[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 16.154634] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.566366] random: sshd: uninitialized urandom read (32 bytes read) [ 22.917554] random: sshd: uninitialized urandom read (32 bytes read) [ 23.733127] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.202' (ECDSA) to the list of known hosts. [ 29.155750] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/09 11:37:28 fuzzer started [ 30.542442] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/09 11:37:30 dialing manager at 10.128.0.26:44551 2018/07/09 11:37:33 syscalls: 1785 2018/07/09 11:37:33 code coverage: enabled 2018/07/09 11:37:33 comparison tracing: enabled 2018/07/09 11:37:33 setuid sandbox: enabled 2018/07/09 11:37:33 namespace sandbox: enabled 2018/07/09 11:37:33 fault injection: enabled 2018/07/09 11:37:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/09 11:37:33 net packed injection: enabled [ 35.471653] random: crng init done 11:38:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) dup3(r0, r1, 0x0) 11:38:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f00002e4000/0x2000)=nil, 0x2000, 0x4, 0x10011, r0, 0x0) name_to_handle_at(r0, &(0x7f00002e4000)='./file0\x00', &(0x7f0000000000)={0xc, 0x0, "bee36b0c"}, &(0x7f0000001ffc), 0x1000) 11:38:27 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000affff8)=0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close(r0) 11:38:27 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000007000000000013002d54036205001a000000e600001000e0c9000200000000000000000000000000000000000000000000000000"], 0x38}, 0x1}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) 11:38:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 11:38:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0a85322, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) 11:38:27 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r1, &(0x7f0000000280)="d3", 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0xffcf) r2 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) write$binfmt_misc(r2, &(0x7f00000000c0)={'syz0'}, 0x4) 11:38:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000003c0)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x4030ae7b, &(0x7f00000005c0)) [ 87.948730] IPVS: ftp: loaded support on port[0] = 21 [ 87.962153] IPVS: ftp: loaded support on port[0] = 21 [ 88.082573] IPVS: ftp: loaded support on port[0] = 21 [ 88.126863] IPVS: ftp: loaded support on port[0] = 21 [ 88.136488] IPVS: ftp: loaded support on port[0] = 21 [ 88.180608] IPVS: ftp: loaded support on port[0] = 21 [ 88.261736] IPVS: ftp: loaded support on port[0] = 21 [ 88.292747] IPVS: ftp: loaded support on port[0] = 21 [ 89.733222] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.739648] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.760066] device bridge_slave_0 entered promiscuous mode [ 89.899276] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.905721] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.915103] device bridge_slave_0 entered promiscuous mode [ 89.924402] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.930801] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.943966] device bridge_slave_0 entered promiscuous mode [ 89.951669] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.958144] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.966385] device bridge_slave_0 entered promiscuous mode [ 89.980709] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.987124] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.999344] device bridge_slave_0 entered promiscuous mode [ 90.005958] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.012463] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.020542] device bridge_slave_1 entered promiscuous mode [ 90.033259] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.039687] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.051653] device bridge_slave_0 entered promiscuous mode [ 90.059904] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.066283] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.073774] device bridge_slave_1 entered promiscuous mode [ 90.081701] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.088089] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.095497] device bridge_slave_1 entered promiscuous mode [ 90.102666] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.109056] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.116783] device bridge_slave_0 entered promiscuous mode [ 90.134556] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.141070] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.156426] device bridge_slave_1 entered promiscuous mode [ 90.164329] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 90.171632] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.178083] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.186391] device bridge_slave_1 entered promiscuous mode [ 90.195601] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.202085] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.219502] device bridge_slave_1 entered promiscuous mode [ 90.230420] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 90.245717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 90.253886] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.260275] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.281101] device bridge_slave_1 entered promiscuous mode [ 90.291245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 90.300746] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 90.308194] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 90.332236] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 90.340516] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 90.347750] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 90.357227] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.363679] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.405752] device bridge_slave_0 entered promiscuous mode [ 90.420761] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 90.433879] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 90.441735] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 90.479337] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 90.490722] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.497119] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.528171] device bridge_slave_1 entered promiscuous mode [ 90.550669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 90.619869] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 90.654234] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 90.664548] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 90.691920] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 90.729915] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 90.769762] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 90.781183] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 90.792199] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 90.804136] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 90.818872] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 90.828671] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 90.838224] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 90.895318] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 90.906251] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 90.932538] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 90.941268] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 91.071279] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 91.173840] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 91.318306] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 91.343422] team0: Port device team_slave_0 added [ 91.358672] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 91.381434] team0: Port device team_slave_0 added [ 91.395479] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 91.409174] team0: Port device team_slave_0 added [ 91.416236] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 91.431680] team0: Port device team_slave_0 added [ 91.443722] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 91.457514] team0: Port device team_slave_0 added [ 91.469777] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 91.476696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.486952] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 91.497638] team0: Port device team_slave_1 added [ 91.504433] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 91.512901] team0: Port device team_slave_0 added [ 91.521154] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 91.530084] team0: Port device team_slave_0 added [ 91.541497] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 91.558580] team0: Port device team_slave_1 added [ 91.569647] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 91.579244] team0: Port device team_slave_1 added [ 91.584884] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 91.592464] team0: Port device team_slave_1 added [ 91.604247] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 91.616057] team0: Port device team_slave_1 added [ 91.629000] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 91.639701] team0: Port device team_slave_1 added [ 91.647511] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 91.656344] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 91.670256] team0: Port device team_slave_1 added [ 91.676934] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 91.685624] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 91.696482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.708545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.721300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.736268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.743985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.751737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.761836] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 91.779589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 91.788187] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 91.797224] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 91.808010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.819405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.844571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.860309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.867800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.875788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.883462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.891660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.900077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.908074] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 91.917501] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 91.926498] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 91.935294] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 91.942579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.954539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.975674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.996344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.004456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.012014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.020047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.027864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.035693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.043594] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 92.050812] team0: Port device team_slave_0 added [ 92.057483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 92.066642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.081289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.090979] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 92.099878] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 92.108566] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 92.116340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.129036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.142418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.158364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.166615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.175836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.184710] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 92.191961] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 92.200686] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 92.209386] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 92.222787] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 92.230188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.256756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.272412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.287999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.295472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.303357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.311889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.319542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.327346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.334996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.344100] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 92.352602] team0: Port device team_slave_1 added [ 92.357774] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 92.365293] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 92.374230] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 92.383874] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 92.391900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.401182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.432554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.455497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.463349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.471310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.478985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.486790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.494768] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 92.501939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.510693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.532136] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 92.539399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.547439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.560187] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 92.584576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.619842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.683665] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 92.690639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.704756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.805480] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 92.812804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.824594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.944261] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 92.960239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.969569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.421788] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.428305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.435232] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.441614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.453315] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 93.464848] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.471231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.477845] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.484569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.526268] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 93.542716] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.549119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.555733] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.562119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.596784] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 93.622934] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.629374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.636057] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.642412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.678209] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 93.711189] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.717611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.724267] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.730638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.742707] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 93.749184] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.755578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.762195] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.768551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.776870] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 93.888657] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.895061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.901780] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.908151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.935915] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 94.151007] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.157429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.164080] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.170450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.204059] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 94.367430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.381379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.399936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.407185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.414422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.421705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.429606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.437115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.475411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.567844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.588448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.613521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.727596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.754135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.802565] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 97.948272] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 97.970446] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 97.983993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.999820] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 98.132336] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 98.149821] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 98.164994] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 98.171192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.187177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.220050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.310602] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 98.346541] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 98.353612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.366449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.391394] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 98.397608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.416434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.433563] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 98.452537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.468785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.542157] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 98.558981] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 