56e568a797ba0e60e2c50c0b39e09b26e068edc682677127f7b06f37", 0x43}, {&(0x7f0000000400)="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", 0x1000}], 0x2}, 0x10) 20:34:43 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:43 executing program 0 (fault-call:5 fault-nth:3): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 269.787760] R13: 00000000004c6847 R14: 00000000004db7d8 R15: 0000000000000005 20:34:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x0, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 269.899105] FAULT_INJECTION: forcing a failure. [ 269.899105] name failslab, interval 1, probability 0, space 0, times 0 [ 269.910745] CPU: 1 PID: 18943 Comm: syz-executor.0 Not tainted 4.14.124 #18 [ 269.915557] FAULT_INJECTION: forcing a failure. [ 269.915557] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 269.917860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.917869] Call Trace: [ 269.917890] dump_stack+0x138/0x19c [ 269.917913] should_fail.cold+0x10f/0x159 [ 269.917935] should_failslab+0xdb/0x130 [ 269.945351] kmem_cache_alloc+0x47/0x780 [ 269.957527] ? lock_acquire+0x16f/0x430 [ 269.957542] ? check_preemption_disabled+0x3c/0x250 [ 269.957560] skb_clone+0x129/0x320 [ 269.957571] dev_queue_xmit_nit+0x296/0x8c0 [ 269.957590] dev_hard_start_xmit+0xa7/0x8b0 [ 269.978749] ? assoc_array_gc+0x1140/0x11d0 [ 269.983089] __dev_queue_xmit+0x1d95/0x25e0 [ 269.987426] ? netdev_pick_tx+0x300/0x300 [ 269.991584] ? skb_clone+0x129/0x320 [ 269.995320] ? memcpy+0x46/0x50 [ 269.998615] ? __copy_skb_header+0x2b8/0x3e0 [ 270.003040] ? __skb_clone+0x271/0x800 [ 270.006951] dev_queue_xmit+0x18/0x20 [ 270.010767] ? dev_queue_xmit+0x18/0x20 [ 270.014763] __netlink_deliver_tap+0x503/0x7d0 [ 270.019360] netlink_unicast+0x663/0x780 [ 270.023426] ? netlink_attachskb+0x6a0/0x6a0 [ 270.027839] ? security_netlink_send+0x81/0xb0 [ 270.032426] netlink_sendmsg+0x7c4/0xc60 [ 270.036496] ? netlink_unicast+0x780/0x780 [ 270.040747] ? security_socket_sendmsg+0x89/0xb0 [ 270.045509] ? netlink_unicast+0x780/0x780 [ 270.049757] sock_sendmsg+0xce/0x110 [ 270.053498] ___sys_sendmsg+0x349/0x840 [ 270.057497] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 270.062286] ? find_held_lock+0x35/0x130 [ 270.066375] ? __fget+0x210/0x370 [ 270.069875] ? __fget+0x237/0x370 [ 270.073457] ? __fget_light+0x172/0x1f0 [ 270.077469] ? __fdget+0x1b/0x20 [ 270.080861] ? sockfd_lookup_light+0xb4/0x160 [ 270.085382] __sys_sendmmsg+0x152/0x3a0 [ 270.089377] ? SyS_sendmsg+0x50/0x50 [ 270.093115] ? lock_downgrade+0x6e0/0x6e0 [ 270.097279] ? __mutex_unlock_slowpath+0x71/0x800 [ 270.102132] ? check_preemption_disabled+0x3c/0x250 [ 270.107161] ? wait_for_completion+0x420/0x420 [ 270.111757] ? __sb_end_write+0xc1/0x100 [ 270.115831] ? SyS_write+0x10b/0x180 [ 270.119562] SyS_sendmmsg+0x35/0x60 [ 270.123204] ? __sys_sendmmsg+0x3a0/0x3a0 [ 270.127371] do_syscall_64+0x1e8/0x640 [ 270.131280] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 270.136204] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 270.141410] RIP: 0033:0x459279 20:34:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x0, 0x3c757773, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:43 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 270.144609] RSP: 002b:00007fda18baec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 270.152347] RAX: ffffffffffffffda RBX: 00007fda18baec90 RCX: 0000000000459279 [ 270.159739] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000004 [ 270.167806] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 270.175103] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fda18baf6d4 [ 270.182385] R13: 00000000004c6847 R14: 00000000004db7d8 R15: 0000000000000005 [ 270.199398] CPU: 0 PID: 18944 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 270.206565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.215938] Call Trace: [ 270.218540] dump_stack+0x138/0x19c [ 270.222190] should_fail.cold+0x10f/0x159 [ 270.226360] __alloc_pages_nodemask+0x1d6/0x7a0 [ 270.231049] ? find_held_lock+0x35/0x130 [ 270.235128] ? __alloc_pages_slowpath+0x2930/0x2930 [ 270.240173] ? iov_iter_advance+0x218/0xc60 [ 270.244533] alloc_pages_current+0xec/0x1e0 [ 270.248912] skb_page_frag_refill+0x1d3/0x3e0 [ 270.253412] ? __phys_addr_symbol+0x23/0x60 [ 270.257742] sk_page_frag_refill+0x53/0x1c0 [ 270.262069] tcp_sendmsg_locked+0x7c7/0x3400 [ 270.266470] ? tcp_sendpage+0x60/0x60 [ 270.270269] ? trace_hardirqs_on_caller+0x400/0x590 [ 270.275270] ? trace_hardirqs_on+0xd/0x10 [ 270.279414] tcp_sendmsg+0x30/0x50 [ 270.282976] inet_sendmsg+0x122/0x500 [ 270.288435] ? inet_recvmsg+0x500/0x500 [ 270.292403] sock_sendmsg+0xce/0x110 [ 270.296112] SYSC_sendto+0x206/0x310 [ 270.299818] ? SYSC_connect+0x2d0/0x2d0 [ 270.303841] ? lock_downgrade+0x6e0/0x6e0 [ 270.307997] ? wait_for_completion+0x420/0x420 [ 270.312581] ? __sb_end_write+0xc1/0x100 [ 270.316636] ? fput+0xd4/0x150 [ 270.319820] ? SyS_write+0x10b/0x180 [ 270.323547] SyS_sendto+0x40/0x50 [ 270.326982] ? SyS_getpeername+0x30/0x30 [ 270.331027] do_syscall_64+0x1e8/0x640 [ 270.334920] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 270.339758] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 270.344938] RIP: 0033:0x459279 20:34:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x92) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, 0x7, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="5400e9ff000000f9ffffff") r1 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x1, 0x2000) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x3) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000340)={0x2, &(0x7f0000000200)=[{0x2, 0x5}, {0x5e, 0x8}]}) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x13811887e505af9b) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000100)={0x0, @bt={0x3, 0x5, 0x1, 0x1, 0x6, 0x20, 0x2, 0x2f3e, 0x7, 0x87f9, 0xfff, 0x1, 0x2145, 0x0, 0x10, 0x8}}) r4 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000380)={0x1a, 0x1, 0x1000, "dff3e6fe49152545993cf911c307618489c2894bd08901110f1d"}) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x97b, 0x4, 0x8000, 0x8}}) 20:34:43 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x0, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 270.348117] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 270.356695] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 270.364162] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 270.371474] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 270.378751] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 270.386015] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:44 executing program 1 (fault-call:6 fault-nth:42): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:44 executing program 0 (fault-call:5 fault-nth:4): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0xe, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 270.510705] FAULT_INJECTION: forcing a failure. [ 270.510705] name failslab, interval 1, probability 0, space 0, times 0 [ 270.544144] CPU: 1 PID: 18972 Comm: syz-executor.0 Not tainted 4.14.124 #18 [ 270.551304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 20:34:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x0, 0x0) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000180)={0x800, "0ffe5f67aa7f6039cf7de8cabe87dada8aef453a54c38c3d1a996dbdabe44e56", 0x0, 0xdc2, 0x9, 0x8, 0x7}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) write$P9_RSTATFS(r2, &(0x7f00000000c0)={0x43, 0x9, 0x2, {0x1eb, 0x87, 0xffffffffffffffab, 0x3, 0x8, 0xfffffffc, 0xcd, 0x0, 0x73f}}, 0x43) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000340)={0x2e8, 0x100, "987feb63cab6ba238df99c2d33b89328f736b8d0a8c7810a60335466d2b837cb", 0xffffffff, 0x11, 0x7, 0x8, 0x84}) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x5, &(0x7f0000000200)) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 270.560725] Call Trace: [ 270.563335] dump_stack+0x138/0x19c [ 270.566995] should_fail.cold+0x10f/0x159 [ 270.571177] ? trace_hardirqs_on+0x10/0x10 [ 270.575464] should_failslab+0xdb/0x130 [ 270.579452] __kmalloc+0x71/0x7a0 [ 270.582918] ? neigh_lookup+0x2ed/0x4f0 [ 270.586908] ? find_held_lock+0x35/0x130 [ 270.590992] ? __neigh_create+0x1d6/0x1a00 [ 270.595257] __neigh_create+0x1d6/0x1a00 [ 270.599242] FAULT_INJECTION: forcing a failure. [ 270.599242] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 270.599346] ? __local_bh_enable_ip+0x99/0x1a0 [ 270.615772] ? trace_hardirqs_on_caller+0x400/0x590 [ 270.620811] ? neigh_lookup+0x2ed/0x4f0 [ 270.624798] ? neigh_lookup+0x320/0x4f0 [ 270.628780] neigh_add+0x77f/0x8c0 [ 270.632328] ? neigh_event_ns+0x100/0x100 [ 270.636487] ? neigh_event_ns+0x100/0x100 [ 270.640642] rtnetlink_rcv_msg+0x3eb/0xb70 [ 270.644901] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 270.649492] ? netdev_pick_tx+0x300/0x300 [ 270.653651] ? skb_clone+0x129/0x320 [ 270.657377] netlink_rcv_skb+0x14f/0x3c0 [ 270.661449] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 270.666035] ? netlink_ack+0x9a0/0x9a0 [ 270.669936] ? lock_downgrade+0x6e0/0x6e0 [ 270.674094] rtnetlink_rcv+0x1d/0x30 [ 270.677809] netlink_unicast+0x45d/0x780 [ 270.681884] ? netlink_attachskb+0x6a0/0x6a0 [ 270.686298] ? security_netlink_send+0x81/0xb0 [ 270.690888] netlink_sendmsg+0x7c4/0xc60 [ 270.694954] ? netlink_unicast+0x780/0x780 [ 270.699192] ? security_socket_sendmsg+0x89/0xb0 [ 270.703969] ? netlink_unicast+0x780/0x780 [ 270.708215] sock_sendmsg+0xce/0x110 [ 270.711936] ___sys_sendmsg+0x349/0x840 [ 270.715935] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 270.720701] ? find_held_lock+0x35/0x130 [ 270.724766] ? __fget+0x210/0x370 [ 270.728234] ? __fget+0x237/0x370 [ 270.731698] ? __fget_light+0x172/0x1f0 [ 270.735672] ? __fdget+0x1b/0x20 [ 270.739046] ? sockfd_lookup_light+0xb4/0x160 [ 270.743549] __sys_sendmmsg+0x152/0x3a0 [ 270.747527] ? SyS_sendmsg+0x50/0x50 [ 270.751249] ? lock_downgrade+0x6e0/0x6e0 [ 270.755409] ? __mutex_unlock_slowpath+0x71/0x800 [ 270.760341] ? check_preemption_disabled+0x3c/0x250 [ 270.765367] ? wait_for_completion+0x420/0x420 [ 270.769948] ? __sb_end_write+0xc1/0x100 [ 270.774026] ? SyS_write+0x10b/0x180 [ 270.777752] SyS_sendmmsg+0x35/0x60 [ 270.781383] ? __sys_sendmmsg+0x3a0/0x3a0 [ 270.785542] do_syscall_64+0x1e8/0x640 [ 270.789431] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 270.794290] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 270.799482] RIP: 0033:0x459279 [ 270.802671] RSP: 002b:00007fda18baec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 20:34:44 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 270.802690] RAX: ffffffffffffffda RBX: 00007fda18baec90 RCX: 0000000000459279 [ 270.802697] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000004 [ 270.802704] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 270.802710] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fda18baf6d4 [ 270.802717] R13: 00000000004c6847 R14: 00000000004db7d8 R15: 0000000000000005 [ 270.848517] CPU: 0 PID: 18977 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 270.855639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.865004] Call Trace: [ 270.867615] dump_stack+0x138/0x19c [ 270.871269] should_fail.cold+0x10f/0x159 [ 270.875439] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 270.880912] __alloc_pages_nodemask+0x1d6/0x7a0 [ 270.885600] ? find_held_lock+0x35/0x130 [ 270.889855] ? __alloc_pages_slowpath+0x2930/0x2930 [ 270.894897] ? iov_iter_advance+0x218/0xc60 [ 270.899240] alloc_pages_current+0xec/0x1e0 [ 270.903580] skb_page_frag_refill+0x1d3/0x3e0 [ 270.908088] ? __phys_addr_symbol+0x23/0x60 [ 270.912448] sk_page_frag_refill+0x53/0x1c0 [ 270.916791] tcp_sendmsg_locked+0x7c7/0x3400 [ 270.921241] ? tcp_sendpage+0x60/0x60 [ 270.925061] ? trace_hardirqs_on_caller+0x400/0x590 [ 270.930100] ? trace_hardirqs_on+0xd/0x10 [ 270.934276] tcp_sendmsg+0x30/0x50 [ 270.937838] inet_sendmsg+0x122/0x500 [ 270.941669] ? inet_recvmsg+0x500/0x500 [ 270.945668] sock_sendmsg+0xce/0x110 [ 270.949396] SYSC_sendto+0x206/0x310 [ 270.953130] ? SYSC_connect+0x2d0/0x2d0 [ 270.957128] ? lock_downgrade+0x6e0/0x6e0 