98.565204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.579782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.592613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.603969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.618120] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 98.639551] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.721982] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.752847] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 98.759229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.767652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.792899] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.930724] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.953770] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.966884] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.990306] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 98.997383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.011413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.139043] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.434660] 8021q: adding VLAN 0 to HW filter on device team0 11:38:39 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14}, @in6}}, {{@in6=@remote={0xfe, 0x80, [], 0xbb}}, 0x0, @in6}}, 0xe8) 11:38:40 executing program 1: 11:38:40 executing program 1: 11:38:40 executing program 1: 11:38:40 executing program 4: 11:38:40 executing program 1: 11:38:40 executing program 0: 11:38:40 executing program 4: [ 101.316994] binder: 6547:6548 ERROR: BC_REGISTER_LOOPER called without request [ 101.357354] binder: release 6547:6548 transaction 2 in, still active [ 101.363961] binder: send failed reply for transaction 2 to 6547:6548 [ 101.374876] binder: BINDER_SET_CONTEXT_MGR already set [ 101.387329] binder: 6547:6556 ioctl 40046207 0 returned -16 [ 101.397718] binder_alloc: 6547: binder_alloc_buf, no vma [ 101.403319] binder: 6547:6548 transaction failed 29189/-3, size 24-0 line 2967 [ 101.413249] binder: 6547:6556 ERROR: BC_REGISTER_LOOPER called without request [ 101.426428] binder: undelivered TRANSACTION_COMPLETE [ 101.431625] binder: undelivered TRANSACTION_ERROR: 29189 [ 101.442724] binder: undelivered TRANSACTION_ERROR: 29189 11:38:40 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080)={0x303, 0x33}, 0x4) 11:38:40 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) getsockname(r1, &(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @remote}}, &(0x7f0000000000)=0x80) 11:38:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000003c0)="025cc83d6d345f8f762070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x180000000000048, &(0x7f0000000000)=0x20004, 0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 11:38:40 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="2b70696473201ec27090fe1a3eeb1240447280d7fc55762d7cdebe0dfb06880aa7d713dbf7e8b0587b9a73744ea69203e43fe70fe3fadd9b965511c73dc465a24b6f1479cdfeb7657607e2e2192ce0c3c3a35cc9a853a58364d9c9f774c3254e8b4866cc401227e624d977fc830aab007afbb70e9cf91830b9ca8f0c59dade2ee2158688704171b011f06e53f9256aa8bfe0f4497b8a3e"], 0x97) 11:38:40 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r1, &(0x7f0000000280)="d3", 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0xffcf) r2 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) write$binfmt_misc(r2, &(0x7f00000000c0)={'syz0'}, 0x4) 11:38:41 executing program 4: syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x800) 11:38:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioprio_get$pid(0x0, 0x0) 11:38:41 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000001c0)={0x1d}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d}, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0700000000000000823e1f1500000000", @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000c4d981aeb150d176"], 0x5}, 0x1}, 0x0) ioctl$sock_bt(r0, 0x8906, &(0x7f0000000080)) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000400)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f00000005c0)}}], 0x1, 0x0, &(0x7f00000006c0)) 11:38:41 executing program 0: 11:38:41 executing program 1: 11:38:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200, 0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) 11:38:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0506a0c4df0dff92768ce39f"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x103000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:38:41 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r1, &(0x7f0000000280)="d3", 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0xffcf) r2 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) write$binfmt_misc(r2, &(0x7f00000000c0)={'syz0'}, 0x4) 11:38:41 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000), 0x4) 11:38:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0x22d, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x48}, 0x1}, 0x0) 11:38:41 executing program 4: syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x800) 11:38:41 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0x22d, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x48}, 0x1}, 0x0) 11:38:41 executing program 7: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=""/126, 0x7e}) writev(r1, &(0x7f0000000080), 0x1a6) 11:38:41 executing program 1: r0 = memfd_create(&(0x7f0000000580)='dev ', 0x0) fallocate(r0, 0x3, 0x2dda, 0x5d5) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x448, 0x118, 0x230, 0x0, 0x360, 0x360, 0x360, 0x4, &(0x7f0000000200), {[{{@uncond, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@arp={@multicast1=0xe0000001, @broadcast=0xffffffff, 0x0, 0x0, @mac=@link_local={0x1, 0x80, 0xc2}, {}, @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gretap0\x00', 'team0\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@uncond, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x498) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 11:38:41 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f000094cff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) recvmmsg(r1, &(0x7f0000006d80)=[{{&(0x7f0000001840)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000001b40), 0x0, &(0x7f0000006c80)=""/209, 0x10}}], 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e, &(0x7f0000000080), 0x0, &(0x7f0000000600)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}], 0x1, 0x0) 11:38:41 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) [ 102.448642] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.479633] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:38:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() wait4(r0, &(0x7f0000000100), 0x0, 0x0) 11:38:41 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(0xffffffffffffffff) [ 102.591439] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.603790] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.660894] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.675007] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:38:42 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) 11:38:42 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r0, 0x100}], 0x1, &(0x7f0000000200)={0x0, r1+10000000}, &(0x7f0000000240), 0x8) 11:38:42 executing program 7: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f00000000c0), 0x4) 11:38:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000f59000), 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00005c8000)="c3401c344654f3c7d9fe1ba48c8e399aa4eedc3d6bd8ebd65c856a45d61154adc2b2a976fbffffffffffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x81, &(0x7f0000e66000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) writev(r0, &(0x7f000042a000)=[{&(0x7f00001e3f5a)='-', 0x1}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='nv\x00', 0x3) shutdown(r0, 0x1) 11:38:42 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60d8652b02230600fe0000000305000000000000003400aafe8000000000000000000000000000aa00004e20aa22ed3b4850ba07dd740e140b04d6636e7245de36b2c9b498a14a6d5fbc5730119535c383710568ffe5d5d29464cf984324a821bdb8e4b3c65a676f2da56bcd7256f95d3a331b62aedf2b8f8a2137a8cbbfbd8c8bc5bfd1b8bca8a72d76", @ANYRES32=0x41424344, @ANYBLOB="500000000600000000000000a7f3ea8c4ef2bbf367d40000"], &(0x7f00000002c0)) 11:38:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000380)={[{@dmode={'dmode', 0x3d, [0x36, 0x0]}, 0x2c}]}) 11:38:42 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000540)=[{}], 0x1) 11:38:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xe, &(0x7f0000000200), &(0x7f00000000c0)=0xff04) 11:38:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2}}, 0x20) dup2(r0, r1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x0, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r2}}, 0x38) 11:38:42 executing program 7: r0 = socket$unix(0x1, 0x1000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000040)={0x0, @multicast2=0xe0000002, 0x0, 0x0, 'ovf\x00'}, 0xfffffffffffffefd) 11:38:42 executing program 6: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000), 0x4) [ 103.211935] ISOFS: Unable to identify CD-ROM format. 11:38:42 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) unshare(0xc000000) [ 103.282134] ISOFS: Unable to identify CD-ROM format. 11:38:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000003c0)=@ethtool_drvinfo={0x3, "2715593f8107bae08eca764df7b43220d653908925230a9f0bec5efcfcd28027", "26b933325b48b5ae5693eda45a56ebcf4332ed0d9f472f280e84970495d1b804", "771a9143af069327f745316e011983ee62cc9afd175893ad045a17e8bdb1cb1a", "505498143be3b5f4a2e85468cda6b30d60a9986379c5dbccc06cf5e2c2902115", "553e96a30d36a1586682e06f99eab0632c36f283cfc43f67f5f6065251b849b0", "2f426ed9ff014267597f63ec"}}) 11:38:42 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080), 0xc) 11:38:42 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x0, 0x0, "39d38cad3ee49187b1a05796f936475c61010282feeaf3f8f1d943c1af7151c20f6c6a3e595039941ae1bd2d7a5a299862b969c1c64dcba1b6ceaa5d7aefcbaaec14bf6c00297ab2f668defe9ecb5bca"}, 0xd8) 11:38:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") capset(&(0x7f00005cf000)={0x19980330}, &(0x7f0000f03fe8)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) 11:38:42 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001600010000000000000000000a000000", @ANYBLOB="14000200ff020000dfed38b20000000000000001"], 0x2}, 0x1}, 0x0) 11:38:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) getpeername(r2, &(0x7f00000002c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, &(0x7f0000000240)=0x80) close(r3) 11:38:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000dff948f92dfeb2e40000", @ANYBLOB="030000000000000008001b0000000000"], 0x2}, 0x1}, 0x0) 11:38:42 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000240), &(0x7f0000000280)) signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 11:38:42 executing program 1: pause() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount(&(0x7f00000005c0)='.', &(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000640)='mslos\x00', 0x500c, &(0x7f00000e7000)) rmdir(&(0x7f0000000380)='./file0/file0\x00') 11:38:42 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 11:38:42 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x80000001}) 11:38:42 executing program 7: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz0'}, 0x4) mknod$loop(&(0x7f0000000040)='./file0\x00', 0xe, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') 11:38:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000040)={0x0, 0x6, 0xe828}) mq_unlink(&(0x7f0000000100)='eth0\x00') fcntl$setstatus(r1, 0x4, 0x0) [ 103.444551] capability: warning: `syz-executor5' uses 32-bit capabilities (legacy support in use) 11:38:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000008912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080)) 11:38:42 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000080)={0x0, {{0x2, 0x0, @loopback=0x7f000001}}}, 0x88) 11:38:42 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000140)='\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000002c0)="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", 0x0) 11:38:42 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000080)={'security\x00', 0x2, [{}, {}]}, 0x48) 11:38:42 executing program 6: 11:38:42 executing program 4: 11:38:42 executing program 2: 11:38:42 executing program 5: 11:38:42 executing program 0: 11:38:42 executing program 6: 11:38:42 executing program 2: 11:38:46 executing program 1: 11:38:46 executing program 4: 11:38:46 executing program 6: 11:38:46 executing program 2: 11:38:46 executing program 5: 11:38:46 executing program 0: 11:38:46 executing program 7: 11:38:46 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 11:38:46 executing program 2: 11:38:46 executing program 7: 11:38:46 executing program 4: 11:38:46 executing program 5: 11:38:46 executing program 6: 11:38:46 executing program 0: 11:38:46 executing program 2: 11:38:46 executing program 7: 11:38:47 executing program 1: 11:38:47 executing program 4: 11:38:47 executing program 5: 11:38:47 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) 11:38:47 executing program 2: 11:38:47 executing program 6: 11:38:47 executing program 0: 11:38:47 executing program 3: 11:38:47 executing program 5: 11:38:47 executing program 7: 11:38:47 executing program 4: 11:38:47 executing program 2: 11:38:47 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000180)={@dev={0xfe, 0x80}}, 0x14) 11:38:47 executing program 6: 11:38:47 executing program 1: 11:38:47 executing program 2: 11:38:47 executing program 6: 11:38:47 executing program 4: 11:38:47 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$void(r1, 0x5450) 11:38:47 executing program 5: getrandom(&(0x7f0000000200)=""/4096, 0x1000, 0x0) 11:38:47 executing program 0: 11:38:47 executing program 3: 11:38:47 executing program 1: 11:38:47 executing program 2: 11:38:47 executing program 6: 11:38:47 executing program 4: 11:38:47 executing program 7: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80}, 0x800, 0x1}, 0x20) 11:38:47 executing program 0: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0x4, r0, &(0x7f0000000200)=""/56, 0xffffffffffffffbf) keyctl$chown(0x4, r0, 0x0, 0x0) 11:38:47 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x41, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x44002, 0x0) 11:38:47 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:38:47 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) 11:38:47 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) 11:38:47 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000580)='./file0\x00', r0, &(0x7f00000001c0)='./file1\x00', 0x0) socket$kcm(0x29, 0x0, 0x0) close(0xffffffffffffffff) 11:38:47 executing program 0: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012001110000000801a00000000000000505e822d40e0e2bb1d2d3b7a612850bd2c46d97062156bf319d767b22c86301d8152c2ef4d7295fd5309b31983ab257a020798734f", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x2}, 0x1}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 11:38:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x100}], 0x1, 0x0) close(r0) 11:38:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x3, 0x3e) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f00000000c0)=0x207fffffff, 0x4) sendto$inet(r1, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000000200)={0x2}, 0x10) recvmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000100)=@generic, 0x80, &(0x7f0000002580), 0x0, &(0x7f0000002600)=""/143, 0x8f}, 0x0) 11:38:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:38:47 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) r2 = dup2(r1, r1) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) write$P9_RREAD(r3, &(0x7f0000000300)={0xb, 0x75}, 0xb) 11:38:47 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 11:38:47 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:38:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev={0xfe, 0x80}}, 0x14) 11:38:47 executing program 4: rt_sigtimedwait(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)={0x0, 0x1c9c380}, 0x8) 11:38:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) 11:38:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000100)={0x72c, 0xe8, 0x9, 0x7ff}, 0x10) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000013000/0x2000)=nil, 0x2000}) close(0xffffffffffffffff) [ 108.767698] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:38:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000001c0)) 11:38:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x1000000000008912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="260f01d1f68e2b9755a83f0f01d1f018ab84397f72c7442400a9b00000c74424026e000000c7442406000000000f01142466baf80cb864103388ef66bafc0c66edc4e109ed1e46875a00f0453100450f01c9", 0x52}], 0x1, 0x0, &(0x7f00000001c0), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:38:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 11:38:48 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000000600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000001600)}) 11:38:48 executing program 4: r0 = inotify_init() r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x80000002) fallocate(r1, 0x0, 0x0, 0x8) 11:38:48 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) [ 108.986216] can: notifier: receive list not found for dev tap0 [ 109.004220] *** Guest State *** [ 109.007609] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 109.016520] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 109.026719] CR3 = 0x0000000000000000 [ 109.030505] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 109.037037] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 109.043573] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 109.049598] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 109.055627] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 109.062334] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 109.070358] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 109.078371] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 109.086408] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 109.094420] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 109.102439] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 109.110449] GDTR: limit=0x00000000, base=0x0000000000000000 [ 109.118568] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 109.126574] IDTR: limit=0x00000000, base=0x0000000000000000 [ 109.134575] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 109.142590] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 109.149035] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 109.156508] Interruptibility = 00000000 ActivityState = 00000000 [ 109.162763] *** Host State *** [ 109.166414] RIP = 0xffffffff811f4fb4 RSP = 0xffff880197b57350 [ 109.172419] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 109.179231] FSBase=00007fd5dda45700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 109.187076] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 109.193079] CR0=0000000080050033 CR3=00000001a9c56000 CR4=00000000001426e0 [ 109.200248] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87a01380 [ 109.206950] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 109.213040] *** Control State *** [ 109.216523] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 109.223209] EntryControls=0000d1ff ExitControls=0023efff [ 109.228787] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 109.235754] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 109.242461] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 109.249068] reason=80000021 qualification=0000000000000000 [ 109.255414] IDTVectoring: info=00000000 errcode=00000000 [ 109.260890] TSC Offset = 0xffffffc24a067966 [ 109.265241] EPT pointer = 0x00000001ce58501e [ 109.272466] can: notifier: receive list not found for dev tap0 11:38:48 executing program 2: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000002700)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x1baf, [], 0xaa}, 0x7}, 0x80, &(0x7f0000001640)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, &(0x7f0000000900)}, 0x45) 11:38:48 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) [ 109.643619] FAULT_FLAG_ALLOW_RETRY missing 30 [ 109.648205] CPU: 1 PID: 6971 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 109.656508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 109.665842] Call Trace: [ 109.668432] dump_stack+0x1c9/0x2b4 [ 109.672061] ? dump_stack_print_info.cold.2+0x52/0x52 [ 109.677256] ? kasan_check_write+0x14/0x20 [ 109.681482] ? do_raw_spin_lock+0xc1/0x200 [ 109.685709] handle_userfault.cold.33+0x47/0x62 [ 109.690377] ? userfaultfd_ioctl+0x5420/0x5420 [ 109.694948] ? trace_hardirqs_on+0x10/0x10 [ 109.699173] ? lock_release+0xa30/0xa30 [ 109.703141] ? task_numa_work+0xf00/0xf00 [ 109.707276] ? pick_next_entity+0x390/0x390 [ 109.711590] ? perf_trace_lock+0xde/0x920 [ 109.715727] ? reweight_entity+0x7ed/0x1100 [ 109.720556] ? zap_class+0x740/0x740 [ 109.724271] ? trace_hardirqs_on+0x10/0x10 [ 109.728489] ? task_fork_fair+0x680/0x680 [ 109.732625] ? reweight_entity+0x1100/0x1100 [ 109.737034] ? trace_hardirqs_on+0x10/0x10 [ 109.741257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 109.746787] ? lock_acquire+0x1e4/0x540 [ 109.750748] ? __handle_mm_fault+0x3a24/0x4480 [ 109.755315] ? lock_downgrade+0x8f0/0x8f0 [ 109.759469] ? kasan_check_read+0x11/0x20 [ 109.763604] ? do_raw_spin_unlock+0xa7/0x2f0 [ 109.768001] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 109.772580] ? kasan_check_write+0x14/0x20 [ 109.782270] ? do_raw_spin_lock+0xc1/0x200 [ 109.786498] __handle_mm_fault+0x3a31/0x4480 [ 109.790898] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 109.795732] ? kasan_check_read+0x11/0x20 [ 109.799876] ? lock_acquire+0x1e4/0x540 [ 109.803840] ? handle_mm_fault+0x417/0xc80 [ 109.808320] ? lock_downgrade+0x8f0/0x8f0 [ 109.812457] ? lock_release+0xa30/0xa30 [ 109.816419] ? mem_cgroup_from_task+0xcb/0x1f0 [ 109.820987] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 109.825752] handle_mm_fault+0x53e/0xc80 [ 109.829803] ? __handle_mm_fault+0x4480/0x4480 [ 109.834372] ? find_vma+0x34/0x190 [ 109.837906] __do_page_fault+0x620/0xe50 [ 109.841959] ? mm_fault_error+0x380/0x380 [ 109.846099] do_page_fault+0xf6/0x8c0 [ 109.849990] ? vmalloc_sync_all+0x30/0x30 [ 109.854142] ? lock_acquire+0x1e4/0x540 [ 109.858104] ? __might_fault+0x12b/0x1e0 [ 109.862159] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 109.867002] page_fault+0x1e/0x30 [ 109.870447] RIP: 0010:__get_user_4+0x21/0x30 [ 109.874837] Code: 50 ff 31 c0 0f 1f 00 c3 90 48 83 c0 03 72 55 65 48 8b 14 25 40 ee 01 00 48 3b 82 d8 13 00 00 73 43 48 19 d2 48 21 d0 0f 1f 00 <8b> 50 fd 31 c0 0f 1f 00 c3 66 0f 1f 44 00 00 48 83 c0 07 72 25 65 [ 109.894130] RSP: 0018:ffff880198297538 EFLAGS: 00010202 [ 109.899498] RAX: 0000000020013e98 RBX: 1ffff10033052eae RCX: ffffc9000885d000 [ 109.906762] RDX: ffffffffffffffff RSI: ffffffff81ab7a33 RDI: 0000000000000286 [ 109.914035] RBP: ffff880198297cb8 R08: 1ffff10033052e84 R09: ffff880198297260 [ 109.921293] R10: ffffed003348c829 R11: ffff88019a46414b R12: ffff88019a4640c0 [ 109.928550] R13: 0000000000000084 R14: dffffc0000000000 R15: 0000000000000004 [ 109.935833] ? __might_fault+0x1a3/0x1e0 [ 109.939895] ? sctp_setsockopt+0x1e13/0x6db0 [ 109.944288] ? get_futex_value_locked+0xcb/0xf0 [ 109.948948] ? sctp_setsockopt_paddr_thresholds+0x560/0x560 [ 109.954651] ? trace_hardirqs_on+0x10/0x10 [ 109.958867] ? futex_wake+0x760/0x760 [ 109.962665] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 109.967843] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 109.973364] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 109.978455] ? futex_wait+0x5d2/0xa20 [ 109.982249] ? perf_trace_lock+0xde/0x920 [ 109.986394] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 109.991571] ? zap_class+0x740/0x740 [ 109.995273] ? futex_wake+0x304/0x760 [ 109.999075] ? save_stack+0x43/0xd0 [ 110.002709] ? kasan_kmalloc+0xc4/0xe0 [ 110.006606] ? __get_empty_filp+0x11b/0x620 [ 110.010913] ? alloc_file+0x29/0x3e0 [ 110.014619] ? sock_alloc_file+0x1fb/0x500 [ 110.018841] ? __sys_socket+0x172/0x260 [ 110.022813] ? __x64_sys_socket+0x73/0xb0 [ 110.026961] ? lock_acquire+0x1e4/0x540 [ 110.030922] ? __fget+0x4ac/0x740 [ 110.034360] ? lock_downgrade+0x8f0/0x8f0 [ 110.038496] ? lock_release+0xa30/0xa30 [ 110.042457] ? exit_robust_list+0x290/0x290 [ 110.046769] ? __fget+0x4d5/0x740 [ 110.050214] ? ksys_dup3+0x690/0x690 [ 110.053917] ? lock_acquire+0x1e4/0x540 [ 110.057879] ? __fd_install+0x2b2/0x880 [ 110.061838] ? lock_downgrade+0x8f0/0x8f0 [ 110.065977] ? lock_release+0xa30/0xa30 [ 110.069938] ? __get_empty_filp+0x12f/0x620 [ 110.074245] ? proc_nr_files+0x60/0x60 [ 110.078116] ? _raw_spin_unlock+0x22/0x30 [ 110.082251] ? __fget_light+0x2f7/0x440 [ 110.086212] ? fget_raw+0x20/0x20 [ 110.089650] ? get_unused_fd_flags+0x1a0/0x1a0 [ 110.094229] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 110.099763] ? alloc_file+0x49/0x3e0 [ 110.103466] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 110.108987] ? sock_alloc_file+0x2ac/0x500 [ 110.113223] sock_common_setsockopt+0x9a/0xe0 [ 110.117708] __sys_setsockopt+0x1c5/0x3b0 [ 110.121845] ? kernel_accept+0x310/0x310 [ 110.125893] ? do_futex+0x27d0/0x27d0 [ 110.129681] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 110.135205] ? fput+0x130/0x1a0 [ 110.138475] __x64_sys_setsockopt+0xbe/0x150 [ 110.142873] do_syscall_64+0x1b9/0x820 [ 110.146764] ? finish_task_switch+0x1d3/0x870 [ 110.151249] ? syscall_return_slowpath+0x5e0/0x5e0 [ 110.156165] ? syscall_return_slowpath+0x31d/0x5e0 [ 110.161431] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 110.166434] ? prepare_exit_to_usermode+0x291/0x3b0 [ 110.171448] ? perf_trace_sys_enter+0xb10/0xb10 [ 110.176105] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 110.180936] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 110.186115] RIP: 0033:0x455e29 [ 110.189284] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 110.208568] RSP: 002b:00007f9134b56c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 110.216280] RAX: ffffffffffffffda RBX: 00007f9134b576d4 RCX: 0000000000455e29 [ 110.223535] RDX: 0000000000000008 RSI: 0000000000000084 RDI: 0000000000000015 [ 110.230791] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 110.238045] R10: 0000000020013e95 R11: 0000000000000246 R12: 00000000ffffffff 11:38:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:38:49 executing program 6: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0x4, r0, &(0x7f0000000200)=""/56, 0xfffffffffffffff2) 11:38:49 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x89a0, &(0x7f0000000100)={'ip6tnl0\x00'}) 11:38:49 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:38:49 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='gre0\x00', 0x10) 11:38:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00001ed000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 11:38:49 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) [ 110.245307] R13: 00000000004c7370 R14: 00000000004d2800 R15: 0000000000000000 11:38:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="036fb904bae280d95d40135c9b0a4329cdd312c218f117e2bea31ccb12d2769a6e15f7255d670926e71d15d86cf95dc591671716dbbd4a57a9d25783d766b76aa0253f3a048ce32f649100b1fb7a8a640320f7ad70ef489eebfe625deb1f746b2d57ad6ffcebf766574249e2f1ce8d9a947cfdfabc17f382cc056570ad6c96658af7af013bd7e96ec9d401eb7a1825cee6adac1128f3b03f1809b9ea287051f64116510c0bbd676d331453ca2362e41ae728b088b3916735d7b39f804fdf58d87a8f8755bd1c62d86cba7d8d55fb9771647ba7992201698942a1a37e1f5375f2f70cc2968e0ede024ffccb69b8f641427f6ec4bae9227b1670b5beb9c321c4e218372d286a60e831291ceb154cca1eb8ddf5b3282707abcd2a41b071b87f53bbed74dca0310fba1d13a3ccca0996af17c67b3f55636c410a36ba51a5485bc8c06b5c476a394c85335b48c1423583eeece32dd20c5620d3550161e019b5fd24f3e8fa31894b1fe616f6ab0dbb85bea66bb100d9f20264741ed43713335bcdef5cb08e42", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:38:49 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:38:49 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sync_file_range(r0, 0x0, 0x0, 0x4) 11:38:49 executing program 0: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RLINK(r0, &(0x7f0000000080)={0x7, 0x47, 0x2}, 0x7) fcntl$getown(r0, 0x9) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x14) creat(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 11:38:49 executing program 7: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000f000)="240000001a00030207fffd946fa283bc04eee6d87986c49727008568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 11:38:49 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @rand_addr, 0x0, 0x0, 'dh\x00'}, 0x2c) [ 110.366911] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:38:49 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) [ 110.407792] loop0: p1 p2 p3 p4 < > 11:38:49 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:38:49 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) [ 110.475634] loop0: p1 p2 p3 p4 < > 11:38:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:38:50 executing program 2: add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000000180), 0x0, 0x0) request_key(&(0x7f0000000bc0)="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", &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3, 0x1000000}, &(0x7f0000000300)="af2019dcc2380b4623dc8c7a581973a96d57452035fca47b18e7992f4c82e608a92c747d6e80519f2f5a436783ee4e3264245238b946a4a11d39b7873e5f3296185625d49ae13974d13940d0c01a5029b35aec2234864afd4648", 0x0) 11:38:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000008912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)) 11:38:50 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:38:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00001ed000/0x4000)=nil, 0x7fbdc92d9000, 0x0, 0x10, r0, 0x0) 11:38:50 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:38:50 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:38:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:38:50 executing program 0: pause() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount(&(0x7f00000005c0)='.', &(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000640)='mslos\x00', 0x500c, &(0x7f00000e7000)) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00') 11:38:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r1 = getpid() close(0xffffffffffffffff) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000400)={0x3, 0x70, 0x7, 0x0, 0x6, 0x0, 0x0, 0x8000000000000000, 0x4100, 0x5, 0xb27a, 0x0, 0x78b4, 0x5, 0xfffffffffffffbeb, 0x9, 0x1, 0x0, 0x4d7, 0x0, 0x9, 0x8, 0x100000000, 0x880e, 0x77, 0x81, 0x80000001, 0xffff, 0x1, 0xf1, 0x537, 0x1, 0x20, 0x9, 0x6283, 0x7ff, 0x5, 0x100000001, 0x0, 0xff, 0x1, @perf_bp={&(0x7f00000003c0), 0xf}, 0x8410, 0x2c112bfc, 0xf2f, 0x6, 0x5cd, 0x1f, 0x1ff}, r1, 0xc, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) 11:38:50 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:38:50 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000100)={'ip6tnl0\x00'}) 11:38:50 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:38:50 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) r1 = epoll_create1(0x0) poll(&(0x7f0000000080), 0x0, 0x800) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000c1d000)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timerfd_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, r3+10000000}}, &(0x7f0000000100)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x9ce, &(0x7f00000000c0), 0x8) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f000003cff4)={0x7}) 11:38:50 executing program 5: mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:38:50 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) dup2(r1, r0) 11:38:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:38:51 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) dup2(r1, r0) 11:38:51 executing program 6: request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)='bdevproc@mime_type-\x00', 0xfffffffffffffffd) 11:38:51 executing program 5: mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:38:51 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:38:51 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x5) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000100), 0x401) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x9) sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe) ftruncate(r1, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000340)={0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x2}) 11:38:51 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) dup2(r1, r0) 11:38:51 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) recvfrom$unix(r0, &(0x7f0000000000)=""/1, 0x1, 0x0, &(0x7f00000000c0)=@abs, 0x6e) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x80, 0x0, 0x3}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendto$inet6(r1, &(0x7f0000000480), 0x37, 0x0, 0x0, 0x2a6) [ 112.048031] hrtimer: interrupt took 27365 ns 11:38:56 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="49777f87058b0eaca6eecf8b9603d635", 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f00001ed000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) 11:38:56 executing program 5: mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:38:56 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:38:56 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:38:56 executing program 2: mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x7fb24bf97000, 0x0, 0x7a, 0xffffffffffffffff, 0x0) 11:38:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) 11:38:56 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x5) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000100), 0x401) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x9) sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe) ftruncate(r1, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000340)={0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x2}) 11:38:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000100)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000000600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000001600)}) 11:38:56 executing program 3: request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)='bdevproc@mime_type-\x00', 0x0) 11:38:56 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:38:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0x22d, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x48}, 0x1}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 11:38:56 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) [ 117.776334] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 117.791819] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:38:57 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60110c1100303a00fe800000000000000000a5f6bd66c97268e328db83b5e21ea90000000000ffff020000000000000000000000000001830090780000000060cb155d00000000ff020000000000000000000000000001fe800000000000000000000000000000"], 0x0) 11:38:57 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:38:57 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:38:57 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlock(&(0x7f00001ef000/0x2000)=nil, 0x2000) [ 118.330750] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:38:57 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xda, &(0x7f00000000c0), &(0x7f0000000180)=0x4) 11:38:57 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:38:57 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:38:57 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000740)) 11:38:57 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:38:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) [ 118.533971] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 118.541276] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 118.624171] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 118.631351] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 118.642313] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 118.649507] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 11:38:57 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:38:57 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 11:38:57 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:38:57 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 11:38:57 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20001480, 0x0, 0x0, 0x200014b0, 0x200014e0], 0x0, &(0x7f0000000000), &(0x7f0000001480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x3, 0x0, 0x0, 'irlan0\x00', 'bridge0\x00', 'sit0\x00', 'team0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x1d8, 0x1d8, 0x210, [@comment={'comment\x00', 0x100}, @statistic={'statistic\x00', 0x18}]}}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}}, {{{0x1b, 0x0, 0x0, 'team_slave_1\x00', 'irlan0\x00', 'irlan0\x00', 'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2}, [], @random="f646793b7b39", [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}}]}]}, 0x3c0) 11:38:57 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) [ 118.678417] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 118.685587] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 11:38:57 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:38:57 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="240000001a00030207fffd4abea283bc0411b0eee6d87986c49727008568b51ba3a2d188737e73279a132573dcd70bd533adda7e12d5e1cd02113e79209b2a162692949b032dbebfdf24", 0x4a}], 0x1}, 0x0) 11:38:57 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r0, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) socketpair(0x0, 0x80006, 0xf65d, &(0x7f00000000c0)) accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x1c) 11:38:57 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) [ 118.749877] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.756551] bridge0: port 1(bridge_slave_0) entered disabled state 11:38:57 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) ioctl$fiemap(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(0xffffffffffffffff, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) [ 118.831097] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.837547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.844218] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.850631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.857386] device bridge0 entered promiscuous mode 11:38:58 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(0xffffffffffffffff, r0) 11:38:58 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) ioctl$fiemap(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(0xffffffffffffffff, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) [ 118.893100] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.899631] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.912938] device bridge0 left promiscuous mode [ 118.928163] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.934679] bridge0: port 2(bridge_slave_1) entered forwarding state 11:38:58 executing program 2: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x103001, 0x0) r1 = open$dir(&(0x7f0000296ff8)='./file0\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 11:38:58 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) [ 118.941480] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.947942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.955605] device bridge0 entered promiscuous mode 11:38:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) 11:38:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r0, 0xffffffffffffffff) 11:38:58 executing program 6: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x80}, 0x10) 11:38:58 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) ioctl$fiemap(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(0xffffffffffffffff, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:38:58 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:38:58 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:38:58 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:38:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000017000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) 11:38:58 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:38:59 