20:34:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:44 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x0, 0x3ff}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:44 executing program 0 (fault-call:5 fault-nth:5): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:44 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x3c, @empty, 0x4e23, 0x0, 'ovf\x00', 0x28, 0xfb, 0x7a}, 0x2c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), 0x4) [ 270.961296] ? wait_for_completion+0x420/0x420 [ 270.965892] ? __sb_end_write+0xc1/0x100 [ 270.969359] FAULT_INJECTION: forcing a failure. [ 270.969359] name failslab, interval 1, probability 0, space 0, times 0 [ 270.969970] ? fput+0xd4/0x150 [ 270.969983] ? SyS_write+0x10b/0x180 [ 270.970001] SyS_sendto+0x40/0x50 [ 270.970012] ? SyS_getpeername+0x30/0x30 [ 270.970024] do_syscall_64+0x1e8/0x640 [ 270.970033] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 270.970052] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 270.970069] RIP: 0033:0x459279 20:34:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0xf, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 270.985738] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20003 [ 270.988180] RSP: 002b:00007efc362dcc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 270.988201] RAX: ffffffffffffffda RBX: 00007efc362dcc90 RCX: 0000000000459279 [ 270.988208] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 270.988214] RBP: 000000000075bfc0 R08: 0000000000000000 R09: 0000000000000037 [ 270.988221] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362dd6d4 [ 270.988227] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 [ 271.043544] CPU: 1 PID: 18994 Comm: syz-executor.0 Not tainted 4.14.124 #18 [ 271.063635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.063641] Call Trace: [ 271.063662] dump_stack+0x138/0x19c [ 271.063680] should_fail.cold+0x10f/0x159 [ 271.063703] should_failslab+0xdb/0x130 [ 271.063716] kmem_cache_alloc_node+0x287/0x780 [ 271.063736] __alloc_skb+0x9c/0x500 [ 271.063749] ? skb_scrub_packet+0x4b0/0x4b0 [ 271.080342] ? neigh_event_ns+0x100/0x100 [ 271.080353] ? rtnetlink_rcv_msg+0x3fd/0xb70 [ 271.080367] netlink_ack+0x21c/0x9a0 [ 271.080379] ? netlink_sendmsg+0xc60/0xc60 [ 271.080391] netlink_rcv_skb+0x2fc/0x3c0 [ 271.080401] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 271.080412] ? netlink_ack+0x9a0/0x9a0 [ 271.080429] ? lock_downgrade+0x6e0/0x6e0 [ 271.080442] rtnetlink_rcv+0x1d/0x30 [ 271.099383] netlink_unicast+0x45d/0x780 [ 271.099396] ? netlink_attachskb+0x6a0/0x6a0 [ 271.099410] ? security_netlink_send+0x81/0xb0 [ 271.099421] netlink_sendmsg+0x7c4/0xc60 [ 271.099439] ? netlink_unicast+0x780/0x780 [ 271.115958] ? security_socket_sendmsg+0x89/0xb0 [ 271.127966] ? netlink_unicast+0x780/0x780 [ 271.127981] sock_sendmsg+0xce/0x110 [ 271.127994] ___sys_sendmsg+0x349/0x840 [ 271.128007] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 271.140612] ? find_held_lock+0x35/0x130 [ 271.140625] ? __fget+0x210/0x370 [ 271.140656] ? __fget+0x237/0x370 [ 271.140670] ? __fget_light+0x172/0x1f0 [ 271.148443] ? __fdget+0x1b/0x20 [ 271.148457] ? sockfd_lookup_light+0xb4/0x160 [ 271.148469] __sys_sendmmsg+0x152/0x3a0 [ 271.148482] ? SyS_sendmsg+0x50/0x50 [ 271.157467] ? lock_downgrade+0x6e0/0x6e0 [ 271.165754] ? __mutex_unlock_slowpath+0x71/0x800 [ 271.165768] ? check_preemption_disabled+0x3c/0x250 [ 271.165782] ? wait_for_completion+0x420/0x420 [ 271.183385] ? __sb_end_write+0xc1/0x100 [ 271.183405] ? SyS_write+0x10b/0x180 [ 271.183421] SyS_sendmmsg+0x35/0x60 [ 271.248613] ? __sys_sendmmsg+0x3a0/0x3a0 [ 271.252794] do_syscall_64+0x1e8/0x640 [ 271.256711] ? trace_hardirqs_off_thunk+0x1a/0x1c 20:34:44 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:44 executing program 1 (fault-call:6 fault-nth:43): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x5, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 271.261581] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 271.266786] RIP: 0033:0x459279 [ 271.270000] RSP: 002b:00007fda18baec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 271.277810] RAX: ffffffffffffffda RBX: 00007fda18baec90 RCX: 0000000000459279 [ 271.285110] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000004 [ 271.292576] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 271.299860] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fda18baf6d4 [ 271.307153] R13: 00000000004c6847 R14: 00000000004db7d8 R15: 0000000000000005 20:34:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x40001000008912, &(0x7f0000000100)="11dca5055e0bcfec7be070241fb3e57e590c401eedc27f5c5dd081d9d292cd0073e786585799501a71666f79508fdcb115e2900a8de485a2d6cb2bc529a1d9447acfa21278c400a0ad018c8f9c297a3364a0fc2adacabe664443e64c513efe0cf240967246bd8e9f118e016085a6d2a09b28ba8f7d81065dc588b7d89f9380955f2eedb6e8e33cabe0612c3a289de9f1ee73930e882ff7e2a17334c3e222952e8e9a4f5b9a00"/179) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000000c0)=0xe0, 0x2) 20:34:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) r2 = syz_init_net_socket$ax25(0x3, 0x7, 0xcf) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000200)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x141100, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x1, 0x3fc9, 0x3e}, 0x10) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000003c0), 0x4) tee(r4, r2, 0x4, 0x8) openat$random(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x4601, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000000c0)=0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000180)=0x1e) syz_open_procfs(r5, &(0x7f0000000100)='mountinfo\x00') 20:34:45 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0x0, 0xa42}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 271.453929] FAULT_INJECTION: forcing a failure. [ 271.453929] name failslab, interval 1, probability 0, space 0, times 0 [ 271.465276] CPU: 0 PID: 19015 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 271.472392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.481759] Call Trace: [ 271.484374] dump_stack+0x138/0x19c [ 271.488037] should_fail.cold+0x10f/0x159 [ 271.492221] should_failslab+0xdb/0x130 [ 271.496218] kmem_cache_alloc+0x47/0x780 [ 271.500290] ? lock_acquire+0x16f/0x430 [ 271.504280] ? check_preemption_disabled+0x3c/0x250 [ 271.509317] skb_clone+0x129/0x320 [ 271.512872] dev_queue_xmit_nit+0x296/0x8c0 [ 271.517222] dev_hard_start_xmit+0xa7/0x8b0 [ 271.521544] ? assoc_array_gc+0x1140/0x11d0 [ 271.521558] __dev_queue_xmit+0x1d95/0x25e0 [ 271.521569] ? trace_hardirqs_on+0xd/0x10 [ 271.521579] ? __local_bh_enable_ip+0x99/0x1a0 [ 271.521593] ? netdev_pick_tx+0x300/0x300 [ 271.521604] ? find_held_lock+0x35/0x130 [ 271.547288] ? ip_finish_output+0x56d/0xc60 [ 271.551635] ? mark_held_locks+0xb1/0x100 [ 271.555800] dev_queue_xmit+0x18/0x20 [ 271.555810] ? dev_queue_xmit+0x18/0x20 [ 271.555823] ip_finish_output2+0xddc/0x14a0 [ 271.555832] ? get_info+0x560/0x560 [ 271.555850] ? ip_copy_metadata+0x9b0/0x9b0 [ 271.567979] ip_finish_output+0x56d/0xc60 [ 271.567991] ? ip_finish_output+0x56d/0xc60 [ 271.568005] ip_output+0x1e6/0x590 [ 271.568017] ? ip_mc_output+0xd40/0xd40 [ 271.568030] ? __lock_is_held+0xb6/0x140 [ 271.568042] ? check_preemption_disabled+0x3c/0x250 [ 271.568054] ? ip_fragment.constprop.0+0x200/0x200 [ 271.604432] FAULT_INJECTION: forcing a failure. [ 271.604432] name failslab, interval 1, probability 0, space 0, times 0 [ 271.605968] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 271.605985] ip_local_out+0x97/0x170 [ 271.605998] ip_queue_xmit+0x7d7/0x1b10 [ 271.606010] ? __tcp_v4_send_check+0x1c0/0x360 [ 271.606025] __tcp_transmit_skb+0x172c/0x2fe0 [ 271.606044] ? __tcp_select_window+0x6e0/0x6e0 [ 271.639449] ? kvm_clock_read+0x23/0x40 [ 271.648014] ? sched_clock_cpu+0x1b/0x1c0 [ 271.652190] ? tcp_small_queue_check+0x184/0x1e0 [ 271.652205] tcp_write_xmit+0x523/0x48b0 [ 271.652222] ? iov_iter_advance+0x218/0xc60 [ 271.652247] tcp_push_one+0xc1/0xf0 [ 271.652260] tcp_sendmsg_locked+0x1571/0x3400 [ 271.673617] ? tcp_sendpage+0x60/0x60 [ 271.677452] ? trace_hardirqs_on_caller+0x400/0x590 [ 271.682481] ? trace_hardirqs_on+0xd/0x10 [ 271.686654] tcp_sendmsg+0x30/0x50 [ 271.690215] inet_sendmsg+0x122/0x500 [ 271.694031] ? inet_recvmsg+0x500/0x500 [ 271.698035] sock_sendmsg+0xce/0x110 20:34:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}, {0x0, 0x2}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:45 executing program 0 (fault-call:5 fault-nth:6): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x6, 0x3ff}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}, {0x0, 0x3ff}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 271.701763] SYSC_sendto+0x206/0x310 [ 271.705494] ? SYSC_connect+0x2d0/0x2d0 [ 271.709493] ? lock_downgrade+0x6e0/0x6e0 [ 271.713671] ? wait_for_completion+0x420/0x420 [ 271.718298] ? __sb_end_write+0xc1/0x100 [ 271.722375] ? fput+0xd4/0x150 [ 271.725581] ? SyS_write+0x10b/0x180 [ 271.729312] SyS_sendto+0x40/0x50 [ 271.732780] ? SyS_getpeername+0x30/0x30 [ 271.736855] do_syscall_64+0x1e8/0x640 [ 271.740752] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 271.745615] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 271.750809] RIP: 0033:0x459279 [ 271.750815] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 271.750826] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 271.750832] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 271.750838] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 271.750844] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 271.750850] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 [ 271.803064] CPU: 1 PID: 19023 Comm: syz-executor.0 Not tainted 4.14.124 #18 [ 271.810209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.819581] Call Trace: [ 271.822194] dump_stack+0x138/0x19c [ 271.825853] should_fail.cold+0x10f/0x159 [ 271.830027] should_failslab+0xdb/0x130 [ 271.834030] kmem_cache_alloc_node_trace+0x280/0x770 [ 271.839162] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 271.844667] __kmalloc_node_track_caller+0x3d/0x80 [ 271.849787] __kmalloc_reserve.isra.0+0x40/0xe0 [ 271.854488] __alloc_skb+0xcf/0x500 [ 271.858169] ? skb_scrub_packet+0x4b0/0x4b0 [ 271.862503] ? neigh_event_ns+0x100/0x100 [ 271.866661] ? rtnetlink_rcv_msg+0x3fd/0xb70 [ 271.871175] netlink_ack+0x21c/0x9a0 [ 271.874903] ? netlink_sendmsg+0xc60/0xc60 [ 271.879151] netlink_rcv_skb+0x2fc/0x3c0 [ 271.883225] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 271.887817] ? netlink_ack+0x9a0/0x9a0 [ 271.891725] ? lock_downgrade+0x6e0/0x6e0 [ 271.895893] rtnetlink_rcv+0x1d/0x30 [ 271.899617] netlink_unicast+0x45d/0x780 20:34:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0xf5, 0xa42}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 271.903699] ? netlink_attachskb+0x6a0/0x6a0 [ 271.908117] ? security_netlink_send+0x81/0xb0 [ 271.912705] netlink_sendmsg+0x7c4/0xc60 [ 271.916780] ? netlink_unicast+0x780/0x780 [ 271.921047] ? security_socket_sendmsg+0x89/0xb0 [ 271.925814] ? netlink_unicast+0x780/0x780 [ 271.930067] sock_sendmsg+0xce/0x110 [ 271.933799] ___sys_sendmsg+0x349/0x840 [ 271.937788] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 271.942566] ? find_held_lock+0x35/0x130 [ 271.946637] ? __fget+0x210/0x370 [ 271.950114] ? __fget+0x237/0x370 20:34:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}, {0x0, 0xa42}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 271.953586] ? __fget_light+0x172/0x1f0 [ 271.957578] ? __fdget+0x1b/0x20 [ 271.960956] ? sockfd_lookup_light+0xb4/0x160 [ 271.965459] __sys_sendmmsg+0x152/0x3a0 [ 271.969450] ? SyS_sendmsg+0x50/0x50 [ 271.973177] ? lock_downgrade+0x6e0/0x6e0 [ 271.977353] ? __mutex_unlock_slowpath+0x71/0x800 [ 271.982205] ? check_preemption_disabled+0x3c/0x250 [ 271.987241] ? wait_for_completion+0x420/0x420 [ 271.991833] ? __sb_end_write+0xc1/0x100 [ 271.991849] ? SyS_write+0x10b/0x180 [ 271.991865] SyS_sendmmsg+0x35/0x60 [ 271.991873] ? __sys_sendmmsg+0x3a0/0x3a0 [ 271.991884] do_syscall_64+0x1e8/0x640 [ 271.991893] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 271.991911] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 