executing program 3: r0 = memfd_create(&(0x7f000088f000)='b\n\x00\x00\x00', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 11:38:59 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 11:38:59 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:38:59 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:38:59 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 11:38:59 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:38:59 executing program 2: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x103001, 0x0) r1 = open$dir(&(0x7f0000296ff8)='./file0\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 11:38:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) recvmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(0xffffffffffffffff, &(0x7f0000000500)="036fb904bae280d95d40135c9b0a4329cdd312c218f117e2bea31ccb12d2769a6e15f7255d670926e71d15d86cf95dc591671716dbbd4a57a9d25783d766b76aa0253f3a048ce32f649100b1fb7a8a640320f7ad70ef489eebfe625deb1f746b2d57ad6ffcebf766574249e2f1ce8d9a947cfdfabc17f382cc056570ad6c96658af7af013bd7e96ec9d401eb7a1825cee6adac1128f3b03f1809b9ea287051f64116510c0bbd676d331453ca2362e41ae728b088b3916735d7b39f804fdf58d87a8f8755bd1c62d86cba7d8d55fb9771647ba7992201698942a1a37e1f5375f2f70cc2968e0ede024ffccb69b8f641427f6ec4bae9227b1670b5beb9c321c4e218372d286a60e831291ceb154cca1eb8ddf5b3282707abcd2a41b071b87f53bbed74dca0310fba1d13a3ccca0996af17c67b3f55636c410a36ba51a5485bc8c06b5c476a394c85335b48c1423583eeece32dd20c5620d3550161e019b5fd24f3e8fa31894b1fe616f6ab0dbb85bea66bb100d9f20264741ed43713335bcdef5cb08e42", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:38:59 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:38:59 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300), 0x0) 11:38:59 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:38:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0), 0x0, &(0x7f00000012c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0xcf, &(0x7f0000000000)=""/123, 0x7b}, 0x0) 11:38:59 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000740)) 11:38:59 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300), 0x0) 11:38:59 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) [ 120.196319] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 120.203450] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock 11:38:59 executing program 7: ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:38:59 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:38:59 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300), 0x0) 11:38:59 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:38:59 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 11:38:59 executing program 7: ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:38:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r2, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:38:59 executing program 2: 11:38:59 executing program 3: 11:38:59 executing program 6: 11:38:59 executing program 5: 11:38:59 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:38:59 executing program 3: modify_ldt$write(0x1, &(0x7f0000000340)={0x3ff}, 0x10) 11:38:59 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 11:38:59 executing program 7: ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:38:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) 11:39:00 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0xc0045878, &(0x7f0000000580)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000000000000000001f0000000000000004000000000000000000000000000800"}) 11:39:00 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(0xffffffffffffffff, r0) 11:39:00 executing program 0: 11:39:00 executing program 6: 11:39:00 executing program 7: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:39:00 executing program 3: 11:39:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r2, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:00 executing program 5: 11:39:00 executing program 2: 11:39:00 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, 0xffffffffffffffff) 11:39:00 executing program 3: 11:39:00 executing program 6: 11:39:00 executing program 0: 11:39:00 executing program 3: 11:39:00 executing program 2: 11:39:00 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000000), 0x4) 11:39:00 executing program 7: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:39:00 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000000c0)={0x303, 0x33}, 0x4) 11:39:00 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = fcntl$getown(r0, 0x9) prlimit64(r1, 0xf, 0x0, &(0x7f0000000080)) 11:39:00 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x88) 11:39:00 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x0, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 'dh\x00'}, 0x2c) 11:39:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) [ 121.912433] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:39:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r2, &(0x7f0000000500)="036fb904bae280d95d40135c9b0a4329cdd312c218f117e2bea31ccb12d2769a6e15f7255d670926e71d15d86cf95dc591671716dbbd4a57a9d25783d766b76aa0253f3a048ce32f649100b1fb7a8a640320f7ad70ef489eebfe625deb1f746b2d57ad6ffcebf766574249e2f1ce8d9a947cfdfabc17f382cc056570ad6c96658af7af013bd7e96ec9d401eb7a1825cee6adac1128f3b03f1809b9ea287051f64116510c0bbd676d331453ca2362e41ae728b088b3916735d7b39f804fdf58d87a8f8755bd1c62d86cba7d8d55fb9771647ba7992201698942a1a37e1f5375f2f70cc2968e0ede024ffccb69b8f641427f6ec4bae9227b1670b5beb9c321c4e218372d286a60e831291ceb154cca1eb8ddf5b3282707abcd2a41b071b87f53bbed74dca0310fba1d13a3ccca0996af17c67b3f55636c410a36ba51a5485bc8c06b5c476a394c85335b48c1423583eeece32dd20c5620d3550161e019b5fd24f3e8fa31894b1fe616f6ab0dbb85bea66bb100d9f20264741ed43713335bcdef5cb08e42", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:01 executing program 6: mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:39:01 executing program 0 (fault-call:3 fault-nth:0): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:39:01 executing program 7: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:39:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289bce062d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc7ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883feb3dc3cc24bd3c036e396ad3af37945058839e812270bc40901fa654e7cc3292a82fc80c374dc07142a1c2e9d3e2528e4fdac32bcaefe910ebd3b948a3bfebef5fa8d82473c7fbf3ec", 0x0, 0x0) fcntl$notify(r1, 0x402, 0x800000000000022c) fcntl$notify(0xffffffffffffffff, 0x402, 0x3) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="670f0118c4c3695f470d073ef30f01f28fca18128b87f00000faffffffb969090000b865000000ba000000000f30360f2012660f3882120f01cf669a0b003d9c660f1b28", 0x44}], 0x1, 0x21, &(0x7f00000000c0), 0x0) 11:39:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, {0x1, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x38, {0x2, 0x4e23, @multicast2=0xe0000002}, 'veth0_to_bond\x00'}) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)={0x8, 0x0, 0x60000000000, 0x1000000000000000}) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000140)={0x2, 0x3ff}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000080)) [ 122.641886] FAULT_INJECTION: forcing a failure. [ 122.641886] name failslab, interval 1, probability 0, space 0, times 1 [ 122.653213] CPU: 0 PID: 7516 Comm: syz-executor0 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 122.653221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.653226] Call Trace: [ 122.653249] dump_stack+0x1c9/0x2b4 [ 122.653269] ? dump_stack_print_info.cold.2+0x52/0x52 [ 122.653284] ? rcu_note_context_switch+0x730/0x730 [ 122.653299] ? dput.part.26+0x248/0x7a0 [ 122.653316] ? perf_trace_lock+0xde/0x920 [ 122.653335] should_fail.cold.4+0xa/0x11 [ 122.653352] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 122.653367] ? seq_read+0x6e/0x10e0 [ 122.653383] ? perf_trace_lock+0xde/0x920 [ 122.653400] ? mutex_trylock+0x2b0/0x2b0 [ 122.653413] ? zap_class+0x740/0x740 [ 122.653430] ? zap_class+0x740/0x740 [ 122.653447] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 122.653461] ? security_inode_permission+0xd2/0x100 [ 122.653490] ? lock_acquire+0x1e4/0x540 [ 122.653506] ? fs_reclaim_acquire+0x20/0x20 [ 122.653522] ? lock_downgrade+0x8f0/0x8f0 [ 122.653538] ? rcu_note_context_switch+0x730/0x730 [ 122.653555] ? check_same_owner+0x340/0x340 [ 122.653571] ? rcu_note_context_switch+0x730/0x730 [ 122.653585] ? lock_acquire+0x1e4/0x540 [ 122.653603] __should_failslab+0x124/0x180 [ 122.653622] should_failslab+0x9/0x14 [ 122.653638] kmem_cache_alloc_node_trace+0x26f/0x770 [ 122.653659] __kmalloc_node+0x33/0x70 [ 122.653675] kvmalloc_node+0x65/0xf0 [ 122.653691] seq_read+0x957/0x10e0 [ 122.653711] ? rw_verify_area+0x118/0x360 [ 122.653727] do_iter_read+0x49e/0x650 [ 122.653748] vfs_readv+0x175/0x1c0 [ 122.653760] ? __fget_light+0x2f7/0x440 [ 122.653775] ? compat_rw_copy_check_uvector+0x440/0x440 [ 122.653788] ? fsnotify+0xbac/0x14e0 [ 122.653801] ? vfs_write+0x2f3/0x560 [ 122.653819] ? wait_for_completion+0x8d0/0x8d0 [ 122.653832] ? lock_release+0xa30/0xa30 [ 122.653848] ? fsnotify_first_mark+0x350/0x350 [ 122.653869] ? mutex_lock_nested+0x16/0x20 [ 122.653884] ? mutex_lock_nested+0x16/0x20 [ 122.653896] ? __fdget_pos+0xde/0x200 [ 122.653908] ? __fdget_raw+0x20/0x20 [ 122.653923] ? __sb_end_write+0xac/0xe0 [ 122.653941] do_readv+0x11a/0x310 [ 122.653957] ? vfs_readv+0x1c0/0x1c0 [ 122.653972] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 122.653991] __x64_sys_readv+0x75/0xb0 [ 122.654012] do_syscall_64+0x1b9/0x820 [ 122.654027] ? finish_task_switch+0x1d3/0x870 [ 122.654044] ? syscall_return_slowpath+0x5e0/0x5e0 [ 122.654060] ? syscall_return_slowpath+0x31d/0x5e0 [ 122.654077] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 122.654094] ? prepare_exit_to_usermode+0x291/0x3b0 [ 122.654111] ? perf_trace_sys_enter+0xb10/0xb10 [ 122.654126] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 122.654145] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 122.654155] RIP: 0033:0x455e29 [ 122.654159] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 122.932673] RSP: 002b:00007f48c8069c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 11:39:01 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_flowlabel\x00') getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0xffffffff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000140)=r2, 0x4) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0), 0x0) 11:39:02 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x210101, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) fstat(r0, &(0x7f0000000340)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x1000002, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) connect$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x4, 0x0, 0x0, 0x0, 0x0, "18180f6d24d38d14e29964c9ffd70883a36edbaf8564710b9dfa52d8d8aa19cc9b8a486bd7b017353979c748a3e9ff0cef35f11eef69333e2b1bb9acf4b65f", 0xc}, 0x60) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x3d, "2881dfff7a7bbe9e8efa4868c42cca82bb186d61938b7f662bf18462256e11a5d6222238c14a0aa8cc70df601b24ee5b5b8c33ee9825e23426f63e7026"}, &(0x7f00000001c0)=0x45) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r2, @in={{0x2, 0x4e22, @rand_addr=0x2}}}, 0x84) [ 122.940378] RAX: ffffffffffffffda RBX: 00007f48c806a6d4 RCX: 0000000000455e29 [ 122.947650] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000013 [ 122.954917] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 122.962182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 122.969448] R13: 00000000004c0cf1 R14: 00000000004d0fb8 R15: 0000000000000000 11:39:02 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="02180000100000000000000000000000030006000000000002000000e00000010000000000000000080012000000000000000000000000001a0000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000030005000000000002000000e0000001000000000000000010fc72a897c66b19baec13a8ed8531896ef69feace5834a3af2a62357f5a03a6b66e19d50b1e689f3a24ea93e61787d368c31d02609e14523599b7a7df1db160d2e751b057e819b27c30d4d388b8ec495799b98b"], 0x80}, 0x1}, 0x0) r1 = semget$private(0x0, 0x1, 0x200) semctl$GETVAL(r1, 0x5, 0xc, &(0x7f0000000000)=""/16) 11:39:02 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:39:02 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000400)={@local, 0x0}, &(0x7f0000000440)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000480)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) write(r0, &(0x7f0000000f80)="5cb1", 0x2) 11:39:02 executing program 0 (fault-call:3 fault-nth:1): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:39:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000003c0)="025cc83d6d345f8f762070") keyctl$join(0x1, &(0x7f0000000280)={0x73, 0x79, 0x7a}) r1 = getpgrp(0xffffffffffffffff) ptrace$pokeuser(0x6, r1, 0x6, 0xd4) syz_open_dev$sndtimer(&(0x7f0000000600)='/dev/snd/timer\x00', 0x0, 0x101000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380), 0x106, 0x7}}, 0x20) timer_create(0x3, &(0x7f0000044000)={0x0, 0x0, 0x1}, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000580)={0x0, 0x1ff, 0x0, {}, 0x3, 0x9}) r3 = dup(r0) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000040)=0x80000004) exit(0x0) getsockname$packet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) sendmsg$xdp(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x2c, 0x3, r4, 0x39}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="2d86f29a11f560d5bf7c1657ccde7b4e8ff9", 0x12}, {&(0x7f0000000180)="45ed278cd6e59ffea3daf115ff851edf5973ac2eb5b295aa75a541", 0x1b}, {&(0x7f00000001c0)="36ff853b7bda635a3a81b8947f4ec8d4452cf266f53bb69b70fd213221c2cbae2ea66874a960eb8d64aa92b9a993799e788c5b85762728336eb84ae574fc9150af47e07ab0b77d1c9188", 0x4a}], 0x3, 0x0, 0x0, 0x4}, 0x850) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000300)={0x20000000}) ioctl$VT_RELDISP(r3, 0x5605) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000440)=0x3ff, 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/autofs\x00', 0x880, 0x0) timer_delete(0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f00000004c0)={{0x8, 0x4}, 'port1\x00', 0x10, 0x0, 0xb1b, 0x0, 0x101, 0x6, 0x4, 0x0, 0x5, 0xfffffffffffffff7}) 11:39:02 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4004510f, &(0x7f0000a07fff)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000040)=""/184, &(0x7f0000000140)=0xb8) 11:39:02 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x1, 0x8, 0x5, 0x4}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x9, 0x80000) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r2, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x92200, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000040)={0x3, 0x4}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000080)) [ 123.122206] FAULT_INJECTION: forcing a failure. [ 123.122206] name failslab, interval 1, probability 0, space 0, times 0 [ 123.133568] CPU: 1 PID: 7553 Comm: syz-executor0 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 123.141899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 123.151962] Call Trace: [ 123.154569] dump_stack+0x1c9/0x2b4 [ 123.158222] ? dump_stack_print_info.cold.2+0x52/0x52 [ 123.163459] ? zap_class+0x740/0x740 [ 123.167193] ? perf_trace_lock+0xde/0x920 11:39:02 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) [ 123.171370] should_fail.cold.4+0xa/0x11 [ 123.175455] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 123.180578] ? perf_trace_lock+0xde/0x920 [ 123.184772] ? zap_class+0x740/0x740 [ 123.188510] ? trace_hardirqs_on+0x10/0x10 [ 123.192768] ? lock_acquire+0x1e4/0x540 [ 123.196776] ? seq_read+0x6e/0x10e0 [ 123.200404] ? percpu_ref_tryget_live+0x15b/0x440 [ 123.205259] ? mem_cgroup_id_get_many+0x160/0x160 [ 123.210110] ? get_mem_cgroup_from_mm+0x1ea/0x440 [ 123.214970] ? lock_downgrade+0x8f0/0x8f0 [ 123.219120] ? lock_release+0xa30/0xa30 [ 123.223097] ? lock_acquire+0x1e4/0x540 [ 123.227064] ? rcu_read_unlock+0x16/0x70 [ 123.231118] ? lock_downgrade+0x8f0/0x8f0 [ 123.235259] __should_failslab+0x124/0x180 [ 123.239521] should_failslab+0x9/0x14 [ 123.243320] kmem_cache_alloc_trace+0x4b/0x780 [ 123.247898] memcg_kmem_get_cache+0x42c/0x9d0 [ 123.252398] ? mem_cgroup_handle_over_high+0x130/0x130 [ 123.257685] ? fs_reclaim_acquire+0x20/0x20 [ 123.262016] ? lock_downgrade+0x8f0/0x8f0 [ 123.266179] ? lock_release+0xa30/0xa30 [ 123.270144] ? rcu_note_context_switch+0x730/0x730 [ 123.275068] ? check_same_owner+0x340/0x340 [ 123.279382] ? rcu_note_context_switch+0x730/0x730 [ 123.284303] ? lock_acquire+0x1e4/0x540 [ 123.288299] kmem_cache_alloc_node_trace+0x1a4/0x770 [ 123.293426] __kmalloc_node+0x33/0x70 [ 123.297229] kvmalloc_node+0x65/0xf0 [ 123.300942] seq_read+0x957/0x10e0 [ 123.304487] ? rw_verify_area+0x118/0x360 [ 123.308633] do_iter_read+0x49e/0x650 [ 123.312446] vfs_readv+0x175/0x1c0 [ 123.315975] ? __fget_light+0x2f7/0x440 [ 123.319962] ? compat_rw_copy_check_uvector+0x440/0x440 [ 123.325344] ? fsnotify+0xbac/0x14e0 [ 123.329160] ? vfs_write+0x2f3/0x560 [ 123.332875] ? wait_for_completion+0x8d0/0x8d0 [ 123.337452] ? lock_release+0xa30/0xa30 [ 123.341530] ? fsnotify_first_mark+0x350/0x350 [ 123.346119] ? mutex_lock_nested+0x16/0x20 [ 123.350347] ? mutex_lock_nested+0x16/0x20 [ 123.354595] ? __fdget_pos+0xde/0x200 [ 123.358394] ? __fdget_raw+0x20/0x20 [ 123.362098] ? __sb_end_write+0xac/0xe0 [ 123.366075] do_readv+0x11a/0x310 [ 123.369529] ? vfs_readv+0x1c0/0x1c0 [ 123.373245] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 123.378796] __x64_sys_readv+0x75/0xb0 [ 123.382676] do_syscall_64+0x1b9/0x820 [ 123.386559] ? syscall_return_slowpath+0x5e0/0x5e0 [ 123.391504] ? syscall_return_slowpath+0x31d/0x5e0 [ 123.396449] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 123.401460] ? prepare_exit_to_usermode+0x291/0x3b0 [ 123.406487] ? perf_trace_sys_enter+0xb10/0xb10 [ 123.411179] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 123.416032] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 123.421220] RIP: 0033:0x455e29 [ 123.424400] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 123.443621] RSP: 002b:00007f48c8069c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 123.451322] RAX: ffffffffffffffda RBX: 00007f48c806a6d4 RCX: 0000000000455e29 [ 123.459030] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000013 [ 123.466300] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 123.473565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 123.480923] R13: 00000000004c0cf1 R14: 00000000004d0fb8 R15: 0000000000000001 [ 123.526709] Unknown ioctl -1067691200 11:39:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)="0000000000000000000060fad41000", 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000080)) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000180)={0x1, 0xfffffffffffffff8, 0x100000000}) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000140)={0xb987, 0x4, 0x5}) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x7, 0x20000) 11:39:03 executing program 6: r0 = socket$inet6_sctp(0xa, 0x80000000005, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001000)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x98) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in=@rand_addr=0x1000000, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, {{@in=@multicast2=0xe0000002}, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, 0xe8) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000001000)=""/144, &(0x7f0000001ffc)=0x90) 11:39:03 executing program 0 (fault-call:3 fault-nth:2): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:39:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r2, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:03 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) [ 123.937247] FAULT_INJECTION: forcing a failure. [ 123.937247] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 123.949115] CPU: 0 PID: 7574 Comm: syz-executor0 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 123.957444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 123.967152] Call Trace: [ 123.969764] dump_stack+0x1c9/0x2b4 [ 