271.991920] RIP: 0033:0x459279 [ 271.991926] RSP: 002b:00007fda18baec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 271.991937] RAX: ffffffffffffffda RBX: 00007fda18baec90 RCX: 0000000000459279 [ 271.991943] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000004 [ 271.991952] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 20:34:45 executing program 1 (fault-call:6 fault-nth:44): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:45 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfffffffffffffff8, 0x80) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000340)) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) recvfrom$unix(r2, &(0x7f00000000c0)=""/126, 0x7e, 0x40000000, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) socket$l2tp(0x18, 0x1, 0x1) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000000)) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f00000001c0)={0x3, 0x800, 0x77c6}) 20:34:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x4031, 0xffffffffffffffff, 0x10000000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) 20:34:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x5, 0x1000}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:45 executing program 0 (fault-call:5 fault-nth:7): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 272.011357] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fda18baf6d4 [ 272.011364] R13: 00000000004c6847 R14: 00000000004db7d8 R15: 0000000000000005 20:34:45 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x0, 0x1000}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) write(r0, &(0x7f0000000080)="621ed4585e7b91668a77d12a0409c7b33e547b68e28af5db6425f443f01e4d9fe59018ca7517b4548c5e8b01834952c73326b6769f9dfae2d184fb8d18fe1a2db59a022d00cdc80b3899baff3adb5a36f6f1b54a61c6a229d93b5c8533c771e964b9f2da0222d9e0b4fd879b38c42ac9d063c68864816a2f21aa5ec28666a8e5acfeda01dc5563", 0x87) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 272.123505] FAULT_INJECTION: forcing a failure. [ 272.123505] name failslab, interval 1, probability 0, space 0, times 0 [ 272.207164] FAULT_INJECTION: forcing a failure. [ 272.207164] name failslab, interval 1, probability 0, space 0, times 0 [ 272.220923] CPU: 1 PID: 19045 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 272.228082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.237453] Call Trace: [ 272.240066] dump_stack+0x138/0x19c [ 272.243730] should_fail.cold+0x10f/0x159 [ 272.247906] should_failslab+0xdb/0x130 [ 272.251896] kmem_cache_alloc_node+0x287/0x780 [ 272.256494] ? tcp_established_options+0x2c5/0x420 [ 272.261453] __alloc_skb+0x9c/0x500 [ 272.265100] ? skb_scrub_packet+0x4b0/0x4b0 [ 272.269444] ? trace_hardirqs_on_caller+0x400/0x590 [ 272.274486] sk_stream_alloc_skb+0xb3/0x780 [ 272.278918] ? tcp_send_mss+0xa4/0x2f0 [ 272.282843] tcp_sendmsg_locked+0xf56/0x3400 [ 272.289776] ? tcp_sendpage+0x60/0x60 [ 272.293601] ? trace_hardirqs_on_caller+0x400/0x590 [ 272.298640] ? trace_hardirqs_on+0xd/0x10 [ 272.302812] tcp_sendmsg+0x30/0x50 [ 272.306367] inet_sendmsg+0x122/0x500 [ 272.310178] ? inet_recvmsg+0x500/0x500 [ 272.314177] sock_sendmsg+0xce/0x110 [ 272.317910] SYSC_sendto+0x206/0x310 [ 272.321639] ? SYSC_connect+0x2d0/0x2d0 [ 272.325633] ? lock_downgrade+0x6e0/0x6e0 [ 272.329807] ? wait_for_completion+0x420/0x420 [ 272.334403] ? __sb_end_write+0xc1/0x100 [ 272.338482] ? fput+0xd4/0x150 [ 272.341719] ? SyS_write+0x10b/0x180 [ 272.345445] SyS_sendto+0x40/0x50 [ 272.348909] ? SyS_getpeername+0x30/0x30 [ 272.352995] do_syscall_64+0x1e8/0x640 [ 272.356903] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 272.361769] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 272.366976] RIP: 0033:0x459279 [ 272.370165] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 272.377882] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 272.385162] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 272.392444] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 272.399731] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 272.407013] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 [ 272.414324] CPU: 0 PID: 19061 Comm: syz-executor.0 Not tainted 4.14.124 #18 [ 272.421464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.430831] Call Trace: [ 272.433434] dump_stack+0x138/0x19c [ 272.437078] should_fail.cold+0x10f/0x159 [ 272.441247] should_failslab+0xdb/0x130 [ 272.445242] kmem_cache_alloc+0x47/0x780 [ 272.449323] ? lock_downgrade+0x6e0/0x6e0 [ 272.453488] ? netlink_skb_set_owner_r+0x14b/0x1b0 [ 272.458443] skb_clone+0x129/0x320 [ 272.462011] __netlink_deliver_tap+0x55e/0x7d0 [ 272.466629] __netlink_sendskb+0x1ad/0x1d0 [ 272.470887] netlink_unicast+0x64e/0x780 [ 272.474975] ? netlink_attachskb+0x6a0/0x6a0 [ 272.479404] netlink_ack+0x51d/0x9a0 [ 272.483140] ? netlink_sendmsg+0xc60/0xc60 [ 272.487398] netlink_rcv_skb+0x2fc/0x3c0 [ 272.491478] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 272.496088] ? netlink_ack+0x9a0/0x9a0 [ 272.500021] ? lock_downgrade+0x6e0/0x6e0 [ 272.504193] rtnetlink_rcv+0x1d/0x30 [ 272.507937] netlink_unicast+0x45d/0x780 [ 272.512012] ? netlink_attachskb+0x6a0/0x6a0 [ 272.516471] ? security_netlink_send+0x81/0xb0 [ 272.521058] netlink_sendmsg+0x7c4/0xc60 [ 272.525136] ? netlink_unicast+0x780/0x780 [ 272.529399] ? security_socket_sendmsg+0x89/0xb0 [ 272.534173] ? netlink_unicast+0x780/0x780 [ 272.538429] sock_sendmsg+0xce/0x110 [ 272.542157] ___sys_sendmsg+0x349/0x840 [ 272.546154] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 272.551089] ? find_held_lock+0x35/0x130 [ 272.555161] ? __fget+0x210/0x370 [ 272.558652] ? __fget+0x237/0x370 [ 272.562131] ? __fget_light+0x172/0x1f0 [ 272.566126] ? __fdget+0x1b/0x20 [ 272.569562] ? sockfd_lookup_light+0xb4/0x160 [ 272.574071] __sys_sendmmsg+0x152/0x3a0 [ 272.574182] FAULT_INJECTION: forcing a failure. [ 272.574182] name failslab, interval 1, probability 0, space 0, times 0 [ 272.579706] ? SyS_sendmsg+0x50/0x50 [ 272.579722] ? lock_downgrade+0x6e0/0x6e0 [ 272.579742] ? __mutex_unlock_slowpath+0x71/0x800 [ 272.579753] ? check_preemption_disabled+0x3c/0x250 [ 272.579771] ? wait_for_completion+0x420/0x420 [ 272.613225] ? __sb_end_write+0xc1/0x100 [ 272.617303] ? SyS_write+0x10b/0x180 [ 272.621030] SyS_sendmmsg+0x35/0x60 [ 272.624657] ? __sys_sendmmsg+0x3a0/0x3a0 [ 272.628815] do_syscall_64+0x1e8/0x640 [ 272.632711] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 272.637570] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 272.642762] RIP: 0033:0x459279 [ 272.645958] RSP: 002b:00007fda18baec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 20:34:46 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000001600)={0x0, 0x81b}, &(0x7f0000001640)=0x8) sendmsg$inet_sctp(r1, &(0x7f00000016c0)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="4590463fb37a1e6fda9983b04325fdd5189dcd10897f80edbc47604a603cff7bab28defa9a45d48dc34adc11f57a21186ad31ea7bfbb8b347baede6356cbe0cbba6b2c3e314662c02879a94ffb9c4a826d3096a6b0a598c7d4ac76b5826c422aea9bb92fbc2cd20811f58f26b7bbb35b3f1a5b06acdba52c215f58f7e609fa805417de56", 0x84}, {&(0x7f0000000340)="748a9285e30115c14219c694916bcea6ffd177a7300b8ce269cfc9054c7a0b3291dcd28f80734278555c8ee3b769082fe80d5f397420a22022ac84c79e7bc6c4592ee61cd5e47332f6e227b3bb5fb71610f2c014390624a24af6e0a26454b466e6a31fcb6487f4e70590c2c695edea0c15aa0cb49a25fa431289c77310c92afacbb3900d603b7659274f715670e18cbe983e7dacfc7543c6aad7a42c693a04b3e58db8713b151fa244be", 0xaa}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="8d1269822621a6603bcb672c67d4425a17fa681b108e63e6b2fbaf22157e927d95ff7a3aa10edaf9123bd12124d4e3fb306abc951241a291ff424ee9d0d216b1d5163e463d903119a6a52199ccbb3335f75356c2197229c69755e23809a647105f133b5e5a2bcd997330df8887869815a771e823e2ec330e8dd12f2d3299235f8709f9756beb59ad66218027d42e4e343e728cd30eda2698365a8883746a934af070bff11b20cdc946918a642b0684f3c10d79bb7411e0531c19134f331a7cbd3ac8f5af94a22771aeab3faeef6def230e176452e7f84a2e90883e864c94d0f26bebc56bba39", 0xe6}, {&(0x7f0000001500)="8027407836d6d6e76fb18805fc2eb5ed952ba8fb4e5138cdd7e4a70bddbfdf9f8cb75f460c089b6fe559639246c7b67a6fdb1e8054f22a8ad56944d4c66f7259fda0961eb0118dcdc157a3a3c689965869ecff7061bb329af91b973e5d4a78737ceb32e1bd74cf472ad8ec9eb8f4c085d80aec428b1cc44f45b982a0f3317adf2bbbef485d62a729a12e8ee674a5dbe0a298d472a1e3f518435ce2988e77aceafb7739157f3fbac99bb7768c34d3880ec6a6ff3c30d72ed56bbdd3c491031e6002c21ed3c923af60bbf2954825d607f0fa43ff84c0c46deee2b066296cb57cfa4fb75a", 0xe3}], 0x5, &(0x7f0000001700)=ANY=[@ANYBLOB="0000f7ffffff00008400000002000000de000000ff0f00000d0000008f27c6a0abd39433f1331ec5cce242760cecd14ec47d47c0e68a83d24994606c291b7630300e366ee7ccd223c2f5b4a4", @ANYRES32=r2], 0x20}, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000000)={0x3ff, 0x1, 0x2, 0x17, 0x10, 0x7}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 20:34:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000280)=0x0) r2 = dup(r0) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x2, 0x800, 0x23a7, 0x99, 0x0, 0x2, 0x800, 0x3, 0x3, 0x1f, 0xff, 0x2, 0x80, 0xea18, 0x9, 0x8467, 0x100, 0x80, 0x1, 0x3, 0x3, 0x4, 0x80000001, 0x0, 0x3, 0x5, 0xd9e6, 0x8, 0x9, 0x401, 0x80, 0x1, 0x100000000, 0x3, 0x7, 0xffff, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x1080, 0x100, 0xb3, 0x7, 0x800, 0x656, 0x3}, r1, 0x10, r2, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000003c0), 0x4) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x142) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x800, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x40000) 20:34:46 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x0, 0x5}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:46 executing program 1 (fault-call:6 fault-nth:45): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:46 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:46 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x0, 0xa6}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 272.653763] RAX: ffffffffffffffda RBX: 00007fda18baec90 RCX: 0000000000459279 [ 272.661046] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000004 [ 272.668327] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 272.675608] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fda18baf6d4 [ 272.682887] R13: 00000000004c6847 R14: 00000000004db7d8 R15: 0000000000000005 [ 272.690792] CPU: 1 PID: 19074 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 272.697920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.697930] Call Trace: [ 272.710012] dump_stack+0x138/0x19c [ 272.713666] should_fail.cold+0x10f/0x159 [ 272.717868] should_failslab+0xdb/0x130 [ 272.721868] kmem_cache_alloc_node_trace+0x280/0x770 [ 272.726993] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 272.732471] __kmalloc_node_track_caller+0x3d/0x80 [ 272.737426] __kmalloc_reserve.isra.0+0x40/0xe0 [ 272.742113] __alloc_skb+0xcf/0x500 [ 272.742124] ? skb_scrub_packet+0x4b0/0x4b0 [ 272.742138] ? trace_hardirqs_on_caller+0x400/0x590 [ 272.742152] sk_stream_alloc_skb+0xb3/0x780 [ 272.742161] ? tcp_send_mss+0xa4/0x2f0 [ 272.742173] tcp_sendmsg_locked+0xf56/0x3400 [ 272.742202] ? tcp_sendpage+0x60/0x60 [ 272.742214] ? trace_hardirqs_on_caller+0x400/0x590 [ 272.742225] ? trace_hardirqs_on+0xd/0x10 [ 272.742240] tcp_sendmsg+0x30/0x50 [ 272.755229] inet_sendmsg+0x122/0x500 [ 272.763454] ? inet_recvmsg+0x500/0x500 [ 272.763468] sock_sendmsg+0xce/0x110 [ 272.763478] SYSC_sendto+0x206/0x310 [ 272.763489] ? SYSC_connect+0x2d0/0x2d0 [ 272.763501] ? lock_downgrade+0x6e0/0x6e0 [ 272.763523] ? wait_for_completion+0x420/0x420 [ 272.763533] ? __sb_end_write+0xc1/0x100 [ 272.763545] ? fput+0xd4/0x150 [ 272.763555] ? SyS_write+0x10b/0x180 [ 272.763569] SyS_sendto+0x40/0x50 [ 272.763579] ? SyS_getpeername+0x30/0x30 [ 272.763591] do_syscall_64+0x1e8/0x640 [ 272.763601] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 272.763616] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 272.780972] RIP: 0033:0x459279 [ 272.780978] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 272.780988] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 272.780994] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 272.780999] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 272.781005] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 272.781010] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 [ 272.781293] net_ratelimit: 16 callbacks suppressed [ 272.781298] protocol 88fb is buggy, dev hsr_slave_0 [ 272.796194] protocol 88fb is buggy, dev hsr_slave_1 20:34:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}, {0x0, 0x1000}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x1, 0x5}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 272.816898] protocol 88fb is buggy, dev hsr_slave_0 [ 272.823900] protocol 88fb is buggy, dev hsr_slave_1 [ 272.824018] protocol 88fb is buggy, dev hsr_slave_0 [ 272.863887] protocol 88fb is buggy, dev hsr_slave_1 [ 272.886060] protocol 88fb is buggy, dev hsr_slave_0 [ 272.886115] protocol 88fb is buggy, dev hsr_slave_1 20:34:46 executing program 0 (fault-call:5 fault-nth:8): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:46 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='rdma.current\x00', 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000180)=0x8aaf, &(0x7f00000001c0)=0x2) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x81, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000500)={0x0, 0x0}) sched_rr_get_interval(r3, &(0x7f0000000540)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f00000000c0)=0x5, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r4 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000100)={'ip6_vti0\x00', 0xffffffffffffffe0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x7, &(0x7f0000000340)=""/112) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000400)={0x0, 0xfffffffffffffffc, 0x9a19, [], &(0x7f00000003c0)=0x100000000000000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000440)={0x2, 0x861, 0x8, 'queue0\x00', 0x6}) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) 20:34:46 executing program 1 (fault-call:6 fault-nth:46): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}, {0x0, 0x5}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 273.098323] FAULT_INJECTION: forcing a failure. [ 273.098323] name failslab, interval 1, probability 0, space 0, times 0 [ 273.109660] CPU: 0 PID: 19103 Comm: syz-executor.0 Not tainted 4.14.124 #18 [ 273.116782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.126160] Call Trace: [ 273.128794] dump_stack+0x138/0x19c [ 273.132450] should_fail.cold+0x10f/0x159 [ 273.136623] should_failslab+0xdb/0x130 [ 273.140619] kmem_cache_alloc+0x47/0x780 [ 273.144692] ? lock_acquire+0x16f/0x430 20:34:46 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x0, 0x8}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 273.148675] ? check_preemption_disabled+0x3c/0x250 [ 273.148693] skb_clone+0x129/0x320 [ 273.148705] dev_queue_xmit_nit+0x296/0x8c0 [ 273.148722] dev_hard_start_xmit+0xa7/0x8b0 [ 273.165933] ? assoc_array_gc+0x1140/0x11d0 [ 273.170279] __dev_queue_xmit+0x1d95/0x25e0 [ 273.174619] ? netdev_pick_tx+0x300/0x300 [ 273.180259] ? skb_clone+0x129/0x320 [ 273.184012] ? memcpy+0x46/0x50 [ 273.187398] ? __copy_skb_header+0x2b8/0x3e0 [ 273.191834] ? __skb_clone+0x271/0x800 20:34:46 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 273.195744] dev_queue_xmit+0x18/0x20 [ 273.199565] ? dev_queue_xmit+0x18/0x20 [ 273.203566] __netlink_deliver_tap+0x503/0x7d0 [ 273.208177] __netlink_sendskb+0x1ad/0x1d0 [ 273.220728] netlink_unicast+0x64e/0x780 [ 273.224801] ? netlink_attachskb+0x6a0/0x6a0 [ 273.224817] netlink_ack+0x51d/0x9a0 [ 273.224831] ? netlink_sendmsg+0xc60/0xc60 [ 273.224846] netlink_rcv_skb+0x2fc/0x3c0 [ 273.224863] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 273.233092] ? netlink_ack+0x9a0/0x9a0 [ 273.233111] ? lock_downgrade+0x6e0/0x6e0 [ 273.233130] rtnetlink_rcv+0x1d/0x30 [ 273.257986] netlink_unicast+0x45d/0x780 [ 273.262073] ? netlink_attachskb+0x6a0/0x6a0 [ 273.266510] ? security_netlink_send+0x81/0xb0 [ 273.271125] netlink_sendmsg+0x7c4/0xc60 [ 273.275270] ? netlink_unicast+0x780/0x780 [ 273.279540] ? security_socket_sendmsg+0x89/0xb0 [ 273.284318] ? netlink_unicast+0x780/0x780 [ 273.288585] sock_sendmsg+0xce/0x110 [ 273.292337] ___sys_sendmsg+0x349/0x840 20:34:46 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 273.296323] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 273.301102] ? find_held_lock+0x35/0x130 [ 273.305195] ? __fget+0x210/0x370 [ 273.308757] ? __fget+0x237/0x370 [ 273.312236] ? __fget_light+0x172/0x1f0 [ 273.316229] ? __fdget+0x1b/0x20 [ 273.319615] ? sockfd_lookup_light+0xb4/0x160 [ 273.324128] __sys_sendmmsg+0x152/0x3a0 [ 273.328136] ? SyS_sendmsg+0x50/0x50 [ 273.331870] ? lock_downgrade+0x6e0/0x6e0 [ 273.336059] ? __mutex_unlock_slowpath+0x71/0x800 [ 273.340955] ? check_preemption_disabled+0x3c/0x250 [ 273.345993] ? wait_for_completion+0x420/0x420 [ 273.350599] ? __sb_end_write+0xc1/0x100 [ 273.354683] ? SyS_write+0x10b/0x180 [ 273.358407] SyS_sendmmsg+0x35/0x60 [ 273.362036] ? __sys_sendmmsg+0x3a0/0x3a0 [ 273.366212] do_syscall_64+0x1e8/0x640 [ 273.370103] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 273.374965] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 273.380152] RIP: 0033:0x459279 [ 273.383334] RSP: 002b:00007fda18baec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 273.391571] RAX: ffffffffffffffda RBX: 00007fda18baec90 RCX: 0000000000459279 [ 273.398845] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000004 [ 273.406109] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 273.413384] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fda18baf6d4 [ 273.420648] R13: 00000000004c6847 R14: 00000000004db7d8 R15: 0000000000000005 [ 273.430189] protocol 88fb is buggy, dev hsr_slave_0 [ 273.435375] protocol 88fb is buggy, dev hsr_slave_1 20:34:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000000c0)={'security\x00', 0xe4, "bc21553721b1cdad5a681625d87420d7c27f4ad4b810267c2c3b61ae4d0a698f0bdcde3c398ae802fa1385675271d4d8a2fff25d9fe1963c6b1581bfb8ee9eaff2b32c5f2ed8d5096fec9e400a1a0daf3950e913e63b143e45d6fb939f680b85c6b3af700928fc3591807733e116246c817f68a8b8fe477f972657c62003b1341e6488370d7b6c17cc6db393f3da6cc6067ffb783faaf480adfb7fd352381ca3fdd834b6143caecec9766736c62f32842927c30324f12901c166f09fecd0a4f56d6913eeaf3ab99e21ca0a653ec563926933d5736299c7b920b7e6becdf222d826a73b5a"}, &(0x7f0000000000)=0x108) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:47 executing program 0 (fault-call:5 fault-nth:9): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 273.452699] FAULT_INJECTION: forcing a failure. [ 273.452699] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 273.535957] FAULT_INJECTION: forcing a failure. [ 273.535957] name failslab, interval 1, probability 0, space 0, times 0 [ 273.539666] CPU: 0 PID: 19119 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 273.554345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.563712] Call Trace: [ 273.566318] dump_stack+0x138/0x19c [ 273.570046] should_fail.cold+0x10f/0x159 [ 273.574240] __alloc_pages_nodemask+0x1d6/0x7a0 [ 273.578915] ? find_held_lock+0x35/0x130 20:34:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x8, 0xa6}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 273.582991] ? __alloc_pages_slowpath+0x2930/0x2930 [ 273.588030] ? iov_iter_advance+0x218/0xc60 [ 273.592370] alloc_pages_current+0xec/0x1e0 [ 273.596709] skb_page_frag_refill+0x1d3/0x3e0 [ 273.601227] ? __phys_addr_symbol+0x23/0x60 [ 273.605742] sk_page_frag_refill+0x53/0x1c0 [ 273.610084] tcp_sendmsg_locked+0x7c7/0x3400 [ 273.614532] ? tcp_sendpage+0x60/0x60 [ 273.618375] ? trace_hardirqs_on_caller+0x400/0x590 [ 273.623423] ? trace_hardirqs_on+0xd/0x10 [ 273.627603] tcp_sendmsg+0x30/0x50 [ 273.631164] inet_sendmsg+0x122/0x500 20:34:47 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [], 0x0, 0x10001, 0x7, 0x0, 0x5}}}) [ 273.634985] ? inet_recvmsg+0x500/0x500 [ 273.638965] sock_sendmsg+0xce/0x110 [ 273.642690] SYSC_sendto+0x206/0x310 [ 273.646415] ? SYSC_connect+0x2d0/0x2d0 [ 273.650396] ? lock_downgrade+0x6e0/0x6e0 [ 273.654566] ? wait_for_completion+0x420/0x420 [ 273.659165] ? __sb_end_write+0xc1/0x100 [ 273.663303] ? fput+0xd4/0x150 [ 273.666506] ? SyS_write+0x10b/0x180 [ 273.670239] SyS_sendto+0x40/0x50 [ 273.673708] ? SyS_getpeername+0x30/0x30 [ 273.677794] do_syscall_64+0x1e8/0x640 [ 273.681697] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 273.686565] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 273.691761] RIP: 0033:0x459279 [ 273.694957] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 273.702672] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 273.710031] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 273.717301] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 273.724571] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 20:34:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}, {0x0, 0xa6}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:47 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x7, 0x0, 0x5}}}) [ 273.731836] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 [ 273.757118] CPU: 1 PID: 19129 Comm: syz-executor.0 Not tainted 4.14.124 #18 [ 273.764278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.773723] Call Trace: [ 273.776333] dump_stack+0x138/0x19c [ 273.779985] should_fail.cold+0x10f/0x159 [ 273.784149] should_failslab+0xdb/0x130 [ 273.788136] kmem_cache_alloc+0x47/0x780 [ 273.792216] ? lock_downgrade+0x6e0/0x6e0 [ 273.796374] ? netlink_skb_set_owner_r+0x14b/0x1b0 [ 273.801319] skb_clone+0x129/0x320 [ 273.804958] __netlink_deliver_tap+0x55e/0x7d0 [ 273.809559] __netlink_sendskb+0x1ad/0x1d0 [ 273.813803] netlink_unicast+0x64e/0x780 [ 273.817899] ? netlink_attachskb+0x6a0/0x6a0 [ 273.822321] netlink_ack+0x51d/0x9a0 [ 273.826048] ? netlink_sendmsg+0xc60/0xc60 [ 273.830298] netlink_rcv_skb+0x2fc/0x3c0 [ 273.834375] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 273.838977] ? netlink_ack+0x9a0/0x9a0 [ 273.842883] ? lock_downgrade+0x6e0/0x6e0 [ 273.847039] rtnetlink_rcv+0x1d/0x30 [ 273.850759] netlink_unicast+0x45d/0x780 [ 273.854836] ? netlink_attachskb+0x6a0/0x6a0 [ 273.859261] ? security_netlink_send+0x81/0xb0 [ 273.863853] netlink_sendmsg+0x7c4/0xc60 [ 273.868111] ? netlink_unicast+0x780/0x780 [ 273.872362] ? security_socket_sendmsg+0x89/0xb0 [ 273.877127] ? netlink_unicast+0x780/0x780 [ 273.881377] sock_sendmsg+0xce/0x110 [ 273.885115] ___sys_sendmsg+0x349/0x840 [ 273.889110] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 273.893886] ? find_held_lock+0x35/0x130 [ 273.897965] ? __fget+0x210/0x370 [ 273.901447] ? __fget+0x237/0x370 [ 273.904919] ? __fget_light+0x172/0x1f0 [ 273.908896] ? __fdget+0x1b/0x20 [ 273.912274] ? sockfd_lookup_light+0xb4/0x160 [ 273.916784] __sys_sendmmsg+0x152/0x3a0 [ 273.920788] ? SyS_sendmsg+0x50/0x50 [ 273.924509] ? lock_downgrade+0x6e0/0x6e0 [ 273.928673] ? __mutex_unlock_slowpath+0x71/0x800 [ 273.933544] ? check_preemption_disabled+0x3c/0x250 [ 273.938585] ? wait_for_completion+0x420/0x420 [ 273.943189] ? __sb_end_write+0xc1/0x100 [ 273.947265] ? SyS_write+0x10b/0x180 [ 273.950997] SyS_sendmmsg+0x35/0x60 [ 273.954648] ? __sys_sendmmsg+0x3a0/0x3a0 [ 273.958833] do_syscall_64+0x1e8/0x640 [ 273.962910] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 273.967769] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 273.972972] RIP: 0033:0x459279 [ 273.976162] RSP: 002b:00007fda18baec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 273.983874] RAX: ffffffffffffffda RBX: 00007fda18baec90 RCX: 0000000000459279 [ 273.983881] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000004 [ 273.983887] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 20:34:47 executing program 1 (fault-call:6 fault-nth:47): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xc7ce}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e23, 0x8, @local, 0x5}}}, 0x84) 20:34:47 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x0, 0x5}}}) 20:34:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x8, 0x8}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000050}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf8, r3, 