123.973394] ? dump_stack_print_info.cold.2+0x52/0x52 [ 123.978574] ? do_raw_spin_unlock+0xa7/0x2f0 [ 123.982983] should_fail.cold.4+0xa/0x11 [ 123.987051] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 123.992164] ? kasan_check_read+0x11/0x20 [ 123.996302] ? do_raw_spin_unlock+0xa7/0x2f0 [ 124.000702] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 124.005287] ? do_raw_spin_lock+0xc1/0x200 [ 124.009523] ? _raw_spin_unlock+0x22/0x30 [ 124.013659] ? __queue_work+0x68d/0x1410 [ 124.017723] ? lock_acquire+0x1e4/0x540 [ 124.021704] ? percpu_ref_put_many+0x119/0x240 [ 124.026281] ? lock_downgrade+0x8f0/0x8f0 [ 124.030422] ? lock_release+0xa30/0xa30 [ 124.034403] ? lock_acquire+0x1e4/0x540 [ 124.038377] ? rcu_read_unlock+0x16/0x70 [ 124.042433] __alloc_pages_nodemask+0x36e/0xdb0 [ 124.047124] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 124.052148] ? mem_cgroup_id_get_online+0x310/0x310 [ 124.057160] ? trace_hardirqs_on+0xd/0x10 [ 124.061321] ? queue_work_on+0x12c/0x1e0 [ 124.065406] ? mem_cgroup_handle_over_high+0x130/0x130 [ 124.070676] ? fs_reclaim_acquire+0x20/0x20 [ 124.075036] ? lock_downgrade+0x8f0/0x8f0 [ 124.079202] ? lock_release+0xa30/0xa30 [ 124.083186] ? rcu_note_context_switch+0x730/0x730 [ 124.088121] ? check_same_owner+0x340/0x340 [ 124.092442] cache_grow_begin+0x91/0x710 [ 124.096520] kmem_cache_alloc_node_trace+0x692/0x770 [ 124.101633] __kmalloc_node+0x33/0x70 [ 124.105457] kvmalloc_node+0x65/0xf0 [ 124.109178] seq_read+0x957/0x10e0 [ 124.112725] ? rw_verify_area+0x118/0x360 [ 124.116873] do_iter_read+0x49e/0x650 [ 124.120669] vfs_readv+0x175/0x1c0 [ 124.124195] ? __fget_light+0x2f7/0x440 [ 124.128176] ? compat_rw_copy_check_uvector+0x440/0x440 [ 124.133539] ? fsnotify+0xbac/0x14e0 [ 124.137239] ? vfs_write+0x2f3/0x560 [ 124.140943] ? wait_for_completion+0x8d0/0x8d0 [ 124.145524] ? lock_release+0xa30/0xa30 [ 124.149500] ? fsnotify_first_mark+0x350/0x350 [ 124.154068] ? __fsnotify_parent+0xcc/0x420 [ 124.158386] ? mutex_lock_nested+0x16/0x20 [ 124.162610] ? mutex_lock_nested+0x16/0x20 [ 124.166938] ? __fdget_pos+0xde/0x200 [ 124.170729] ? __fdget_raw+0x20/0x20 [ 124.174442] ? __sb_end_write+0xac/0xe0 [ 124.178412] do_readv+0x11a/0x310 [ 124.181857] ? vfs_readv+0x1c0/0x1c0 [ 124.185572] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 124.191125] __x64_sys_readv+0x75/0xb0 [ 124.195004] do_syscall_64+0x1b9/0x820 [ 124.198882] ? finish_task_switch+0x1d3/0x870 [ 124.203374] ? syscall_return_slowpath+0x5e0/0x5e0 [ 124.208308] ? syscall_return_slowpath+0x31d/0x5e0 [ 124.213231] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 124.218236] ? prepare_exit_to_usermode+0x291/0x3b0 [ 124.223254] ? perf_trace_sys_enter+0xb10/0xb10 [ 124.227910] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 124.232755] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 124.237944] RIP: 0033:0x455e29 [ 124.241117] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 124.260395] RSP: 002b:00007f48c8069c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 124.268107] RAX: ffffffffffffffda RBX: 00007f48c806a6d4 RCX: 0000000000455e29 [ 124.275367] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000013 11:39:03 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:39:03 executing program 6: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r0) sendto(r0, &(0x7f0000000880)="a6", 0x1, 0x8000, &(0x7f0000000980)=@vsock={0x28, 0x0, 0x0, @reserved=0x1}, 0x80) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000002840)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000002800)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x0, 0x0, 0x0, {0x8}}, 0x14}, 0x1}, 0x0) r3 = shmget(0x2, 0x1000, 0x400, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) [ 124.282637] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 124.289901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 124.297156] R13: 00000000004c0cf1 R14: 00000000004d0fb8 R15: 0000000000000002 11:39:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r2, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:03 executing program 0 (fault-call:3 fault-nth:3): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:39:03 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) [ 124.411653] FAULT_INJECTION: forcing a failure. [ 124.411653] name failslab, interval 1, probability 0, space 0, times 0 [ 124.423797] CPU: 1 PID: 7600 Comm: syz-executor0 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 124.432138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 124.441515] Call Trace: [ 124.444109] dump_stack+0x1c9/0x2b4 [ 124.447734] ? dump_stack_print_info.cold.2+0x52/0x52 [ 124.452929] should_fail.cold.4+0xa/0x11 [ 124.456988] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 124.462089] ? trace_hardirqs_on+0x10/0x10 [ 124.466316] ? zap_class+0x740/0x740 [ 124.470035] ? trace_hardirqs_on+0x10/0x10 [ 124.474259] ? perf_trace_lock+0xde/0x920 [ 124.478516] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 124.484046] ? should_fail+0x246/0xd86 [ 124.487941] ? lock_acquire+0x1e4/0x540 [ 124.491909] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 124.497024] ? perf_trace_lock+0xde/0x920 [ 124.501185] ? trace_hardirqs_on+0x10/0x10 [ 124.505413] ? zap_class+0x740/0x740 [ 124.509121] __should_failslab+0x124/0x180 [ 124.513371] should_failslab+0x9/0x14 [ 124.517171] kmem_cache_alloc+0x47/0x760 [ 124.521241] xas_alloc+0x38a/0x490 [ 124.524771] ? minmax_running_min+0x690/0x690 [ 124.529264] xas_create+0x716/0x1150 [ 124.532973] ? lock_release+0xa30/0xa30 [ 124.536953] ? xas_descend+0x5f0/0x5f0 [ 124.540833] ? try_charge+0xbc2/0x1680 [ 124.544710] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 124.550243] ? xas_start+0x23d/0x740 [ 124.553960] ? xas_find_tagged+0x13d0/0x13d0 [ 124.558361] ? lock_acquire+0x1e4/0x540 [ 124.562327] ? shmem_add_to_page_cache+0x8cf/0x1450 [ 124.567337] ? percpu_ref_put_many+0x119/0x240 [ 124.571914] xas_create_range+0x107/0x4d0 [ 124.576060] shmem_add_to_page_cache+0x8f1/0x1450 [ 124.580913] ? shmem_write_end+0x9a0/0x9a0 [ 124.585152] ? mem_cgroup_try_charge+0x548/0xa70 [ 124.589905] ? mem_cgroup_protected+0xa60/0xa60 [ 124.594615] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 124.600150] ? shmem_alloc_and_acct_page+0x31a/0x820 [ 124.605252] ? shmem_getattr+0x2c0/0x2c0 [ 124.609307] ? perf_trace_lock+0xde/0x920 [ 124.613543] shmem_getpage_gfp+0xaad/0x3ec0 [ 124.617865] ? perf_trace_lock+0xde/0x920 [ 124.622020] ? shmem_writepage+0x13a0/0x13a0 [ 124.626420] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 124.631428] ? attach_entity_load_avg+0x860/0x860 [ 124.636266] ? update_load_avg+0x2de/0x2590 [ 124.640597] ? attach_entity_load_avg+0x860/0x860 [ 124.645444] ? prep_compound_page+0x231/0x380 [ 124.649948] ? perf_trace_lock+0xde/0x920 [ 124.654101] ? set_pageblock_migratetype+0x40/0x40 [ 124.659038] ? zap_class+0x740/0x740 [ 124.662744] ? kasan_check_read+0x11/0x20 [ 124.666898] ? rb_erase+0x3550/0x3550 [ 124.670707] ? trace_hardirqs_on+0x10/0x10 [ 124.674942] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 124.680470] ? kernel_poison_pages+0x136/0x220 [ 124.685061] ? __update_load_avg_blocked_se.isra.34+0x460/0x460 [ 124.691202] ? cpuacct_charge+0x2eb/0x5d0 [ 124.695342] ? lock_downgrade+0x8f0/0x8f0 [ 124.699499] ? __update_load_avg_cfs_rq.isra.36+0x435/0x590 [ 124.705301] ? update_load_avg+0x2de/0x2590 [ 124.709618] ? lock_acquire+0x1e4/0x540 [ 124.713589] ? attach_entity_load_avg+0x860/0x860 [ 124.718427] ? lock_release+0xa30/0xa30 [ 124.722399] ? cpuacct_charge+0x30a/0x5d0 [ 124.726546] ? cgroup_rstat_updated+0xe6/0x470 [ 124.731141] ? zap_class+0x740/0x740 [ 124.734858] ? trace_hardirqs_on+0x10/0x10 [ 124.739087] ? plist_check_prev_next+0x115/0x1b0 [ 124.743842] ? update_curr+0x4e7/0xc00 [ 124.747722] ? plist_check_list+0x7e/0xa0 [ 124.751863] ? plist_check_head+0xea/0x150 [ 124.756110] ? perf_trace_lock+0xde/0x920 [ 124.760254] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 124.765785] ? __perf_event_task_sched_out+0x2f0/0x1a60 [ 124.771158] ? zap_class+0x740/0x740 [ 124.774882] ? perf_event_update_userpage+0xd30/0xd30 [ 124.780069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 124.785600] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 124.790781] ? perf_trace_lock+0xde/0x920 [ 124.794924] ? cgroup_rstat_updated+0xe6/0x470 [ 124.799519] ? perf_sched_cb_inc+0x2e0/0x2e0 [ 124.803942] shmem_fault+0x25f/0x960 [ 124.807657] ? shmem_read_mapping_page_gfp+0x1f0/0x1f0 [ 124.812939] ? kasan_check_read+0x11/0x20 [ 124.817098] ? do_raw_spin_unlock+0xa7/0x2f0 [ 124.821513] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 124.826091] ? compat_start_thread+0x80/0x80 [ 124.830504] __do_fault+0xee/0x450 [ 124.834036] ? perf_trace_lock+0xde/0x920 [ 124.838187] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 124.843296] ? pmd_val+0x88/0x100 [ 124.846753] ? add_mm_counter_fast+0xd0/0xd0 [ 124.851154] ? add_mm_counter_fast+0xd0/0xd0 [ 124.855561] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 124.861102] __handle_mm_fault+0x2ad5/0x4480 [ 124.865506] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 124.870339] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 124.875097] ? lock_acquire+0x1e4/0x540 [ 124.879070] ? handle_mm_fault+0x417/0xc80 [ 124.883297] ? lock_downgrade+0x8f0/0x8f0 [ 124.887439] ? lock_release+0xa30/0xa30 [ 124.891417] ? lock_release+0xa30/0xa30 [ 124.895399] ? rcu_note_context_switch+0x730/0x730 [ 124.900318] ? mem_cgroup_from_task+0xcb/0x1f0 [ 124.904888] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 124.909655] handle_mm_fault+0x53e/0xc80 [ 124.913799] ? __handle_mm_fault+0x4480/0x4480 [ 124.918374] ? find_vma+0x34/0x190 [ 124.921918] __do_page_fault+0x620/0xe50 [ 124.925986] ? mm_fault_error+0x380/0x380 [ 124.930123] ? walk_page_test+0x160/0x160 [ 124.934351] ? seq_vprintf+0xa0/0x1a0 [ 124.938417] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 124.943952] do_page_fault+0xf6/0x8c0 [ 124.947750] ? vmalloc_sync_all+0x30/0x30 [ 124.951902] ? rcu_note_context_switch+0x730/0x730 [ 124.956830] ? lock_acquire+0x1e4/0x540 [ 124.960795] ? __might_fault+0x12b/0x1e0 [ 124.964852] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 124.969689] page_fault+0x1e/0x30 [ 124.973138] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 124.979010] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 124.998321] RSP: 0018:ffff8801aab479e0 EFLAGS: 00010206 [ 125.003690] RAX: 0000000000000000 RBX: 0000000000000a8b RCX: 0000000000000a8b [ 125.010951] RDX: 0000000000000a8b RSI: ffff8801d7e08040 RDI: 0000000020001400 [ 125.018210] RBP: ffff8801aab47a18 R08: ffffed003afc115a R09: ffffed003afc115a [ 125.025470] R10: ffffed003afc1159 R11: ffff8801d7e08aca R12: 0000000020001e8b [ 125.032731] R13: 0000000020001400 R14: ffff8801d7e08040 R15: 00007ffffffff000 [ 125.040020] ? _copy_to_user+0xf6/0x110 [ 125.043990] seq_read+0x722/0x10e0 [ 125.047537] do_iter_read+0x49e/0x650 [ 125.051335] vfs_readv+0x175/0x1c0 [ 125.054867] ? __fget_light+0x2f7/0x440 [ 125.058850] ? compat_rw_copy_check_uvector+0x440/0x440 [ 125.064214] ? fsnotify+0xbac/0x14e0 [ 125.067931] ? vfs_write+0x2f3/0x560 [ 125.071639] ? wait_for_completion+0x8d0/0x8d0 [ 125.076210] ? lock_release+0xa30/0xa30 [ 125.080177] ? fsnotify_first_mark+0x350/0x350 [ 125.084757] ? mutex_lock_nested+0x16/0x20 [ 125.088991] ? mutex_lock_nested+0x16/0x20 [ 125.093215] ? __fdget_pos+0xde/0x200 [ 125.097006] ? __fdget_raw+0x20/0x20 [ 125.100714] ? __sb_end_write+0xac/0xe0 [ 125.104689] do_readv+0x11a/0x310 [ 125.108136] ? vfs_readv+0x1c0/0x1c0 [ 125.111842] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 125.117376] __x64_sys_readv+0x75/0xb0 [ 125.121256] do_syscall_64+0x1b9/0x820 [ 125.125135] ? finish_task_switch+0x1d3/0x870 [ 125.129620] ? syscall_return_slowpath+0x5e0/0x5e0 [ 125.134539] ? syscall_return_slowpath+0x31d/0x5e0 [ 125.139461] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 125.144467] ? prepare_exit_to_usermode+0x291/0x3b0 [ 125.149473] ? perf_trace_sys_enter+0xb10/0xb10 [ 125.154132] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 125.158987] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 125.164168] RIP: 0033:0x455e29 [ 125.167354] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 125.186663] RSP: 002b:00007f48c8069c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 125.194362] RAX: ffffffffffffffda RBX: 00007f48c806a6d4 RCX: 0000000000455e29 [ 125.201633] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000013 11:39:04 executing program 4 (fault-call:4 fault-nth:0): r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:39:04 executing program 2: [ 125.208891] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 125.216159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 125.223433] R13: 00000000004c0cf1 R14: 00000000004d0fb8 R15: 0000000000000003 [ 125.256033] Unknown ioctl -1067691200 11:39:04 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)='D', 0x1) 11:39:04 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=860']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000400)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) accept4$alg(r0, 0x0, 0x0, 0x80800) 11:39:04 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:39:04 executing program 2: ioperm(0x0, 0xba, 0x40) 11:39:04 executing program 0 (fault-call:3 fault-nth:4): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:39:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 11:39:04 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:39:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r2, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000f59000), 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00005c8000)="c3401c344654f3c7d9fe1ba48c8e399aa4eedc3d6bd8ebd65c856a45d61154adc2b2a976fbffffffffffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x81, &(0x7f0000e66000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) writev(r0, &(0x7f000042a000)=[{&(0x7f00001e3f5a)='-', 0x1}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) shutdown(r0, 0x1) 11:39:04 executing program 5: linkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1400) 11:39:04 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x8, 0x4440) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000000c0)) dup2(r1, r0) [ 125.440666] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 11:39:04 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:39:04 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:39:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28021) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$evdev(r0, &(0x7f0000000040)=[{{}, 0x1, 0x49, 0x2}, {}], 0x30) 11:39:04 executing program 5: perf_event_open(&(0x7f0000000140)={0x1, 0x33b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)) 11:39:04 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:39:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000380)={[{@dmode={'dmode', 0x3d, [0x36]}, 0x2c}]}) [ 125.726722] ISOFS: Unable to identify CD-ROM format. [ 125.761491] ISOFS: Unable to identify CD-ROM format. 11:39:05 executing program 6: r0 = socket$unix(0x1, 0x200000000002, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14}, @in6}}, {{@in6=@remote={0xfe, 0x80, [], 0xbb}}, 0x0, @in6}}, 0xfffffffffffffd55) 11:39:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x33b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040)) 11:39:05 executing program 4: syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x88000, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200000, 0x0) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f00000000c0)={0x9, 0xad, 0xb112}) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x8a55000000000, 0x200000) dup2(r1, r0) 11:39:05 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:39:05 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x236}], 0x1) 11:39:05 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) sendto$unix(r1, &(0x7f0000000000), 0x0, 0x40011, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x0) [ 126.296615] attempt to access beyond end of device [ 126.301679] loop6: rw=1, want=35661, limit=112 11:39:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r2, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x1}) 11:39:05 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:39:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f00000003c0)="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") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffe, 0x10012, r1, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x80086601, &(0x7f0000000000)) 11:39:05 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x2e4}], 0x1) 11:39:05 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x81) memfd_create(&(0x7f0000000040)="6e6f01fcffff692a2936f0d00c94808bcfbce5de2d57e70200818c6ab7847c51a44bb3aaaefbb8ae99506ae53aa88a80fec3073ecbcc3e72", 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x4, "858818c80a06f9419f0645f5c828aff30125fe03f167d575e66335269e4a2784b6fa7ca74f3c4fcc18a97b489efa6cbfc375b6099c1529818430088dac70b01b", "c56cc6030016763b68466b38828800000000859b5a4d9ed3ad01737782ad10568d74c9ee09f808a2bb61eec4409ff01aeebedd00000000c71d77353820975691", "2c5c591f0dc612cbf0b196bf731f7e558f22ee0a0acc00", [0x0, 0x80000001]}) 11:39:05 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = memfd_create(&(0x7f0000000080)=']\x00', 0x3) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) dup2(r1, r0) 11:39:05 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000080)=""/250, 0xfa}, {&(0x7f0000000740)=""/4096, 0xfffffffffffffe99}, {&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f0000000300)=""/151, 0x97}], 0x4) dup2(r1, r0) 11:39:05 executing program 3: ioperm(0x0, 0xba, 0x0) 11:39:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) 11:39:05 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4(r0, &(0x7f0000000000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x80, 0x0) 11:39:05 executing program 5: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0x4, r0, &(0x7f0000000200)=""/56, 0xffffffffffffffbf) getgroups(0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff]) keyctl$chown(0x4, r0, 0x0, r1) 11:39:05 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(0xffffffffffffffff, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:39:05 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1100}], 0x1) 11:39:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setpriority(0xffffbffffffffffe, 0x0, 0x0) 11:39:05 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(0xffffffffffffffff, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:39:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x12, &(0x7f00000002c0)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@rand_addr, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14}}}, 0xe8) close(r1) close(0xffffffffffffffff) 11:39:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0xffffffffffffffff, 0xfffffffffffffffd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x102, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) dup2(r1, r0) 11:39:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001440)="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") r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fgetxattr(r0, &(0x7f0000000100)=@known='user.syz\x00', &(0x7f0000000040)=""/2, 0xfffffffffffffe91) 11:39:06 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="49ff00", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="ead865354960f5b6cd78bf421f81bd78", 0x10) 11:39:06 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(0xffffffffffffffff, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRESOCT]) 11:39:06 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x380}], 0x1) 11:39:06 executing program 3: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0x4, r0, &(0x7f0000000000)=""/56, 0x38) keyctl$chown(0x4, r0, 0x0, 0x0) 11:39:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(r0, 0x52, 0xab, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$nfc_llcp(r2, 0x118, 0x1, &(0x7f0000000740)=""/4096, 