0x120, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff00000000}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x401}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="9a51cc4cb08453cfec126019fbeaf07b"}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x87}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x800) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000240)=0x401, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000340)={0x10, 0x30, 0xfa00, {&(0x7f0000000280), 0x3, {0xa, 0x4e21, 0x8, @local}, r4}}, 0x38) [ 273.983892] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fda18baf6d4 [ 273.983898] R13: 00000000004c6847 R14: 00000000004db7d8 R15: 0000000000000005 20:34:47 executing program 0 (fault-call:5 fault-nth:10): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x800000009, 0x1, {0xe, @pix={0x0, 0xffffffff00000001}}}) 20:34:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}, {0x0, 0x8}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 274.107350] FAULT_INJECTION: forcing a failure. [ 274.107350] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 274.132967] FAULT_INJECTION: forcing a failure. [ 274.132967] name failslab, interval 1, probability 0, space 0, times 0 20:34:47 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2}}}) [ 274.155579] CPU: 0 PID: 19155 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 274.162756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.172124] Call Trace: [ 274.174736] dump_stack+0x138/0x19c [ 274.178384] should_fail.cold+0x10f/0x159 [ 274.182999] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 274.188473] __alloc_pages_nodemask+0x1d6/0x7a0 [ 274.193252] ? find_held_lock+0x35/0x130 [ 274.197339] ? __alloc_pages_slowpath+0x2930/0x2930 [ 274.202389] ? iov_iter_advance+0x218/0xc60 20:34:47 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2}}}) [ 274.206738] alloc_pages_current+0xec/0x1e0 [ 274.211081] skb_page_frag_refill+0x1d3/0x3e0 [ 274.215599] ? __phys_addr_symbol+0x23/0x60 [ 274.220036] sk_page_frag_refill+0x53/0x1c0 [ 274.224385] tcp_sendmsg_locked+0x7c7/0x3400 [ 274.228826] ? tcp_sendpage+0x60/0x60 [ 274.232638] ? trace_hardirqs_on_caller+0x400/0x590 [ 274.237668] ? trace_hardirqs_on+0xd/0x10 [ 274.241837] tcp_sendmsg+0x30/0x50 [ 274.245392] inet_sendmsg+0x122/0x500 [ 274.249218] ? inet_recvmsg+0x500/0x500 [ 274.253215] sock_sendmsg+0xce/0x110 20:34:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000000)=0x68) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 274.257031] SYSC_sendto+0x206/0x310 [ 274.260775] ? SYSC_connect+0x2d0/0x2d0 [ 274.264889] ? lock_downgrade+0x6e0/0x6e0 [ 274.269168] ? wait_for_completion+0x420/0x420 [ 274.273779] ? __sb_end_write+0xc1/0x100 [ 274.277885] ? fput+0xd4/0x150 [ 274.281096] ? SyS_write+0x10b/0x180 [ 274.284830] SyS_sendto+0x40/0x50 [ 274.289632] ? SyS_getpeername+0x30/0x30 [ 274.293712] do_syscall_64+0x1e8/0x640 [ 274.297616] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 274.302591] entry_SYSCALL_64_after_hwframe+0x42/0xb7 20:34:47 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x45, 0x4, 0x1, 0x99c4fd991fa63fb7, 0x7, 0x91, 0xff, 0x40, 0xfffffffffffffff9, 0xffffffff, 0x6, 0x8, 0x3, 0x5, 0x2, 0x25}}) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x1, 0x1000, &(0x7f0000000400)="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"}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x3, 0x81, 0xfffffffffffffd6e, 0x7, 0x4}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e22, 0x100000001, @remote}}}, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4000000005, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) [ 274.307797] RIP: 0033:0x459279 [ 274.311005] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 274.318744] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 274.326153] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 274.333461] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 274.340928] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 274.348226] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 [ 274.370911] CPU: 1 PID: 19164 Comm: syz-executor.0 Not tainted 4.14.124 #18 [ 274.378154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.378164] Call Trace: [ 274.390160] dump_stack+0x138/0x19c [ 274.390179] should_fail.cold+0x10f/0x159 [ 274.390195] should_failslab+0xdb/0x130 [ 274.390209] kmem_cache_alloc_node_trace+0x280/0x770 [ 274.390224] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 274.398121] __kmalloc_node_track_caller+0x3d/0x80 [ 274.407313] __kmalloc_reserve.isra.0+0x40/0xe0 [ 274.417723] __alloc_skb+0xcf/0x500 [ 274.426060] ? skb_scrub_packet+0x4b0/0x4b0 [ 274.430405] ? security_socket_getpeersec_dgram+0x8b/0xc0 [ 274.435967] netlink_sendmsg+0x874/0xc60 [ 274.440052] ? netlink_unicast+0x780/0x780 [ 274.444312] ? security_socket_sendmsg+0x89/0xb0 [ 274.449088] ? netlink_unicast+0x780/0x780 [ 274.453352] sock_sendmsg+0xce/0x110 [ 274.457099] ___sys_sendmsg+0x349/0x840 [ 274.461104] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 274.465897] ? trace_hardirqs_on+0x10/0x10 [ 274.470165] ? save_trace+0x290/0x290 [ 274.474001] ? __might_fault+0x110/0x1d0 [ 274.478088] ? find_held_lock+0x35/0x130 [ 274.482187] ? __might_fault+0x110/0x1d0 [ 274.486291] __sys_sendmmsg+0x152/0x3a0 [ 274.490302] ? SyS_sendmsg+0x50/0x50 [ 274.494066] ? lock_downgrade+0x6e0/0x6e0 [ 274.498339] ? __mutex_unlock_slowpath+0x71/0x800 [ 274.503219] ? check_preemption_disabled+0x3c/0x250 [ 274.508278] ? wait_for_completion+0x420/0x420 [ 274.512894] ? __sb_end_write+0xc1/0x100 [ 274.516983] ? SyS_write+0x10b/0x180 [ 274.520720] SyS_sendmmsg+0x35/0x60 [ 274.524355] ? __sys_sendmmsg+0x3a0/0x3a0 [ 274.528530] do_syscall_64+0x1e8/0x640 [ 274.532441] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 274.537316] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 274.542524] RIP: 0033:0x459279 [ 274.545740] RSP: 002b:00007fda18baec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 274.553474] RAX: ffffffffffffffda RBX: 00007fda18baec90 RCX: 0000000000459279 [ 274.560854] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000004 20:34:48 executing program 1 (fault-call:6 fault-nth:48): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:48 executing program 2: ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'bcsh0\x00', {0x2, 0x4e21, @local}}) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x9, @bearer=@l2={'ib', 0x3a, 'teql0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0xc000) ioctl(r0, 0x1000008912, &(0x7f0000000040)="18dca5055e0bcfec7bc670") r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x0, 0x10001, 0x400, 0x5}]}, 0x10) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x8000000000000009, 0x2, {0xb, @sdr={0x3277795f, 0x6}}}) 20:34:48 executing program 4 (fault-call:2 fault-nth:0): r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2}}}) 20:34:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20001, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x2001, 0x0) linkat(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x400) 20:34:48 executing program 0 (fault-call:5 fault-nth:11): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 274.568265] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 274.575624] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fda18baf6d4 [ 274.582936] R13: 00000000004c6847 R14: 00000000004db7d8 R15: 0000000000000005 [ 274.675003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pig=19197 comm=syz-executor.2 [ 274.676097] FAULT_INJECTION: forcing a failure. [ 274.676097] name failslab, interval 1, probability 0, space 0, times 0 [ 274.712673] CPU: 1 PID: 19199 Comm: syz-executor.4 Not tainted 4.14.124 #18 [ 274.719842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.729211] Call Trace: [ 274.731821] dump_stack+0x138/0x19c [ 274.733740] FAULT_INJECTION: forcing a failure. [ 274.733740] name failslab, interval 1, probability 0, space 0, times 0 [ 274.735470] should_fail.cold+0x10f/0x159 [ 274.750909] should_failslab+0xdb/0x130 [ 274.754885] kmem_cache_alloc_node_trace+0x280/0x770 [ 274.760000] __kmalloc_node+0x3d/0x80 [ 274.763815] kvmalloc_node+0x4e/0xe0 [ 274.767531] video_usercopy+0x365/0xf20 [ 274.771505] ? lock_downgrade+0x6e0/0x6e0 [ 274.775654] ? video_ioctl2+0x40/0x40 [ 274.779471] ? v4l_g_priority+0xa0/0xa0 [ 274.783449] ? mutex_trylock+0x1c0/0x1c0 [ 274.787538] video_ioctl2+0x2d/0x40 [ 274.791173] v4l2_ioctl+0x1c0/0x300 [ 274.794801] ? v4l2_open+0x300/0x300 [ 274.798513] do_vfs_ioctl+0x7ae/0x1060 [ 274.802403] ? selinux_file_mprotect+0x5d0/0x5d0 [ 274.807155] ? lock_downgrade+0x6e0/0x6e0 [ 274.811338] ? ioctl_preallocate+0x1c0/0x1c0 [ 274.815749] ? __fget+0x237/0x370 [ 274.819225] ? security_file_ioctl+0x89/0xb0 [ 274.823645] SyS_ioctl+0x8f/0xc0 [ 274.827027] ? do_vfs_ioctl+0x1060/0x1060 [ 274.831210] do_syscall_64+0x1e8/0x640 [ 274.835127] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 274.839981] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 274.845174] RIP: 0033:0x459279 [ 274.848367] RSP: 002b:00007ff04e046c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.856097] RAX: ffffffffffffffda RBX: 00007ff04e046c90 RCX: 0000000000459279 [ 274.863371] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000003 20:34:48 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20000, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2}) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000180)=""/35) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3, 0x202400) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000040)) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) [ 274.870648] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 274.878042] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff04e0476d4 [ 274.885322] R13: 00000000004c41d9 R14: 00000000004d7e60 R15: 0000000000000004 [ 274.892619] CPU: 0 PID: 19198 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 274.899753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.909119] Call Trace: [ 274.911734] dump_stack+0x138/0x19c [ 274.915388] should_fail.cold+0x10f/0x159 [ 274.919656] should_failslab+0xdb/0x130 [ 274.923657] kmem_cache_alloc+0x47/0x780 [ 274.927747] ? lock_acquire+0x16f/0x430 [ 274.931742] ? check_preemption_disabled+0x3c/0x250 [ 274.936774] skb_clone+0x129/0x320 [ 274.940328] dev_queue_xmit_nit+0x296/0x8c0 [ 274.944676] dev_hard_start_xmit+0xa7/0x8b0 [ 274.949055] ? assoc_array_gc+0x1140/0x11d0 [ 274.953398] __dev_queue_xmit+0x1d95/0x25e0 [ 274.957733] ? trace_hardirqs_on+0xd/0x10 [ 274.961957] ? __local_bh_enable_ip+0x99/0x1a0 [ 274.966559] ? netdev_pick_tx+0x300/0x300 [ 274.970717] ? find_held_lock+0x35/0x130 [ 274.974794] ? ip_finish_output+0x56d/0xc60 [ 274.979152] ? mark_held_locks+0xb1/0x100 [ 274.983328] dev_queue_xmit+0x18/0x20 [ 274.987149] ? dev_queue_xmit+0x18/0x20 [ 274.991156] ip_finish_output2+0xddc/0x14a0 [ 274.995583] ? get_info+0x560/0x560 [ 274.995601] ? ip_copy_metadata+0x9b0/0x9b0 [ 274.995617] ip_finish_output+0x56d/0xc60 [ 274.995629] ? ip_finish_output+0x56d/0xc60 [ 275.003591] ip_output+0x1e6/0x590 [ 275.003602] ? ip_mc_output+0xd40/0xd40 [ 275.003614] ? __lock_is_held+0xb6/0x140 [ 275.003625] ? check_preemption_disabled+0x3c/0x250 [ 275.003637] ? ip_fragment.constprop.0+0x200/0x200 [ 275.003649] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 275.003660] ip_local_out+0x97/0x170 [ 275.003671] ip_queue_xmit+0x7d7/0x1b10 [ 275.015690] ? __tcp_v4_send_check+0x1c0/0x360 [ 275.015707] __tcp_transmit_skb+0x172c/0x2fe0 [ 275.015729] ? __tcp_select_window+0x6e0/0x6e0 [ 275.023763] ? kvm_clock_read+0x23/0x40 [ 275.023778] ? sched_clock_cpu+0x1b/0x1c0 [ 275.023788] ? tcp_small_queue_check+0x184/0x1e0 [ 275.023800] tcp_write_xmit+0x523/0x48b0 [ 275.023815] ? iov_iter_advance+0x218/0xc60 [ 275.023837] tcp_push_one+0xc1/0xf0 [ 275.033775] tcp_sendmsg_locked+0x1571/0x3400 [ 275.033805] ? tcp_sendpage+0x60/0x60 [ 275.042988] ? trace_hardirqs_on_caller+0x400/0x590 [ 275.042998] ? trace_hardirqs_on+0xd/0x10 [ 275.043015] tcp_sendmsg+0x30/0x50 [ 275.043028] inet_sendmsg+0x122/0x500 [ 275.043039] ? inet_recvmsg+0x500/0x500 [ 275.043052] sock_sendmsg+0xce/0x110 [ 275.043067] SYSC_sendto+0x206/0x310 [ 275.051666] ? SYSC_connect+0x2d0/0x2d0 20:34:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7, &(0x7f00000000c0)="6cdca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000340)={0x0, 0x1}, &(0x7f0000000380)=0x8) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000040)=0x100) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r2, 0x3f}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={r3, @in6={{0xa, 0x4e20, 0x1, @local, 0x5}}, 0x400, 0x8, 0x9f4a, 0x20, 0x1}, &(0x7f00000001c0)=0x98) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x2, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000003c0)={0x81, 0xec, "1af53f0b03e5abb2d4418bee319f754b8cd534d50ae914eeb912875070c53ccbf641844c0bd163b57d428afb3452de65a1655ee5df86aeed35726c0c61bdc4451f2f6c72b8b1ecfd431ea97244ffe914bdead928426a1abf544c2674c6d4ad44161eced2fd0f178e2706b04f125e0d278b6144879d8602a982568baa4b06465e472566142a30b38d82242f2f924e6f6cfd14bfe17eb07e485e4a14ce421ca4e4127ca6ec5eb0f1a2aab45d99d431e455188ec18c145ff0ed23f7f104c854e0d4e8500b6667dac580c4852417ec9dcf325077076c989dcc88d13c8e30e551c464a0495ee8a1eee141f692a5e2"}) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) 20:34:48 executing program 3: sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc2604110, &(0x7f00000000c0)="13f220b79f714bcabe2f94d9825b4ebcf3464bbe5b0cf361c47b000000000000000600030000000000006760824d1159c50e6681dab7ce78a0b9cee23bd7bfbbdd2b5313e3") 20:34:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x42, &(0x7f0000000180)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:48 executing program 4 (fault-call:2 fault-nth:1): r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2}}}) 20:34:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 275.051682] ? lock_downgrade+0x6e0/0x6e0 [ 275.051704] ? wait_for_completion+0x420/0x420 [ 275.060872] ? __sb_end_write+0xc1/0x100 [ 275.060886] ? fput+0xd4/0x150 [ 275.060897] ? SyS_write+0x10b/0x180 [ 275.060913] SyS_sendto+0x40/0x50 [ 275.060925] ? SyS_getpeername+0x30/0x30 [ 275.060938] do_syscall_64+0x1e8/0x640 [ 275.060947] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 275.060966] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 275.167076] RIP: 0033:0x459279 [ 275.170282] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 275.173917] FAULT_INJECTION: forcing a failure. [ 275.173917] name failslab, interval 1, probability 0, space 0, times 0 [ 275.178043] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 275.178050] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 275.178056] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 275.178061] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 275.178066] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 [ 275.246801] CPU: 1 PID: 19219 Comm: syz-executor.4 Not tainted 4.14.124 #18 [ 275.253957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.263333] Call Trace: [ 275.265945] dump_stack+0x138/0x19c [ 275.269600] should_fail.cold+0x10f/0x159 [ 275.273772] should_failslab+0xdb/0x130 [ 275.277765] __kmalloc+0x2f0/0x7a0 [ 275.281322] ? __vb2_queue_alloc+0x101/0xdb0 [ 275.281335] __vb2_queue_alloc+0x101/0xdb0 [ 275.281353] ? unwind_get_return_address+0x61/0xa0 [ 275.281367] vb2_core_create_bufs+0x2c3/0x640 [ 275.281381] ? vivid_rds_gen_fill+0x440/0x440 [ 275.281391] ? __vb2_queue_alloc+0xdb0/0xdb0 [ 275.281403] ? save_trace+0x290/0x290 [ 275.281413] ? __lock_acquire+0x5f9/0x45e0 [ 275.281423] ? __kmalloc_node+0x51/0x80 [ 275.281432] ? kvmalloc_node+0x4e/0xe0 [ 275.281441] ? video_usercopy+0x365/0xf20 [ 275.281454] vb2_create_bufs+0x33d/0x640 [ 275.281464] ? save_trace+0x290/0x290 [ 275.281479] ? vb2_thread_start.cold+0x27/0x27 [ 275.281489] ? save_trace+0x290/0x290 [ 275.281504] vb2_ioctl_create_bufs+0x232/0x3a0 [ 275.299598] v4l_create_bufs+0x11e/0x1f0 [ 275.299612] ? __might_fault+0x110/0x1d0 [ 275.299625] __video_do_ioctl+0x6eb/0x740 [ 275.299641] ? video_ioctl2+0x40/0x40 [ 275.299655] ? kasan_check_write+0x14/0x20 [ 275.308570] ? _copy_from_user+0x99/0x110 [ 275.308584] video_usercopy+0x3d3/0xf20 [ 275.308597] ? lock_downgrade+0x6c0/0x6e0 [ 275.308606] ? video_ioctl2+0x40/0x40 [ 275.308619] ? v4l_g_priority+0xa0/0xa0 [ 275.308630] ? mutex_trylock+0x1c0/0x1c0 [ 275.308651] video_ioctl2+0x2d/0x40 [ 275.397587] v4l2_ioctl+0x1c0/0x300 [ 275.401285] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'. [ 275.401333] ? v4l2_open+0x300/0x300 [ 275.401347] do_vfs_ioctl+0x7ae/0x1060 [ 275.401361] ? selinux_file_mprotect+0x5d0/0x5d0 [ 275.401372] ? lock_downgrade+0x6e0/0x6e0 20:34:48 executing program 1 (fault-call:6 fault-nth:49): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d8000ffb200000000000000ec007901cc000180f0ffffebffff6e263f", 0x29}], 0xffffffffffffd7b}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:48 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x10, 0x2) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x82}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x400040, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0x24) 20:34:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x1ff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000240)="a86d4f8aff822b2f8bc5070d37f1ad13977a6e0b05d3317bbbdd216392", 0x1d}], 0x1000, &(0x7f00000002c0)={[{@fat=@check_relaxed='check=relaxed'}, {@dots='dots'}, {@nodots='nodots'}, {@nodots='nodots'}], [{@smackfshat={'smackfshat', 0x3d, '.eth0\xf1mime_type'}}, {@obj_user={'obj_user', 0x3d, 'wlan1vmnet0%'}}, {@smackfshat={'smackfshat'}}, {@dont_measure='dont_measure'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffff94, &(0x7f0000000340)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e5d3f", 0x29}], 0x1}, 0x400000) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 275.401385] ? ioctl_preallocate+0x1c0/0x1c0 [ 275.431066] ? __fget+0x237/0x370 [ 275.434537] ? security_file_ioctl+0x89/0xb0 [ 275.438964] SyS_ioctl+0x8f/0xc0 [ 275.442353] ? do_vfs_ioctl+0x1060/0x1060 [ 275.446662] do_syscall_64+0x1e8/0x640 [ 275.446674] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 275.446701] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 275.446710] RIP: 0033:0x459279 [ 275.446716] RSP: 002b:00007ff04e046c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 20:34:49 executing program 3: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x100000000000001}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$poke(0x4209, r0, &(0x7f00000000c0), 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xa85, 0x80840) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x100) [ 275.446728] RAX: ffffffffffffffda RBX: 00007ff04e046c90 RCX: 0000000000459279 [ 275.446734] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 275.446740] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 275.446746] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff04e0476d4 [ 275.446752] R13: 00000000004c41d9 R14: 00000000004d7e60 R15: 0000000000000004 [ 275.457996] FAULT_INJECTION: forcing a failure. [ 275.457996] name failslab, interval 1, probability 0, space 0, times 0 [ 275.505857] CPU: 1 PID: 19238 Comm: syz-executor.1 Not tainted 4.14.124 #18 20:34:49 executing program 1 (fault-call:6 fault-nth:50): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) [ 275.519955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.519960] Call Trace: [ 275.519979] dump_stack+0x138/0x19c [ 275.519998] should_fail.cold+0x10f/0x159 [ 275.520014] should_failslab+0xdb/0x130 [ 275.520027] kmem_cache_alloc_node+0x287/0x780 [ 275.520038] ? tcp_established_options+0x2c5/0x420 [ 275.520055] __alloc_skb+0x9c/0x500 [ 275.520066] ? skb_scrub_packet+0x4b0/0x4b0 [ 275.520079] ? trace_hardirqs_on_caller+0x400/0x590 [ 275.520094] sk_stream_alloc_skb+0xb3/0x780 20:34:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x8000}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) [ 275.520103] ? tcp_send_mss+0xa4/0x2f0 [ 275.520117] tcp_sendmsg_locked+0xf56/0x3400 [ 275.520144] ? tcp_sendpage+0x60/0x60 [ 275.520155] ? trace_hardirqs_on_caller+0x400/0x590 [ 275.520165] ? trace_hardirqs_on+0xd/0x10 [ 275.520179] tcp_sendmsg+0x30/0x50 [ 275.520202] inet_sendmsg+0x122/0x500 [ 275.520213] ? inet_recvmsg+0x500/0x500 [ 275.520224] sock_sendmsg+0xce/0x110 [ 275.520235] SYSC_sendto+0x206/0x310 [ 275.520246] ? SYSC_connect+0x2d0/0x2d0 [ 275.520257] ? lock_downgrade+0x6e0/0x6e0 [ 275.520278] ? wait_for_completion+0x420/0x420 [ 275.520288] ? __sb_end_write+0xc1/0x100 [ 275.520301] ? fput+0xd4/0x150 [ 275.520311] ? SyS_write+0x10b/0x180 [ 275.520324] SyS_sendto+0x40/0x50 [ 275.520334] ? SyS_getpeername+0x30/0x30 [ 275.520346] do_syscall_64+0x1e8/0x640 [ 275.520355] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 275.520371] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 275.520379] RIP: 0033:0x459279 [ 275.520384] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 275.520395] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 275.520401] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 275.520406] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 275.520411] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 275.520417] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 [ 275.578480] FAULT_INJECTION: forcing a failure. [ 275.578480] name failslab, interval 1, probability 0, space 0, times 0 [ 275.647368] CPU: 1 PID: 19247 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 275.664646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.664651] Call Trace: [ 275.664670] dump_stack+0x138/0x19c [ 275.664696] should_fail.cold+0x10f/0x159 [ 275.664713] should_failslab+0xdb/0x130 [ 275.664726] kmem_cache_alloc_node_trace+0x280/0x770 [ 275.664739] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 275.664754] __kmalloc_node_track_caller+0x3d/0x80 [ 275.664768] __kmalloc_reserve.isra.0+0x40/0xe0 [ 275.664781] __alloc_skb+0xcf/0x500 20:34:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r2 = msgget(0x0, 0x208) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) getgroups(0x1, &(0x7f0000000200)=[0xee00]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) r8 = gettid() msgctl$IPC_SET(r2, 0x1, &(0x7f00000004c0)={{0x9, r3, r4, r5, r6, 0x18, 0x4}, 0x3, 0x0, 0x10000, 0x8000, 0x7, 0x1, r7, r8}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) accept4(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x80, 0x80800) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf000}, 0x59, &(0x7f0000000200)={&(0x7f0000000240)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x75ce0d92, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x42e}}, 0x0) 20:34:49 executing program 4 (fault-call:2 fault-nth:2): r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2}}}) 20:34:49 executing program 1 (fault-call:6 fault-nth:51): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) [ 275.664792] ? skb_scrub_packet+0x4b0/0x4b0 [ 275.664806] ? trace_hardirqs_on_caller+0x400/0x590 [ 275.675739] sk_stream_alloc_skb+0xb3/0x780 [ 275.675750] ? tcp_send_mss+0xa4/0x2f0 [ 275.675763] tcp_sendmsg_locked+0xf56/0x3400 [ 275.675791] ? tcp_sendpage+0x60/0x60 [ 275.675804] ? trace_hardirqs_on_caller+0x400/0x590 [ 275.675818] ? trace_hardirqs_on+0xd/0x10 [ 275.690357] tcp_sendmsg+0x30/0x50 [ 275.690372] inet_sendmsg+0x122/0x500 [ 275.690384] ? inet_recvmsg+0x500/0x500 [ 275.690396] sock_sendmsg+0xce/0x110 [ 275.690408] SYSC_sendto+0x206/0x310 [ 275.704980] ? SYSC_connect+0x2d0/0x2d0 [ 275.704996] ? lock_downgrade+0x6e0/0x6e0 [ 275.705016] ? wait_for_completion+0x420/0x420 [ 275.705027] ? __sb_end_write+0xc1/0x100 [ 275.705042] ? fput+0xd4/0x150 [ 275.705051] ? SyS_write+0x10b/0x180 [ 275.705065] SyS_sendto+0x40/0x50 [ 275.705076] ? SyS_getpeername+0x30/0x30 [ 275.705091] do_syscall_64+0x1e8/0x640 [ 275.730661] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 275.730690] entry_SYSCALL_64_after_hwframe+0x42/0xb7 20:34:49 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 275.730700] RIP: 0033:0x459279 [ 275.730705] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 275.730716] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 