0x1000) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r3 = dup2(r1, r0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000080)) 11:39:06 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x2) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/13}, 0x15, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 11:39:06 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYRESOCT]) 11:39:06 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x29e}], 0x1) 11:39:06 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) close(r0) sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000000)=@file={0x0, "e91f7189591e9233614b00"}, 0x6e, &(0x7f0000000080), 0x0, &(0x7f0000000600)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}], 0x1, 0x0) 11:39:06 executing program 6: timer_create(0x3, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000001c0)) 11:39:06 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r2 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) writev(r1, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) r3 = dup(r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r3, 0x0) sendto$inet(r0, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f0000007ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6={{0xa}}}, &(0x7f0000000000)=0x8c) 11:39:06 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1000007ffe) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r3 = accept4(r1, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x0, {0x7}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x8, 0x1}]}]}, 0x38}, 0x1}, 0x0) recvfrom$inet(r2, &(0x7f00000000c0)=""/50, 0x32, 0x2020, 0x0, 0x0) 11:39:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x2) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000080)=""/72, 0x48}], 0x100000000000013d) r3 = dup2(r1, r0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1a0, 0x9, 0x4, 0x820, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x6}, [@nested={0x30, 0x3, [@typed={0x10, 0x12, @str='/dev/nbd#\x00'}, @typed={0x8, 0x38, @pid=r4}, @typed={0x14, 0x1c, @ipv6=@local={0xfe, 0x80, [], 0xaa}}]}, @nested={0x7c, 0x6a, [@typed={0x78, 0x3d, @binary="247cd756d633d8c4c068cce5e58f0cb7025a7563cf17f71adb9007df69c2ccc464ad87970f92761966df19b2ea203529bdc4a4b0b1d5c9737b7fad182374a0256ff90a5b142749c8aa502ebe97ca1bd984da47673e4dc3976312d232c993c3ec7ca901919b082fe2e21fa7b5673a808cb56e45"}]}, @typed={0x14, 0x14, @ipv6=@dev={0xfe, 0x80, [], 0x13}}, @generic="daa93804801b4304db66084be1be2a1550d83b305ad356eda566412b1fcae68fefdaadfb4f6ee248650928dcd54110d930c85c64b5fad21bbd9b4911093162bf6835856d7f423bd216b371a7c2f8a8987c7b6aa15bbe49f5b2c116ec877141ea7882befc0e8be06a9383ce4626c6fc19c31cc9650a49e5b336ce247550a38322676e3d9814a1935a10d026cc8c939ed2527a1fe025e838c6890da30c8b3938a1c75629ed9acfb0814743aceaa5786da2ec37c962defdbe478c7daaa3427557041c4ff11963373f5f478240"]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 11:39:07 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0xd00}], 0x1) 11:39:07 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x33b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:39:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) rt_sigpending(&(0x7f0000000000), 0x8) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 11:39:07 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(r0, 0x400452c9, &(0x7f0000000080)={0xa00000000000000}) 11:39:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) r3 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x4, 0x4400) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000200)={@mcast1}, &(0x7f0000000380)=0x14) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e23, 0x20, @remote={0xfe, 0x80, [], 0xbb}, 0x1f}, 0x1c) ioctl(r2, 0x0, &(0x7f0000000280)="f8472cc92684e66e3983674dfcb20ac2b0fdb5037cd86171a8aad83b114c939c297af4ebb27646fbcbd4b6b353b6c1eb121934e85a178abe68c2dc414e88eb5b1dd2eb01cd63a20902f5f3935e481f84e110a94bf403d212aaed9267fbcaff55515eeff4996f0c7c912bbbb8960a42a8dd8641b0b5a2419f45dbb28b262fdae3f96b75b72ef5fa") readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000240)="747d9e60404321", 0x7) dup2(r2, r0) 11:39:07 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) read(r0, &(0x7f00000004c0)=""/244, 0xfffffea0) 11:39:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x82, 0x0) pread64(r1, &(0x7f0000000100)=""/4096, 0x1000, 0x0) write$fuse(r1, &(0x7f0000001240)={0x58, 0x0, 0x1, @random="0700000099fff66791ba99da70d8c37b05829af4478e3b46b83725e45c54f3c8927e8a93233d65507cdb312f5b1a5a86f8182aac5eda28b2d316b96747f2cb66c28ab12ea8dc14a2"}, 0x58) [ 128.365220] dccp_close: ABORT with 56 bytes unread 11:39:07 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) r1 = epoll_create(0x4) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x51ce551c, &(0x7f0000000100), 0x8) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10}, 0x346, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32], 0xffffffc4}, 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000300)={0x0, &(0x7f0000000240)}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) 11:39:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000000)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000200)}}, {{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast=0xffffffff}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[]}}], 0x2, 0x0) 11:39:07 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1074}], 0x1) [ 128.435524] CUSE: DEVNAME unspecified 11:39:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000080)={0x2, 0x100}) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$revoke(0x3, r3) dup2(r1, r0) [ 128.468594] CUSE: DEVNAME unspecified 11:39:07 executing program 5: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 11:39:07 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x1) 11:39:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="036fb904bae280d95d40135c9b0a4329cdd312c218f117e2bea31ccb12d2769a6e15f7255d670926e71d15d86cf95dc591671716dbbd4a57a9d25783d766b76aa0253f3a048ce32f649100b1fb7a8a640320f7ad70ef489eebfe625deb1f746b2d57ad6ffcebf766574249e2f1ce8d9a947cfdfabc17f382cc056570ad6c96658af7af013bd7e96ec9d401eb7a1825cee6adac1128f3b03f1809b9ea287051f64116510c0bbd676d331453ca2362e41ae728b088b3916735d7b39f804fdf58d87a8f8755bd1c62d86cba7d8d55fb9771647ba7992201698942a1a37e1f5375f2f70cc2968e0ede024ffccb69b8f641427f6ec4bae9227b1670b5beb9c321c4e218372d286a60e831291ceb154cca1eb8ddf5b3282707abcd2a41b071b87f53bbed74dca0310fba1d13a3ccca0996af17c67b3f55636c410a36ba51a5485bc8c06b5c476a394c85335b48c1423583eeece32dd20c5620d3550161e019b5fd24f3e8fa31894b1fe616f6ab0dbb85bea66bb100d9f20264741ed43713335bcdef5cb08e42", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:08 executing program 7: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x103001, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x0, 0x0) 11:39:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x3, 0x7ff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000600)=0x10) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r3 = dup2(r1, r0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000080)=0x100) 11:39:08 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000080)={0x0, @rand_addr, 0x0, 0x0, 'lc\x00'}, 0x2c) 11:39:08 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x107a}], 0x1) 11:39:08 executing program 2: 11:39:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_pgetevents(r2, 0x4, 0x4, &(0x7f0000000140)=[{}, {}, {}, {}], &(0x7f0000000280)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200), 0x8}) io_submit(r2, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000001000)}]) tkill(r0, 0x1000000000016) 11:39:08 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x42040, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000140)=""/134) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 11:39:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='/dev/nbd#\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000640)={0x1, 0x2b, 0x100, 0x7f, 0x0, 0x0, 0x81, 0x5, 0x4, 0x48, 0x400, 0x1}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r3 = dup2(r2, r0) sendmsg$rds(r3, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/238, 0xee}], 0x1, &(0x7f0000000740)=[@fadd={0x58, 0x114, 0x6, {{0x8, 0x8}, &(0x7f0000000100)=0x3, &(0x7f0000000140)=0x300, 0x0, 0x9, 0x6, 0x408000, 0x51, 0x6}}, @cswp={0x58, 0x114, 0x7, {{0xd3bf, 0x20000}, &(0x7f0000000300)=0x2, &(0x7f0000000340)=0x9, 0x3, 0x1, 0x1f, 0x100, 0x53, 0x5}}, @mask_cswp={0x58, 0x114, 0x9, {{0x6, 0xfff}, &(0x7f0000000380)=0x8000, &(0x7f00000003c0)=0x5, 0x6b738870, 0x200, 0x2, 0x6, 0x8, 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0xfffffffffffffeff, 0x401}, &(0x7f0000000400), &(0x7f0000000440)=0x401, 0x4, 0xfff, 0x3, 0x7, 0x23, 0xb0b4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x9, 0x247e}, &(0x7f0000000480)=0x3, &(0x7f00000004c0)=0x400, 0xfffffffffffffffc, 0x0, 0x8, 0xd9e, 0x22, 0x80000000}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xffffffff}, @rdma_dest={0x18, 0x114, 0x2, {0xfffffffffffffff8, 0x80000000}}, @fadd={0x58, 0x114, 0x6, {{0x5f70, 0x1ff}, &(0x7f0000000500), &(0x7f0000000540)=0x2, 0x100, 0xd12f, 0x6, 0x2, 0x64, 0x63}}], 0x240}, 0x4000000) 11:39:08 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x10c0}], 0x1) 11:39:08 executing program 6: r0 = socket$inet(0x10, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RRENAME(r0, &(0x7f0000000040)={0x7, 0x15}, 0x7) 11:39:08 executing program 3: pause() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount(&(0x7f00000005c0)='.', &(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000640)='mslos\x00', 0x500c, &(0x7f00000e7000)) rmdir(&(0x7f0000000380)='./file0/file0\x00') 11:39:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$adsp(&(0x7f00000019c0)='/dev/adsp#\x00', 0x7, 0x100) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000001a00)=0x3, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f00000000c0)=0x40, 0x4) sendto$inet(r3, &(0x7f0000000100), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r3, &(0x7f0000000100)="8d", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r3) r4 = syz_open_dev$amidi(&(0x7f0000001740)='/dev/amidi#\x00', 0xa2, 0x400000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000001780)={0x0, 0x5c, "da9dd43d21f40d82307b7669e6afae99f445f38e95c467707b6f4bf30080ddefb2d08e3ac31a077eee3f86d20049b718b54ecb3aeff8a309542f1e07bf3bd9aabfd85a4c9ffd8ac20ec876967989da048bd2d7bd07e7f690150957ee"}, &(0x7f0000001800)=0x64) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000018c0)={r5, 0x401}, &(0x7f0000001900)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000001840)={r5, 0x72e5f283}, &(0x7f0000001880)=0x8) syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000200)='./file0\x00', 0x7f, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000240)="88c59588270e7d604d613e5db418dce94745cfc64b925ba05fa21f8d4bc454a3ae1424a47f7d0605b94167d3e8fbe36512c0e16687c9edf04e18ec11d1a09809bc462c744f005a26ce30f0dae61cd0595a027f24856dab4118b630f41d3b2db2439477f0ff611b828c45ca3340fb2f5c31a4664993dd1e1ba5e0d7cc141a1518b217865f12a973a4293dc7319c0639d1959b07bdf1a14d7345601791e4a11297e99ca177dc4ca854dbb795eae0d4cf26de2b0d014e4b1235a4ccbaf06ea02654ebbcf0f59d6d08470a865403510a7a614f3fe7cf293a", 0xd6, 0x3e2a}, {&(0x7f0000000340)="70303e014feaa5e68e6040a0ff3bd8769523a346e20125d6e391619c7faa1c0e5687a1a764341adac7467c104d7127a46b62210bd24058eac5d57f92eb849f68e0edec352c729bed9eb475bb8d42525b3461f1ed8bdda7ee26eef4e07411d47ad57118e79a6327e224af4c2711d2663dda1246c92e7f", 0x76, 0x2}, {&(0x7f0000000740)="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", 0x1000, 0x4}, {&(0x7f00000003c0)="4a00a34c502dc3a90a0bae9b575cfe96474196629f7cf056fac3c519ad992d06ab8021ccabca085c6821db56dab86a6024a8551de9142bd3ab12f18567666a5d74998d2048e734bb50ce9a4a3b657830a9edd7620590dac54619cb5cb8637c5be3b6eb5ca2617670956b1205feaf9730753e2e2fea811b196888c981bb34908b73a7df4284e1c79e063c484d725c9177775d73969281ea8c4a9c35ac97b85e38037bb72916af6ee641af4a48044539e9f45538d2094a512f05513cdafe71d3f249d1", 0xc2, 0x6}, {&(0x7f00000004c0)="85ecf6", 0x3, 0x800}, {&(0x7f0000000500)="2dfcabd22268bfc09d826714da9e2568d03ef3e07d6a87189c84f5ec75b731e68d0be60f5a890a32b66b73f4320e7491ea641a2e0b8b4468be347b35e30c88b845dc76d5de1aea45a7abe990e54164b7dadadbeb9f5fcabb0e08f761d2d3fac1dc875f655a523facd8a4cbbe3194b9f37618cb8ad623eb886044dff6698914aef21def8b5714", 0x86, 0x2}], 0x10000, &(0x7f0000000680)=ANY=[@ANYBLOB="756e68bb99f184fe880400ad16a8546964652c626c6f636b3d3f3838782c7362736563746f72443135782c686964652c6f76657272696465726f636b7065526d2c646d6f6465da3539002c756e686964652c638065636b3d7374726963742c7569643d2d36363737"]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000001980)={0x0, 0x1, 0x7, &(0x7f0000001940)=0xffffffffffff4a93}) dup2(r1, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 11:39:08 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0xf6}], 0x1) 11:39:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) 11:39:08 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x500}], 0x1) 11:39:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="036fb904bae280d95d40135c9b0a4329cdd312c218f117e2bea31ccb12d2769a6e15f7255d670926e71d15d86cf95dc591671716dbbd4a57a9d25783d766b76aa0253f3a048ce32f649100b1fb7a8a640320f7ad70ef489eebfe625deb1f746b2d57ad6ffcebf766574249e2f1ce8d9a947cfdfabc17f382cc056570ad6c96658af7af013bd7e96ec9d401eb7a1825cee6adac1128f3b03f1809b9ea287051f64116510c0bbd676d331453ca2362e41ae728b088b3916735d7b39f804fdf58d87a8f8755bd1c62d86cba7d8d55fb9771647ba7992201698942a1a37e1f5375f2f70cc2968e0ede024ffccb69b8f641427f6ec4bae9227b1670b5beb9c321c4e218372d286a60e831291ceb154cca1eb8ddf5b3282707abcd2a41b071b87f53bbed74dca0310fba1d13a3ccca0996af17c67b3f55636c410a36ba51a5485bc8c06b5c476a394c85335b48c1423583eeece32dd20c5620d3550161e019b5fd24f3e8fa31894b1fe616f6ab0dbb85bea66bb100d9f20264741ed43713335bcdef5cb08e42", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x80000020000, 0x0) getpeername(r0, &(0x7f0000000480)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @local}}}}, &(0x7f0000000140)=0x80) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000400)={'vlan0\x00', {0x2, 0x4e21}}) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x623}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000740)={r6, 0x8, 0x800000030}, 0xffffffffffffffbe) openat$cgroup_ro(r4, &(0x7f00000003c0)='cgroup.controllers\x00', 0x0, 0x0) r7 = dup2(r2, r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000200)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000440), &(0x7f0000000300)=0x8) setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000340)={0x303, 0x33}, 0x4) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000100)={@mcast2={0xff, 0x2, [], 0x1}, r8}, 0x14) fremovexattr(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="11d3b3f871cdc90a834692255ef978488eefee7502762564e0f9d802b735f1140000de9e807843f1bc8f4d38817b860fb1ebcb92b217171d9c9e324e7b1236e4be63c2ef767be813d4445420602fcabb8216ad4a0d0944d907a4aee591723d3c5f6767f6767c7dc623a50d5684bbf9a8e7585aba44075716d5e152b83bef8ddc3be907dcb3fae611d4ed7f8afe452b572c90cc2b19a3ec06dd53565ef071c2186461d6ceb588c3914127065d8cbfff55cc2a52c1d847fd2654a56d2bc66d93fd7eee5a532aa75aea60a5573363e251be78e159fc0b744faa0d768a42768e3f58014ca1168edce8d99fa3deb9eb1a426f18e24ef0fba6bc784f7d3f8d301e350161880120e0ef3793c396bc73140fec656e"]) 11:39:09 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1068}], 0x1) 11:39:09 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) 11:39:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair(0x2, 0xa, 0x0, &(0x7f0000000080)) 11:39:09 executing program 7: 11:39:09 executing program 2: 11:39:09 executing program 2: 11:39:09 executing program 7: 11:39:09 executing program 5: [ 130.271230] syz-executor6 uses obsolete (PF_INET,SOCK_PACKET) 11:39:09 executing program 2: 11:39:09 executing program 6: 11:39:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:39:09 executing program 7: 11:39:09 executing program 5: 11:39:09 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x14a}], 0x1) 11:39:10 executing program 7: 11:39:10 executing program 3: 11:39:10 executing program 2: 11:39:10 executing program 5: 11:39:10 executing program 6: 11:39:10 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x436}], 0x1) 11:39:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:10 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:39:10 executing program 5: 11:39:10 executing program 2: 11:39:10 executing program 6: 11:39:10 executing program 7: 11:39:10 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'veth1_to_bond\x00'}, 0x18) dup2(r1, r0) 11:39:10 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x261}], 0x1) 11:39:10 executing program 3: 11:39:10 executing program 2: 11:39:10 executing program 6: 11:39:10 executing program 5: 11:39:10 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r4 = dup2(r2, r0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@dev}}, &(0x7f0000000680)=0xe8) setfsuid(r5) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x20, 0x2, @buffer={0x0, 0x9c, &(0x7f0000000080)=""/156}, &(0x7f0000000140)="52da4e594ce55af5d87e425e316fe6260ac1064723e60a6a4271ef7c0225dde9", &(0x7f0000000200)=""/10, 0x7fffffff, 0x20, 0x1, &(0x7f0000000240)}) fstat(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) accept4(r2, &(0x7f00000004c0)=@xdp, &(0x7f0000000340)=0x80, 0x0) fstat(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuseblk_mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)='./file0\x00', 0x5000, r6, r7, 0x1, 0xcb, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x4}, 0x68) 11:39:10 executing program 7: 11:39:10 executing program 3: 11:39:10 executing program 2: 11:39:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:11 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x28e}], 0x1) 11:39:11 executing program 6: 11:39:11 executing program 7: 11:39:11 executing program 5: 11:39:11 executing program 3: 11:39:11 executing program 2: 11:39:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000080)=""/232, 0xe8}, {&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000300)=""/60, 0x3c}, {&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000540)=""/82, 0x52}, {&(0x7f00000005c0)=""/25, 0x19}], 0x9) dup2(r1, r0) 11:39:11 executing program 3: 11:39:11 executing program 7: 11:39:11 executing program 5: 11:39:11 executing program 6: 11:39:11 executing program 2: 11:39:11 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x221}], 0x1) 11:39:11 executing program 3: 11:39:11 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x2d3}], 0x1) 11:39:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="036fb904bae280d95d40135c9b0a4329cdd312c218f117e2bea31ccb12d2769a6e15f7255d670926e71d15d86cf95dc591671716dbbd4a57a9d25783d766b76aa0253f3a048ce32f649100b1fb7a8a640320f7ad70ef489eebfe625deb1f746b2d57ad6ffcebf766574249e2f1ce8d9a947cfdfabc17f382cc056570ad6c96658af7af013bd7e96ec9d401eb7a1825cee6adac1128f3b03f1809b9ea287051f64116510c0bbd676d331453ca2362e41ae728b088b3916735d7b39f804fdf58d87a8f8755bd1c62d86cba7d8d55fb9771647ba7992201698942a1a37e1f5375f2f70cc2968e0ede024ffccb69b8f641427f6ec4bae9227b1670b5beb9c321c4e218372d286a60e831291ceb154cca1eb8ddf5b3282707abcd2a41b071b87f53bbed74dca0310fba1d13a3ccca0996af17c67b3f55636c410a36ba51a5485bc8c06b5c476a394c85335b48c1423583eeece32dd20c5620d3550161e019b5fd24f3e8fa31894b1fe616f6ab0dbb85bea66bb100d9f20264741ed43713335bcdef5cb08e42", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:11 executing program 6: 11:39:11 executing program 2: 11:39:11 executing program 7: 11:39:11 executing program 5: 11:39:11 executing program 3: 11:39:11 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x2db}], 0x1) 11:39:12 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0x0, 0x200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:39:12 executing program 5: 11:39:12 executing program 6: 11:39:12 executing program 7: 11:39:12 executing program 2: 11:39:12 executing program 3: 11:39:12 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1ef}], 0x1) 11:39:12 executing program 7: 11:39:12 executing program 2: 11:39:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:12 executing program 3: 11:39:12 executing program 5: 11:39:12 executing program 6: 11:39:12 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x2f00}], 0x1) 11:39:12 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x200000) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:39:12 executing program 7: 11:39:12 executing program 2: 11:39:12 executing program 6: 11:39:12 executing program 2: 11:39:12 executing program 3: 11:39:12 executing program 5: 11:39:12 executing program 7: 11:39:12 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x80000, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000200), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000080)=""/141, 0x8d) dup2(r2, r0) 11:39:12 executing program 2: 11:39:12 executing program 6: 11:39:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:13 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0xa0}], 0x1) 11:39:13 executing program 3: 11:39:13 executing program 5: 11:39:13 executing program 7: 11:39:13 executing program 2: 11:39:13 executing program 6: 11:39:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x400, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000004c0)={0x3, 0x1, &(0x7f00000002c0)=""/145, &(0x7f0000000380)=""/42, &(0x7f00000003c0)=""/245, 0x4000}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000240)=0x5) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0xffffffffffffffff, 0x5, 0xa2, &(0x7f0000000080)="00f614dc6ec9d678a3630eb098837f809dde745ebd501b6fe5e708fe0f22c97f2f587b0a7c56d8b2b1d2f53d277dd751c1bf55d95888e0417a3a38aeff42c81df856fbaccc668108d9dd4b7faf0f0df71ab3492941682db574451db873990e8f11f83ddac93f2cab1395fe173b3a1f3bd97758d1554535f89929dbbc7da3a9b1e8589f92c11cd3cdc578f8d9529fe2d2d6902cf65984a4f75ce68966f55aed3e3cf9"}) dup2(r1, r0) 11:39:13 executing program 3: 11:39:13 executing program 5: 11:39:13 executing program 7: 11:39:13 executing program 2: 11:39:13 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x3f4}], 0x1) 11:39:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x301000, 0x0) ioctl$TCXONC(r2, 0x540a, 0x200) r3 = epoll_create1(0x0) r4 = epoll_create1(0x2) close(r3) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000c85000)) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) 11:39:13 executing program 6: 11:39:13 executing program 5: 11:39:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:14 executing program 7: 11:39:14 executing program 3: 11:39:14 executing program 2: 11:39:14 executing program 6: 11:39:14 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x394}], 0x1) 11:39:14 executing program 5: 11:39:14 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x4, 0x10000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/78) r1 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) write$P9_RSTAT(r0, &(0x7f0000000200)={0x66, 0x7d, 0x1, {0x0, 0x5f, 0xe5, 0x0, {0x20, 0x0, 0x5}, 0x10000, 0x3, 0xfffffffffffffffe, 0x5, 0x1c, 'md5summime_type\'/),.vboxnet0', 0x0, "", 0xa, '/dev/nbd#\x00', 0x6, 'cpuset'}}, 0x66) dup2(r2, r1) 11:39:14 executing program 7: 11:39:14 executing program 2: 11:39:14 executing program 6: 11:39:14 executing program 3: 11:39:14 executing program 5: 11:39:14 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1ca}], 0x1) 11:39:14 executing program 7: 11:39:14 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x2e02, 0xc0000) dup2(r1, r0) 11:39:15 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={0xffffffffffffffff, r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r2, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:15 executing program 2: 11:39:15 executing program 6: 11:39:15 executing program 5: 11:39:15 executing program 3: 11:39:15 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x3cd}], 0x1) 11:39:15 executing program 7: 11:39:15 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="0101560a07d1f5bfcb", 0x9) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r2, &(0x7f0000e76000)="18631ccc129cfe6da87b432660521bda2cfa08561e1daa4de85af3298223e83f37926ae556dd4a7a25f1a7b54208b3c12ae701b74daf6c7e9ec726930f1893953fc43d7c63050e359e8ada93a455fa265b578a5f92b7fc5698f55d554653f0ced1f85c3735bd21bca77d7d9ba3458472926ed49515628bd9c3b940a33cc1bc77ea3a584afc89539a7417791023ff8ca33799b374e760179e5b39b74997e096128c12a6dda762f27df4b0f2b39eb1736b5ae773592489f2f5fd86c1910d414735c23f2aa2053c06fd076b126a9e3318158fb971e3a179206e0cfa842510d062585f2ed0433bd6f6c826706e26b1a1c7ab8aba4278978279bef2a074af9240ad01beb0b7d6d24c06ca3b93a11ec2dde0cd556f7f661fda8d4b52095312c1ad6e538d10ae71ce64181ca2ac7ebff633c940fceb8191e431014cc1ad60cbaedb15832025573e0d44dd1132df1a4e4094be90f9d743074178b4e239470e82745feaa4577ff19c9295d4366509a8118d9c2d7f407974af1818796aecfb780aae793f4f16dad688abad30ca0965ddc9764321505d6ef60bc519dc03a465534b66af52e4e70669ae4506107dc830ef124521097e9fcdadcc39a8eb7b41fb60b74583c5abdf384467d20a97dba87da9ece6628fdc4a2f781ab0780df2e2cffb318bff3013fe4a5b7ba50c0ce804e8102d41a6856364ef62ca72b815672074595b734d76fab41e26af3ccf2d39f4d49d2d3d1b117881792f068a7cac9782f2c8cbcf11023685ac781ff70f96b16d7eb956fe31aea3af7974f8385cf2fe9152baa7c2556e8bb7030b0dd1f0d21503af85de38a85532a75dfa0ce136703def956ade894ff2d7f415a355a33fe65c5e7c6e6fd58f39169e60d50fba3ce3bc9058322a3575dc6412aa5ecb8d62939e5c94b0ba12613a6a3618912437182bce9130f8ece10ad861159bea5911d44f7a8d7ef8f7a160d6ae3b7165fb66425ca9732686356636efdb77fc05e28a5a6493f9bf9703fcc9f5571ab3ce59ca5ee35a94e821e6ada2da7916a37a74a30313820a5cdf1f3017a268acb2bf42dcbcaa6722bb31a70dd8b812760bcd092c65360a171227f80de6b8d1e127774b392fc52bc0b565ab6f8450d3b7ab1c3543917ab303955d66fee82791eff78f1a98177ea3acf2a4c926618a0dd180bcafce2f24196fff796c498900f945f97ba2904aafc4b5775e171ee5aa13e35f34cd58e700abd191b42dbb6a1d4847747bc330318b3865b18e301d44e3c6274dd2a374d25885680f18295efeb6d94f943b43fc8fae544cbc5f5e9528e45b8f8e579f6815295eaeab7f3980a09bd13858a22cd2c5b788c29c016d578b052e2d2c0ef7913a78c2b21b3713d293b62f54ecab1efb03c4518e71c9457c3c190c31f13b7a06fa28ecc071b29829cef338e80dae408d7f06b8e75da745cf83fb8a6e16600549ed3a729811cd77c8165758e023d706b218e0780678ca6d7bd291980a268f4a55d00a6ea969a14c0efe619b032fc6ccae50845c82fec6e8662ffb25dc4a733426a500828bbc1fe570acc5eefd334a2f68e497448dc85becb9c084b5186ca9b872be84a39853a59c32305d2c8d1365bf4a047e829e995c843fbda0a3f4bf9373d2c6e2f9b71f088d61cbe793409b450aff67d0ead723b7da7ecd896ddc5ba10d34cfa4b203d19b9707eb5a8cb98a9a38d5d95219f41989088973778fe7dcad466cb8221504300bd6fd90a2a48e033cc93474f6091be4466c89aff8c8dab3b838808ea220e63e2cdba7b7a65025c315739232c9b91db85e93a2022f08d3d367c014dcfa9437df5548a6a53237fbd312c747a696ad991e4734adb8f1ce54e505616117abda379d7cc636712aab4cd88059a8382a9f57ca4f4eefe878773f7ea46ad0c2d28eb8621ef7000997a8d89c8d4ff1d00c223dbd642cbe29bf3bfaca3c77949eeeaf57b5c068d3729266dc8fb7e2e737e94458fefe1420830415d7a948a850c4b88218fc005b6c664f909a84d92c8a50698feb5be92feeebd8b813fd4a143a248040e9518f00637fc7cf6757fd3157", 0x5b5, 0x0, &(0x7f0000bc8ff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) dup2(r1, r0) 11:39:15 executing program 2: 11:39:15 executing program 3: 11:39:15 executing program 5: 11:39:15 executing program 7: 11:39:15 executing program 6: [ 136.562991] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:39:15 executing program 2: 11:39:15 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x92}], 0x1) 11:39:15 executing program 3: 11:39:16 executing program 6: 11:39:16 executing program 5: 11:39:16 executing program 7: 11:39:16 executing program 2: 11:39:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000080)='./file0\x00') readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:39:16 executing program 3: 11:39:16 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={0xffffffffffffffff, r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r2, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:16 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x15e}], 0x1) 11:39:16 executing program 3: 11:39:16 executing program 2: 11:39:16 executing program 6: 11:39:16 executing program 7: 11:39:16 executing program 5: 11:39:16 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0xf00}], 0x1) 11:39:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x200000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:39:16 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x3, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0xffffff80]}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x80}, 0x1}, 0x0) 11:39:16 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600)='/dev/net/tun\x00', 0x8001, 0x0) r1 = dup(r0) pwritev(r1, &(0x7f0000000580)=[{&(0x7f0000000540)="12", 0x1}], 0x1, 0x0) 11:39:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00'}, 0x18) 11:39:16 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000040), 0x10) 11:39:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb57e6c60f0e1f0294e69d9a1f63f8785ad188c26c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fdf6e034d804e5f07302df5b540745df4b1dee483b157624c5bc0100099e6a357cd6abb4398c3408", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xfffffdef) close(r0) 11:39:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x40}, r2, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x10, 0x800, 0xffffffffffffff9a, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x1, @empty, 0x5}, @in6={0xa, 0x4e24, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0x3}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000200)=r4, 0x4) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:39:16 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x312}], 0x1) [ 137.748467] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 138.135887] syz-executor3 (8376) used greatest stack depth: 13248 bytes left 11:39:17 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={0xffffffffffffffff, r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r2, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:17 executing program 7: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) exit(0x0) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 11:39:17 executing program 6: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c, &(0x7f00000011c0)=[{&(0x7f00000001c0)="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", 0x595}], 0x1}, 0x8000) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000d00)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000980), 0xa1) 11:39:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:17 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0000001300000000eb070000000000000000000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) 11:39:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r2, r0) 11:39:17 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x49f}], 0x1) 11:39:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f0000000000)={{0x0, r2+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000140)) read(r1, &(0x7f0000a16000)=""/71, 0x47) 11:39:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f0000000040)="3100000000a73f33efc6d1a6230d8379f3b2e6620000000000000000000000ffff7f1794245ee14f62e1", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) sync() 11:39:17 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1bc}], 0x1) 11:39:17 executing program 4: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r2, r1) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000140)) [ 138.488579] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:39:17 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:17 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x0, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) mkdir(&(0x7f00000001c0)='./file0\x00', 0xfffffffffffffffc) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000440)={0xffffffff, 0x40, 0x9, 0xff, 0x0, 0x9}) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000100)="7073746f72fd07db64aafb", 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) 11:39:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000080)=0x9) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000004c0), 0x7) r2 = accept4(r1, &(0x7f0000000100)=@can, &(0x7f0000000200)=0x80, 0x800) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7f16ab4e46c3ee753ba4", @ANYRES16=r3, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x8041}, 0x4000) r4 = dup2(r1, r0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x200) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x2}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000340)={r5, 0x1}, 0x8) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x94, 0x8c000) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) 11:39:17 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0xe00}], 0x1) [ 138.588925] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 138.601559] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:17 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 138.677997] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 138.692319] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:18 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x2}, 0x1c) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}], "", [[], [], [], [], []]}, 0x558) 11:39:18 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000200)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000080)=0xffffffffffffffff) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000380)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 11:39:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = dup2(r1, r0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000080)={0x5, 0x0, [{0x100000001, 0x7, 0x0, 0x0, @irqchip={0x234, 0x57be}}, {0x200, 0x4, 0x0, 0x0, @irqchip={0x2}}, {0x200, 0x7, 0x0, 0x0, @irqchip={0x5, 0x100000001}}, {0x9c4b, 0x2, 0x0, 0x0, @irqchip={0x3, 0x4a}}, {0x8000, 0x0, 0x0, 0x0, @sint={0x6, 0xa6d2}}]}) 11:39:18 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x406}], 0x1) 11:39:18 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:18 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x3a3) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x7f, 0x0, r0, 0x0, [0xe]}, 0x2c) 11:39:18 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000000c0)={0x0, 0x6, 0x10001, 'queue1\x00', 0x7}) dup2(r1, r0) 11:39:18 executing program 7: 11:39:18 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x24a}], 0x1) 11:39:18 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000200)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000080)=0xffffffffffffffff) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000380)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 11:39:18 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 139.529233] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 139.550702] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:18 executing program 2: 11:39:18 executing program 7: 11:39:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000100)={r3, r4/1000+10000}, 0x10) dup2(r1, r0) [ 139.606534] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 139.630190] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:19 executing program 7: 11:39:19 executing program 2: 11:39:19 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1f5}], 0x1) 11:39:19 executing program 3: 11:39:19 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x8, 0x80000) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000240)=0x8) delete_module(&(0x7f0000000340)='vmnet0\\\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000280)={r3, 0x1}, &(0x7f00000002c0)=0x8) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000100)) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000140)) 11:39:19 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:19 executing program 2: 11:39:19 executing program 3: 11:39:19 executing program 7: 11:39:19 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x107}], 0x1) 11:39:19 executing program 6: socket$inet6(0xa, 0x200000003, 0x8) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:39:19 executing program 3: 11:39:19 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x183}], 0x1) [ 140.473860] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 140.519767] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000440)='/dev/nbd#\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x40c000, 0x0) r2 = accept4(r1, &(0x7f0000000200)=@hci={0x0, 0x0}, &(0x7f0000000280)=0x80, 0x80000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bpq0\x00', r3}) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000140)) dup2(r4, r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000380)=0x87) fcntl$lock(r2, 0x5, &(0x7f00000003c0)={0x0, 0x0, 0xf64, 0x0, r6}) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0x1, 0x0, [0x81, 0xfc, 0xa, 0x9, 0x7fff, 0x9, 0x4, 0x1]}) 11:39:20 executing program 2: 11:39:20 executing program 7: 11:39:20 executing program 3: 11:39:20 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x6300}], 0x1) 11:39:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:20 executing program 6: socket$inet6(0xa, 0x200000003, 0x8) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 141.293802] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 141.327624] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:20 executing program 3: 11:39:20 executing program 2: 11:39:20 executing program 7: 11:39:20 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0xe2}], 0x1) 11:39:20 executing program 6: socket$inet6(0xa, 0x200000003, 0x8) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:20 executing program 4: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) getsockname(r0, &(0x7f0000000080)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x80) r1 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000280)={0x0, 0x65, &(0x7f0000000200)="d2c7fa4f6b152c895e6fd0328aa06a34ca82cc29033a7af8bd67115d7880061113cf82206cad59acd1b8137fe4ee2e3b1e0533f8f846a1acd0d104dfefba1278c763cf9b10c78849cd3c96573b9eb3dbeb2c17885d7ac06b4173d95fbf1f096bf3628e762c"}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r2, r1) 11:39:20 executing program 7: 11:39:20 executing program 2: 11:39:20 executing program 3: [ 141.456050] netlink: 'syz-executor6': attribute type 1 has an invalid length. 11:39:20 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x700}], 0x1) 11:39:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x20000) 11:39:20 executing program 7: 11:39:20 executing program 3: [ 141.529810] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:21 executing program 2: 11:39:21 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) 11:39:21 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:21 executing program 7: 11:39:21 executing program 4: syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x40, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000240), &(0x7f0000000280)=0xc) syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3, 0x18000) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x2, 0x80200) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3ff, 0x8001) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0xae5) 11:39:21 executing program 3: 11:39:21 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x4a5}], 0x1) 11:39:21 executing program 2: 11:39:21 executing program 7: 11:39:21 executing program 2: 11:39:21 executing program 3: 11:39:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000080)={{0xff, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x0, 'nq\x00', 0x4, 0x9, 0x39}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x4, 0x6ca2, 0x6, 0xce6}}, 0x44) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) [ 142.398778] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 142.432425] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:21 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x2fe}], 0x1) 11:39:21 executing program 7: 11:39:21 executing program 2: [ 142.523265] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20001 [ 142.570251] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20001 11:39:22 executing program 7: 11:39:22 executing program 3: 11:39:22 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) 11:39:22 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:22 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x45}], 0x1) 11:39:22 executing program 2: 11:39:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r2, 0x7, 0x8}, 0xc) dup2(r1, r0) 11:39:22 executing program 7: 11:39:22 executing program 3: 11:39:22 executing program 3: 11:39:22 executing program 2: 11:39:22 executing program 3: 11:39:22 executing program 7: [ 143.455443] netlink: 'syz-executor6': attribute type 1 has an invalid length. 