275.730722] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 275.730728] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 275.730734] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 275.730740] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 [ 275.846213] FAULT_INJECTION: forcing a failure. [ 275.846213] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 275.916596] CPU: 1 PID: 19262 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 275.945163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.954516] Call Trace: [ 275.954538] dump_stack+0x138/0x19c [ 275.954554] should_fail.cold+0x10f/0x159 [ 275.954568] __alloc_pages_nodemask+0x1d6/0x7a0 [ 275.954578] ? find_held_lock+0x35/0x130 [ 275.954589] ? __alloc_pages_slowpath+0x2930/0x2930 [ 275.954605] ? iov_iter_advance+0x218/0xc60 [ 275.954623] alloc_pages_current+0xec/0x1e0 [ 275.969693] skb_page_frag_refill+0x1d3/0x3e0 [ 275.978844] ? __phys_addr_symbol+0x23/0x60 [ 275.978862] sk_page_frag_refill+0x53/0x1c0 [ 275.978876] tcp_sendmsg_locked+0x7c7/0x3400 [ 275.987543] ? tcp_sendpage+0x60/0x60 [ 275.987559] ? trace_hardirqs_on_caller+0x400/0x590 [ 275.996387] ? trace_hardirqs_on+0xd/0x10 [ 275.996406] tcp_sendmsg+0x30/0x50 [ 275.996421] inet_sendmsg+0x122/0x500 [ 276.025454] ? inet_recvmsg+0x500/0x500 [ 276.029444] sock_sendmsg+0xce/0x110 [ 276.033180] SYSC_sendto+0x206/0x310 [ 276.036918] ? SYSC_connect+0x2d0/0x2d0 [ 276.040921] ? lock_downgrade+0x6e0/0x6e0 [ 276.045099] ? wait_for_completion+0x420/0x420 [ 276.049746] ? __sb_end_write+0xc1/0x100 [ 276.053841] ? fput+0xd4/0x150 [ 276.057065] ? SyS_write+0x10b/0x180 [ 276.060810] SyS_sendto+0x40/0x50 [ 276.064296] ? SyS_getpeername+0x30/0x30 [ 276.068393] do_syscall_64+0x1e8/0x640 [ 276.072317] ? trace_hardirqs_off_thunk+0x1a/0x1c 20:34:49 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x4, 0x8ba, 0x4, 0x51, 0x7fff, 0x1, 0xfffffffffffffff8, 0xcae, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x101}, 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") getresuid(&(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0)) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x2, 0x409, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:49 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x3) write$sndseq(r2, &(0x7f00000000c0)=[{0x0, 0x2, 0x0, 0x0, @time={0x77359400}}], 0x30) close(r2) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) clone(0x10002102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = shmget$private(0x0, 0x4000, 0x54001000, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x111002, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @default, @rose={'rose', 0x0}, 0x6, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) fcntl$getflags(r1, 0x403) 20:34:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) [ 276.077189] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 276.082422] RIP: 0033:0x459279 [ 276.085619] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 276.093341] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 276.100625] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 276.107906] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 276.115185] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 276.122564] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000200)) 20:34:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{}, {0x0, 0x8}], 0x57, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:49 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2}}}) 20:34:49 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) ftruncate(r0, 0x29) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback}, 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 20:34:49 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80000, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) epoll_create1(0x80000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x2000000002, {0xb, @pix={0x7, 0x2, 0x41495043, 0xb, 0x3, 0x9, 0x0, 0x546f, 0x1, 0x0, 0x2, 0x1}}}) 20:34:49 executing program 1 (fault-call:6 fault-nth:52): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{}, {0x0, 0x8}], 0x0, 0x10001, 0x7, 0x0, 0x5}}}) 20:34:49 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x1004002) listen(r0, 0x0) [ 276.338250] Unknown ioctl -2146391551 [ 276.362275] Unknown ioctl -2146391551 20:34:49 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x8, 0xfffffffffffffffb, 0x6, 0x9, 0x4, [{0x7, 0x7fff, 0x8, 0x0, 0x0, 0x804}, {0x4, 0x6, 0x6, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x3, 0x0, 0x0, 0x2}, {0x1, 0x9, 0x4, 0x0, 0x0, 0x400}]}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2}}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={r1, 0x3ff, 0x121}, 0x8) ioctl$VT_ACTIVATE(r0, 0x5606, 0xa51) 20:34:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x40c401, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) 20:34:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{}, {0x0, 0x8}], 0x0, 0x0, 0x7, 0x0, 0x5}}}) [ 276.387059] FAULT_INJECTION: forcing a failure. [ 276.387059] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:34:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x3, r2, 0x1c, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0xa0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000300)={0x8, [0x4, 0x80000000, 0x4, 0x7, 0x101, 0xfffffffffffff7d7, 0x6, 0x4]}) sendto$inet(r0, &(0x7f00000001c0)='j', 0x1, 0x0, 0x0, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000060, 0x0) [ 276.490311] CPU: 0 PID: 19309 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 276.497469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.506858] Call Trace: [ 276.509465] dump_stack+0x138/0x19c [ 276.513107] should_fail.cold+0x10f/0x159 [ 276.517267] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 276.522729] __alloc_pages_nodemask+0x1d6/0x7a0 [ 276.527404] ? find_held_lock+0x35/0x130 [ 276.531473] ? __alloc_pages_slowpath+0x2930/0x2930 [ 276.536503] ? iov_iter_advance+0x218/0xc60 [ 276.540841] alloc_pages_current+0xec/0x1e0 [ 276.545176] skb_page_frag_refill+0x1d3/0x3e0 [ 276.549694] ? __phys_addr_symbol+0x23/0x60 [ 276.554030] sk_page_frag_refill+0x53/0x1c0 [ 276.558363] tcp_sendmsg_locked+0x7c7/0x3400 [ 276.562806] ? tcp_sendpage+0x60/0x60 [ 276.566633] ? trace_hardirqs_on_caller+0x400/0x590 [ 276.571662] ? trace_hardirqs_on+0xd/0x10 [ 276.575831] tcp_sendmsg+0x30/0x50 [ 276.579388] inet_sendmsg+0x122/0x500 [ 276.583201] ? inet_recvmsg+0x500/0x500 [ 276.587182] sock_sendmsg+0xce/0x110 [ 276.590925] SYSC_sendto+0x206/0x310 [ 276.594648] ? SYSC_connect+0x2d0/0x2d0 [ 276.598634] ? lock_downgrade+0x6e0/0x6e0 [ 276.602790] ? wait_for_completion+0x420/0x420 [ 276.607363] ? __sb_end_write+0xc1/0x100 [ 276.611411] ? fput+0xd4/0x150 [ 276.614602] ? SyS_write+0x10b/0x180 [ 276.618312] SyS_sendto+0x40/0x50 [ 276.621751] ? SyS_getpeername+0x30/0x30 [ 276.625801] do_syscall_64+0x1e8/0x640 [ 276.629670] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 276.634514] entry_SYSCALL_64_after_hwframe+0x42/0xb7 20:34:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x52, &(0x7f0000000200)="f7431600000000000000000000000000185c8aa9c9faad1eb1bd5ac8ba10c2") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x2) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f00000001c0)) 20:34:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{}, {0x0, 0x8}], 0x0, 0x0, 0x7, 0x0, 0x5}}}) 20:34:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="c0dca5055e0bcfec7be070") sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) 20:34:50 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x5, 0x1, {0xb, @raw_data="653b36e414065ad76b0aa87ce07908506bb6c65c40e7c02e5568a326824e981baaa7d4d2679c307780be2c3268a1d00dd8da8f142f44b404f0685c26b7452a37a6b37d50e7362e6d9ecb83fa07a675b799022449377f2a8a6e571e9a96e5ae720c34e28ff7bf9fd6acd725533e8f9c7c431890e789bc2e2cf07c9abd00c7e1def53ff1c15579677302caef1aaa96108d66365729c349ed1dc51265f594e1b02dd1749254c4e350494a67bd3ad5b0184955632ff4011549bc453e47acad54116f9cd8e7d185e6fe21"}}) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x767, 0x5, 0xffff, 0x4, 0xa101, 0x1c0000000, 0x7]}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000200)=0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000240)={0x3, 0x0, {0xffffffffffffffff, 0x2, 0x4f, 0x1, 0x8}}) ioctl$TCSETXF(r0, 0x5434, &(0x7f00000001c0)={0xf07c, 0xffffffffffffffe0, [0xffffffffffffff6e, 0x5, 0x0, 0x8, 0x4], 0x8}) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000002c0)={0x0, 0x0, [0x3f, 0x2, 0x5f3, 0x0, 0xfff, 0x2, 0x9, 0xe1c8]}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2}}}) 20:34:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000080)=0xf000) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) [ 276.639695] RIP: 0033:0x459279 [ 276.642907] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 276.650993] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 276.658254] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 276.665517] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 276.672788] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 276.680060] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:50 executing program 1 (fault-call:6 fault-nth:53): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x225) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 20:34:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$void(r0, 0x5451) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{}, {0x0, 0x8}], 0x0, 0x0, 0x7, 0x0, 0x5}}}) 20:34:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0xe, 0xa, 0x8b38) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x884, 0x8c0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000040)=0xd9f, 0x4) inotify_init() ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070fccc7a178565d57c87695bf8d175385ce4644a16690d467868ddbee72b63d17d6d9cb1a54f248b8d30affc2f4699d7aa30e16e336519e4484a607b2d706f94a990a96e9c1a962d63218af156bb577b410b14e6906ee174e236eee0e732913899fef129e843cd99d45df55b357c417471d5e3080b5f994d812918e76797ba0311bbac4c02a05dbd766d5c620b1b93710b2c11b3c7d3f2781d6d455eb9abd082ac75d4ae5a04fd4f85c71dc74b627e7859c4d4915c3da7a1232dde8c0a86a64dd766f7f778afc56d04ba390f86d684af8fe974a08c864fd6800ba452317674757ec8c14d1b323503d0dc82b58b16dd84e42b7a9d2cfb05a219bb2b") r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) [ 276.858961] FAULT_INJECTION: forcing a failure. [ 276.858961] name failslab, interval 1, probability 0, space 0, times 0 [ 276.870274] CPU: 0 PID: 19355 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 276.877483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.886856] Call Trace: [ 276.886882] dump_stack+0x138/0x19c [ 276.886903] should_fail.cold+0x10f/0x159 [ 276.886921] should_failslab+0xdb/0x130 [ 276.897283] kmem_cache_alloc+0x47/0x780 [ 276.905329] ? lock_acquire+0x16f/0x430 [ 276.909319] ? check_preemption_disabled+0x3c/0x250 [ 276.914384] skb_clone+0x129/0x320 [ 276.917933] dev_queue_xmit_nit+0x296/0x8c0 [ 276.922272] dev_hard_start_xmit+0xa7/0x8b0 [ 276.926619] ? assoc_array_gc+0x1140/0x11d0 [ 276.930974] __dev_queue_xmit+0x1d95/0x25e0 [ 276.935485] ? trace_hardirqs_on+0xd/0x10 [ 276.939661] ? __local_bh_enable_ip+0x99/0x1a0 [ 276.944262] ? netdev_pick_tx+0x300/0x300 [ 276.948412] ? find_held_lock+0x35/0x130 [ 276.952485] ? ip_finish_output+0x56d/0xc60 [ 276.956828] ? mark_held_locks+0xb1/0x100 [ 276.960998] dev_queue_xmit+0x18/0x20 [ 276.964813] ? dev_queue_xmit+0x18/0x20 [ 276.968799] ip_finish_output2+0xddc/0x14a0 [ 276.973138] ? get_info+0x560/0x560 [ 276.976786] ? ip_copy_metadata+0x9b0/0x9b0 [ 276.981223] ip_finish_output+0x56d/0xc60 [ 276.985379] ? ip_finish_output+0x56d/0xc60 [ 276.989713] ip_output+0x1e6/0x590 [ 276.993267] ? ip_mc_output+0xd40/0xd40 [ 276.997256] ? __lock_is_held+0xb6/0x140 [ 277.001334] ? check_preemption_disabled+0x3c/0x250 [ 277.006368] ? ip_fragment.constprop.0+0x200/0x200 [ 277.011316] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 277.016779] ip_local_out+0x97/0x170 [ 277.020509] ip_queue_xmit+0x7d7/0x1b10 [ 277.024491] ? __tcp_v4_send_check+0x1c0/0x360 [ 277.029079] __tcp_transmit_skb+0x172c/0x2fe0 [ 277.033599] ? __tcp_select_window+0x6e0/0x6e0 [ 277.038210] ? kvm_clock_read+0x23/0x40 [ 277.042219] ? sched_clock_cpu+0x1b/0x1c0 [ 277.046385] ? tcp_small_queue_check+0x184/0x1e0 [ 277.051157] tcp_write_xmit+0x523/0x48b0 [ 277.055238] ? iov_iter_advance+0x218/0xc60 [ 277.059570] tcp_push_one+0xc1/0xf0 [ 277.063212] tcp_sendmsg_locked+0x1571/0x3400 [ 277.067736] ? tcp_sendpage+0x60/0x60 [ 277.071553] ? trace_hardirqs_on_caller+0x400/0x590 [ 277.076580] ? trace_hardirqs_on+0xd/0x10 [ 277.080828] tcp_sendmsg+0x30/0x50 [ 277.084554] inet_sendmsg+0x122/0x500 [ 277.088367] ? inet_recvmsg+0x500/0x500 [ 277.092360] sock_sendmsg+0xce/0x110 [ 277.096092] SYSC_sendto+0x206/0x310 [ 277.099823] ? SYSC_connect+0x2d0/0x2d0 [ 277.103813] ? lock_downgrade+0x6e0/0x6e0 20:34:50 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x5, 0x2007, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000500)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2}}}) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000340)) 20:34:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x4924924924924aa, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000800)=0xe8) getpeername$packet(r1, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000ac0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002140)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000002240)=0xe8) sendmmsg$sock(r1, &(0x7f0000003580)=[{{&(0x7f0000000840)=@hci={0x1f, r2, 0x2}, 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)="0aabbb584c1fc6806cb6ff9fcc865e035ec11fb738278ff9cecfe62d4c17613332dbaf05e03ed6c4b49bab378f47633c73266748651a053d43134bc9328d0b6fd02ea228681041d32a94f1d0238368ec3f2d202de4cdf30559dc8df05b8ee2fd62386bb21326acf7db0ea0d417c6c05d30cee2a99474262c8d20d17375e1504fc99ad468797cef4fee5b68be25d172f928f4be14369d99265a", 0x99}], 0x1, &(0x7f00000009c0)=[@timestamping={{0x14, 0x1, 0x25, 0x7f}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}], 0xa8}}, {{&(0x7f0000000b00)=@can={0x1d, r3}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="46fe5ae526e7fc37f1081024141291252955", 0x12}], 0x1, &(0x7f0000000c00)=[@timestamping={{0x14, 0x1, 0x25, 0x6d0}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x492}}, @txtime={{0x18, 0x1, 0x3d, 0x95}}], 0x78}}, {{&(0x7f0000000c80)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000d00)="72b3dd702947ed8e54d57e0bd3a0e099cc9322dc6e72730c3e37ee257f0819353ffd53bf015062eb62bee21019ff199108c6740a0362f411adb6810f03d76adeebe4a1b8e69d098615b213e5f600386cc3f16ccd45e90f90", 0x58}, {&(0x7f0000000d80)="44389e4d009302878c5f26723366bbef6b", 0x11}, {&(0x7f0000000dc0)="2b93b3efbadc22bf4dd77d41951c2c", 0xf}, {&(0x7f0000000e00)="bbc7105ad6452f87092b99fe0a0ae0d11c5c15e5a5250787c464ed26450859cb74bc157f54f0ef5efb9446f8b271282f10799a96ae5f6a8d9944c38d4398a6261ee4ec58723e814c78c37a1264a67590746204057ede33df18e423196be687673231d203d29b70ba2413ec474b248d467c285ecee0efe8c2c6a379c4bdaf3e06", 0x80}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000001e80)="e5436bcfb8e749f9485c1cc1ad838350baeb3230964a26b830bd49737f46517de4b6c0639edec61e99deac51e3c7ef1f927b2431370df99524a9577c278457", 0x3f}, {&(0x7f0000001ec0)="c443f5cd34f926a691ff3af9fff39caca1b0307e9d088114e279104df12a32881014074c1d9a9eb7236ced0a883372d16cedd706b0329f8d17441d6c9efa8ac0b14fcf1d4f4d1668ba8158777a815e3a448202e610f4282e78159fb1231b9907d2ae63b147dd01b036a2452efe1a2816e2927f7b9e0adb9ee8ce7f8ed988965028004e35ba36c73d9857114d54038ce150e134dfee6b76d125e6728f066c9ad52b678241bcc026a1b73a990113a28fd2a528989a93da2a6a1e2ffe648a428125d73a68099bbbb1e8563453145c2c3956f862344164b65b71ae34f22859d83e817c4150abcaa5f72ed45ad333a04650359bbe4fbb", 0xf4}, {&(0x7f0000001fc0)="270f039e25195922732ee4903c0f602dae040af38b81f5d3c1d1b4524b17167ec4c1c9de5990a41faf939cc96b379a94c697181cff5dbef5bbc66c3feff4768c48937d2d8238acfefda4acfd3e705230624fd5f2899e1eeeecf0154785a153c28ed39dff1e84fcff9b13c0a57906edc58f742f63ecff0de8e3509a0047a197ee8dc02760ef248b20553c7ed418de0bab3a41cfad50c39306ea2e6a0373c4139225157f8272377897249e9ec76687e7a2cc19c59e6cfcb7e2f415efbccb96a9fac320ccc0b628f9666d00fea45f83d7cf849f91490b50c3683d6e6afacca748c24ed4eff768ad274265b732594c", 0xed}], 0x8}}, {{&(0x7f0000002280)=@ll={0x11, 0x18, r4, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x80, &(0x7f0000003500)=[{&(0x7f0000002300)="3c4af76ef94bcb67393f908a9b9b445f739a856e4c62a94a9052e02ae6f0236757dd3a175f6e7c4174b51e644a060d8d55399977441ca1ca28222fdcbaf6d394fc88de775a493e8a12b230e6e37c7ec7f9548e0e96fe1221a9a04c44", 0x5c}, {&(0x7f0000002380)="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", 0x1000}, {&(0x7f0000003380)="1c989fc9c53acf5d6c97d1b04900110cc31a244d8de0de81143968a3515e470b3e969938c004feb6fa5510d2f1b57cdef63bcb5dc07eb64f30e78b308e136cbcb3014b7821ff3d4a1fa5cca6c6c02a6fdbc5623a2b675f8d389113c79625f816adb192418a2bb38a91028ae3f2201b861458", 0x72}, {&(0x7f0000003400)}, {&(0x7f0000003440)="d94b69d4449494ec3abf9ece16e35ef829e6b3c9385c39285e", 0x19}, {&(0x7f0000003480)="898679102d08f2787f90ec5292831062a1ad3bc1ec2eaee08dca31bd350fb5837748d37aa7e18a0e57405b73093261183135c1f852b8188146508f0121064b08ba2ed4c0fc666e", 0x47}], 0x6}}], 0x4, 0x80) symlink(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000280)='./file0\x00') getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=0x0, &(0x7f0000000240)=0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r5, 0x2, 0xe4}, &(0x7f0000000340)=0xc) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x202480, 0x0) ioctl$KVM_SET_CLOCK(r6, 0x4030ae7b, &(0x7f00000001c0)={0x9, 0x7f}) getpeername$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) 20:34:50 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2}}}) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x80, r1, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0) 20:34:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0x10, 0x400000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:34:50 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0xbe, 0x5, 0x3, {0x3, @win={{0x7fff, 0x5d, 0x4, 0xa81e}, 0x1, 0xab, &(0x7f00000001c0)={{0x6, 0x4, 0x4, 0x5}, &(0x7f0000000080)={{0x8, 0x80000000, 0x2, 0xb8aa}, &(0x7f0000000040)={{0xfffffffffffffffe, 0xfffffffffffffff8, 0x7fffffff, 0x7}}}}, 0xfffffffffffffffd, &(0x7f0000000340)="9a116942e55e58bfa27a760528161a165da443fcdfa1cb067550c552664151f2bb761fd0bc0e86e2b5d8380af90bf8730c32ce5fd3fc8cf01cd9844829b248956a73dd973ff14a0e06881573815c7978ff43f61cd3def990a6c48c07139a8b524c93faf5725a7a61b0fb087505547f675d400de4d781cd42b78a3953918041087d5714d21b09d677b66258a1c512b3abf4c24da30e5a9d994925cdba86e7b424236dede8c9ca40b2dc346bb2208ccf429e963abd454f1d623ff7039d3b48f2c7154056fd5f72cfc1f0aa45698ed7bb340a0cb12eef2d47ef98e3e3c6fac10e58cee76da30376c91651f483664ca60129405580d074620b", 0x80000000}}}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x7e00000000, 0x3, 0x7ff}) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000540)={0x3, "1d8ba040f4a3ca21e4d702f24172828bd7b53e615417ae1644db74df734f7443", 0x1, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x1, 0x1ff, 0x4, {0x40000000000000b, @pix_mp={0x0, 0x2}}}) [ 277.107994] ? wait_for_completion+0x420/0x420 [ 277.112601] ? __sb_end_write+0xc1/0x100 [ 277.116682] ? fput+0xd4/0x150 [ 277.119882] ? SyS_write+0x10b/0x180 [ 277.123616] SyS_sendto+0x40/0x50 [ 277.127077] ? SyS_getpeername+0x30/0x30 [ 277.131148] do_syscall_64+0x1e8/0x640 [ 277.135049] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 277.139908] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 277.145092] RIP: 0033:0x459279 [ 277.145098] RSP: 002b:00007efc362fdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 20:34:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, {0xb, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{}, {0x0, 0x8}], 0x0, 0x0, 0x0, 0x0, 0x5}}}) 20:34:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1b}], 0x1}, 0x0) r1 = socket(0xa, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) connect$x25(r1, &(0x7f0000000180)={0x9, @null=' \x00'}, 0x12) [ 277.145109] RAX: ffffffffffffffda RBX: 00007efc362fdc90 RCX: 0000000000459279 [ 277.145115] RDX: ffffffffffffff04 RSI: 0000000020000080 RDI: 0000000000000003 [ 277.145120] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000037 [ 277.145126] R10: 000000000420ffe0 R11: 0000000000000246 R12: 00007efc362fe6d4 [ 277.145132] R13: 00000000004c700b R14: 00000000004dc1c8 R15: 0000000000000005 20:34:50 executing program 3: r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x341c41, 0xdc) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000140)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') ioctl$int_out(r2, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x0) [ 277.246569] kasan: CONFIG_KASAN_INLINE enabled [ 277.260924] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 277.291842] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 277.298112] Modules linked in: [ 277.301306] CPU: 0 PID: 19379 Comm: syz-executor.4 Not tainted 4.14.124 #18 [ 277.308412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.317775] task: ffff888061b92140 task.stack: ffff888067318000 [ 277.323851] RIP: 0010:refcount_sub_and_test+0x2b/0xf0 [ 277.324614] kobject: 'loop0' (ffff8880a49989e0): kobject_uevent_env [ 277.329033] RSP: 0018:ffff88806731fb98 EFLAGS: 00010202 [ 277.329041] RAX: dffffc0000000000 RBX: ffff888068ac90c0 RCX: ffffffff8424bba0 [ 277.329044] RDX: 0000000000000004 RSI: 0000000000000020 RDI: 0000000000000001 [ 277.329049] RBP: ffff88806731fbc0 R08: 00000000cd59399e R09: ffff888061b92a08 [ 277.329053] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000020 [ 277.329060] R13: 0000000000000001 R14: ffff888068ac90d4 R15: 0000000000000000 [ 277.339888] kobject: 'loop0' (ffff8880a49989e0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 277.340822] FS: 0000000001010940(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 277.340826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.340831] CR2: 0000000000625208 CR3: 0000000091a13000 CR4: 00000000001406f0 [ 277.340837] Call Trace: [ 277.340854] refcount_dec_and_test+0x1b/0x20 [ 277.340865] vb2_vmalloc_put+0x18/0x70 [ 277.340875] __vb2_buf_mem_free+0x103/0x1e0 [ 277.376045] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 277.377389] ? vb2_vmalloc_dmabuf_ops_attach+0x3f0/0x3f0 [ 277.377399] __vb2_queue_free+0x634/0x7d0 [ 277.377411] vb2_core_queue_release+0x64/0x80 [ 277.377426] _vb2_fop_release+0x1cf/0x2a0 [ 277.440785] audit: type=1400 audit(1560198890.866:165): avc: denied { map } for pid=19386 comm="syz-executor.3" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=68267 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 [ 277.443434] vb2_fop_release+0x75/0xc0 [ 277.443443] vivid_fop_release+0x180/0x3f0 [ 277.443454] ? vivid_remove+0x3d0/0x3d0 [ 277.492525] ? dev_debug_store+0xe0/0xe0 [ 277.496568] v4l2_release+0xf9/0x190 [ 277.500265] __fput+0x275/0x7a0 [ 277.503527] ____fput+0x16/0x20 [ 277.506803] task_work_run+0x114/0x190 [ 277.510676] exit_to_usermode_loop+0x1da/0x220 [ 277.515253] do_syscall_64+0x4bc/0x640 [ 277.519122] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 277.523951] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 277.529121] RIP: 0033:0x412f61 [ 277.532290] RSP: 002b:00007fff007bec70 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 277.539981] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000412f61 [ 277.547236] RDX: 0000001b31820000 RSI: 0000000000000000 RDI: 0000000000000003 [ 277.554485] RBP: 0000000000000001 R08: 000000006e783fbb R09: 000000006e783fbf [ 277.561736] R10: 00007fff007bed50 R11: 0000000000000293 R12: 0000000000761ed8 [ 277.568996] R13: 0000000000043afd R14: 0000000000043b2a R15: 000000000075bf2c [ 277.576249] Code: 55 48 89 e5 41 56 41 55 41 89 fd 41 54 49 89 f4 53 48 83 ec 08 e8 f6 c4 85 fe 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 e0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 277.595341] RIP: refcount_sub_and_test+0x2b/0xf0 RSP: ffff88806731fb98 [ 277.603639] ---[ end trace 985349475f8f48ea ]--- [ 277.608629] Kernel panic - not syncing: Fatal exception [ 277.615333] Kernel Offset: disabled [ 277.618957] Rebooting in 86400 seconds..