11:39:22 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1005}], 0x1) 11:39:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0xa0000) epoll_pwait(r1, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, 0x1ff, &(0x7f00000000c0)={0x671d}, 0x8) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000000), 0x0) r3 = dup2(0xffffffffffffffff, r0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000100)=0xf9) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)={r4, 0x8000, 0x39b4881d}, 0x8) [ 143.502761] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:22 executing program 3: 11:39:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x4) close(0xffffffffffffffff) [ 143.621941] sctp: [Deprecated]: syz-executor2 (pid 8728) Use of int in maxseg socket option. [ 143.621941] Use struct sctp_assoc_value instead [ 143.654373] sctp: [Deprecated]: syz-executor2 (pid 8728) Use of int in maxseg socket option. [ 143.654373] Use struct sctp_assoc_value instead 11:39:23 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) 11:39:23 executing program 7: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 11:39:23 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0xcc}], 0x1) 11:39:23 executing program 3: 11:39:23 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xffffffffffffffc1, 0x200000) mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x2, 0x3) dup2(r2, r0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x11, r3, 0x82f7) 11:39:23 executing program 2: 11:39:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:23 executing program 3: 11:39:23 executing program 2: [ 144.477450] netlink: 'syz-executor6': attribute type 1 has an invalid length. 11:39:23 executing program 3: 11:39:23 executing program 7: 11:39:23 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x131}], 0x1) [ 144.518259] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x8000, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) r3 = socket(0x1e, 0x1000000000001, 0x0) sendmsg(r3, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}, 0x0) recvmsg$kcm(r3, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r3, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x18}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1, 0x0, 0x1f}}], 0x3fffffffffffd23, 0x3, &(0x7f0000001340)={0x0, r4+30000000}) dup2(r1, r0) 11:39:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 11:39:23 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 144.714319] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 144.721878] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:24 executing program 7: perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 11:39:24 executing program 3: r0 = socket$kcm(0xa, 0x100000000005, 0x0) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)="cf", 0x1}], 0x1, &(0x7f00000004c0)}, 0x0) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000380)="db", 0x1}], 0x1, &(0x7f00000009c0)}, 0x0) 11:39:24 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x213}], 0x1) 11:39:24 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = socket(0xa, 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000140)=0x7, 0x2) unshare(0x40000000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000005700)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000056c0)={&(0x7f0000000080)=@setlink={0x34, 0x13, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x1fffff}, [@IFLA_IFNAME={0x14, 0x4, 'C\x00\x00\x001\x00'}]}, 0x34}, 0x1}, 0x0) 11:39:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:39:24 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:24 executing program 7: r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="9c", 0x1, 0xffffffffffffffff) keyctl$assume_authority(0x10, r0) 11:39:24 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x100a}], 0x1) 11:39:24 executing program 4: syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2000, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000000c0)={0x4, 0xa, 0x8, 0x42ff, "3f08a501159c4010fd84a45e0c8d57a413def4f1fe6f899e70166a2b62c3422b"}) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) [ 145.528268] IPVS: ftp: loaded support on port[0] = 21 11:39:24 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) mkdir(&(0x7f0000000a80)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f0000000080)='.', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='mslos\x00', 0x10000000005010, &(0x7f00000e7000)) mount(&(0x7f0000000380)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='pstore\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x0, 0x0, 0x35) fallocate(r0, 0x0, 0x0, 0x8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 11:39:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000080)=[{}], 0x0, [{}]}, 0x88) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000200)) r1 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r2, r1) [ 145.571914] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 145.594188] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:24 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1010}], 0x1) 11:39:24 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 145.653910] kernel msg: ebtables bug: please report to author: Wrong nr of counters [ 145.670697] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 145.671218] kernel msg: ebtables bug: please report to author: Wrong nr of counters [ 145.699751] device lo entered promiscuous mode 11:39:24 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x3b8}], 0x1) [ 145.718242] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 145.734843] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 145.744428] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. [ 145.764377] IPVS: ftp: loaded support on port[0] = 21 11:39:25 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)='ip_vti0\x00') dup2(r0, r0) 11:39:25 executing program 3: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f00000001c0)=0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x0, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) mkdir(&(0x7f0000000a80)='./file0\x00', 0x0) mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x0, 0x0) mount(&(0x7f0000000380)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='pstore\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) 11:39:25 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:25 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x198}], 0x1) 11:39:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:39:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:25 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = socket(0xa, 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000140)=0x7, 0x2) unshare(0x40000000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000005700)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000056c0)={&(0x7f0000000080)=@setlink={0x34, 0x13, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x1fffff}, [@IFLA_IFNAME={0x14, 0x4, 'C\x00\x00\x001\x00'}]}, 0x34}, 0x1}, 0x0) 11:39:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080)="796fcf61ce699fc72f3e7caf09d82fa2b8c40bb03e3a04", 0x17) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:39:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x7, 0x80006, 0x100000001, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x800) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) fcntl$notify(r0, 0x402, 0x2) 11:39:25 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x17e}], 0x1) 11:39:25 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 146.555191] IPVS: ftp: loaded support on port[0] = 21 [ 146.574506] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 146.582272] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:25 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0xc00}], 0x1) 11:39:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) close(r1) 11:39:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:39:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0xffe0) close(r2) close(r1) [ 146.713557] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 146.714894] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 146.729222] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. [ 146.736629] device lo entered promiscuous mode [ 146.744074] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 11:39:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:26 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x104c}], 0x1) 11:39:26 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:26 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ioprio_set$pid(0x1, r0, 0x8) r1 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r2, r1) 11:39:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000000018000103000000000000000002000000000000050000000014000800080000007ebc2a205eb8866fc92312b2b675f8044e4e50bce9c51f4f139f83c1cd59285b6e81f9abefffd07b917c3247d83bf2a25ef90e2dba9c076208259a89636344c84f1769", @ANYBLOB="08000400"], 0x2}, 0x1}, 0x0) 11:39:26 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x7002, &(0x7f0000000040)) 11:39:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="036fb904bae280d95d40135c9b0a4329cdd312c218f117e2bea31ccb12d2769a6e15f7255d670926e71d15d86cf95dc591671716dbbd4a57a9d25783d766b76aa0253f3a048ce32f649100b1fb7a8a640320f7ad70ef489eebfe625deb1f746b2d57ad6ffcebf766574249e2f1ce8d9a947cfdfabc17f382cc056570ad6c96658af7af013bd7e96ec9d401eb7a1825cee6adac1128f3b03f1809b9ea287051f64116510c0bbd676d331453ca2362e41ae728b088b3916735d7b39f804fdf58d87a8f8755bd1c62d86cba7d8d55fb9771647ba7992201698942a1a37e1f5375f2f70cc2968e0ede024ffccb69b8f641427f6ec4bae9227b1670b5beb9c321c4e218372d286a60e831291ceb154cca1eb8ddf5b3282707abcd2a41b071b87f53bbed74dca0310fba1d13a3ccca0996af17c67b3f55636c410a36ba51a5485bc8c06b5c476a394c85335b48c1423583eeece32dd20c5620d3550161e019b5fd24f3e8fa31894b1fe616f6ab0dbb85bea66bb100d9f20264741ed43713335bcdef5cb08e42", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:39:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:39:26 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x277}], 0x1) [ 147.386847] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 147.394397] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:26 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="f4", 0x1) 11:39:26 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:26 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x48b}], 0x1) 11:39:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x6719, 0x4000) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f00000000c0)=0xe6) getegid() readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:39:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x2}, 0x1c) connect$inet6(r0, &(0x7f000090b000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x2, 0x8}}}}}}, &(0x7f0000775000)) [ 147.488317] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 147.514174] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@ipv4_getrule={0x20, 0x22, 0x414, 0x0, 0x0, {0x2}}, 0x1a7}, 0x1}, 0x0) recvmsg(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, &(0x7f0000001600)=""/221, 0xdd}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x42, 0x105}, 0x14}, 0x1}, 0x0) 11:39:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:27 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x1000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r2, r0) ioctl$sock_ifreq(r1, 0x0, &(0x7f0000000080)={'veth0_to_team\x00', @ifru_map={0x0, 0xfffffffffffffff9, 0x8, 0x49, 0x2, 0x1}}) 11:39:27 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x106c}], 0x1) 11:39:27 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:27 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000), 0x4) 11:39:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="9c", 0x1, 0xffffffffffffffff) keyctl$assume_authority(0x10, r1) 11:39:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:27 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r1, 0x1) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r2, r0) [ 148.228249] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:39:27 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000500), 0x4) 11:39:27 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fcntl$setlease(r1, 0x400, 0x2) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 11:39:27 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x3a4}], 0x1) 11:39:27 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:27 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x9) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:39:27 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x3e9}], 0x1) 11:39:27 executing program 2: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) [ 148.362360] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:28 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:28 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:28 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x12000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={r1, r2, 0xb, 0x3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r3, r0) mlockall(0x1) connect$bt_rfcomm(r2, &(0x7f0000000280)={0x1f, {0x2, 0x20, 0x5, 0x7ff, 0xb370, 0x3c9}, 0x7842}, 0xa) socket$inet6(0xa, 0x5, 0x1000000000000) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000140)="1a52e4ff8a306591d1478f48a7eac2058d00f745af58713bd865f5c70503237f9839b6f86f1881501e7da74b11bca2eacd80b9095b9af0ac15518b", 0x3b) link(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='./file0\x00') 11:39:28 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x59}], 0x1) 11:39:28 executing program 3: pause() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x0, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount(&(0x7f00000005c0)='.', &(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000640)='mslos\x00', 0x500c, &(0x7f00000e7000)) rmdir(&(0x7f0000000380)='./file0/file0\x00') 11:39:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:28 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x38b}], 0x1) 11:39:28 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:39:28 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x3d3}], 0x1) 11:39:28 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:28 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0xd4}], 0x1) 11:39:28 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:28 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 11:39:28 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x48a}], 0x1) 11:39:28 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='}'], 0x1) write$binfmt_elf64(r0, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x1, &(0x7f0000002b80)=""/62, 0x3e}}], 0x1, 0x0, 0x0) 11:39:29 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1002}], 0x1) 11:39:29 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 150.060351] validate_nla: 7 callbacks suppressed [ 150.060358] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 150.087173] nla_parse: 5 callbacks suppressed [ 150.087180] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:34 executing program 3: 11:39:34 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x7, 0x6c5, 0x5, 0x4}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000200)={r4}, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x100000000000009e) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000240)={0x8d, 0x377d}) dup2(r2, r0) 11:39:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:34 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x0, 0x0, 0xe}) 11:39:34 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x600}], 0x1) 11:39:34 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) 11:39:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:34 executing program 2: [ 155.328657] netlink: 'syz-executor6': attribute type 1 has an invalid length. 11:39:34 executing program 2: 11:39:34 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x45d}], 0x1) 11:39:34 executing program 2: 11:39:34 executing program 2: 11:39:34 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x3b9}], 0x1) 11:39:34 executing program 2: 11:39:34 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1a8}], 0x1) [ 155.584126] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:34 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="ea7d05c96de6e12de357671c98b1", &(0x7f0000000180), 0x40}, 0x28) 11:39:34 executing program 2: 11:39:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:35 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x181000, 0x0) getpeername$packet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000340)=0x14) sendto$packet(r3, &(0x7f0000000200)="b1269ac054f553bf30390b6fa7027d9e8c17e5ec6694933ea5f7e46392a7923bf4d0f771632a662170f5693ab9cd59ff79275ea8a2ee168c3bb1649b1d9b8a4e4e8fa653d41f2fac09815b13437c8902c1a270fb6a4cfd7546880cc82481803590f88f1c24e148685fac604b6d5d2dc26761bb7341cb28a5cf38982329c6a86f8ca3f2d04e534954b4e18009455fbb1f73cc53a64a2d8cc25d9b5df45eca9c2485a59b5578019e9cabfea1c4af9d0fd9c838e6baa51a5d679c1c986954782d88be5bf64408422157c823ae18a14c3e3ea75510838af992d9436b5ff14d22", 0xde, 0x20000000, &(0x7f0000000380)={0x11, 0xf6, r4, 0x1, 0x3a, 0x6, @random="720eef137598"}, 0x14) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x800, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000100)=ANY=[@ANYBLOB="000005000000050000000700001409000000ff7f0000000000000000"]) dup2(r2, r0) 11:39:35 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:35 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x327}], 0x1) [ 156.113588] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 156.121262] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) 11:39:35 executing program 2: 11:39:35 executing program 3: 11:39:35 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x39d}], 0x1) 11:39:35 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:35 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x101240, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) finit_module(r0, &(0x7f0000000040)='/dev/uinput\x00', 0x1) r4 = dup2(r2, r0) write$binfmt_aout(r1, &(0x7f0000000740)={{0xcc, 0x4, 0x7f, 0x2cd, 0x2d4, 0x98, 0x307}, "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", [[], []]}, 0x1220) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000080)) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) 11:39:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:35 executing program 3: 11:39:35 executing program 2: 11:39:35 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0xf7}], 0x1) [ 156.273321] netlink: 'syz-executor6': attribute type 1 has an invalid length. 11:39:35 executing program 2: 11:39:35 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(0xffffffffffffffff, &(0x7f0000000000), 0xe66) dup2(r1, r0) [ 156.337508] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:36 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:36 executing program 3: 11:39:36 executing program 2: 11:39:36 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000300)={'bridge_slave_0\x00', 0x100}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x100, 0x0) r4 = fcntl$getown(r0, 0x9) sched_getparam(r4, &(0x7f0000000380)) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000100)={'filter\x00', 0x0, 0x4, 0xdc, [], 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000200)=""/220}, &(0x7f0000000340)=0xfffffffffffffecc) dup2(r2, r0) [ 156.929364] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 156.942731] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) 11:39:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:36 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x452}], 0x1) 11:39:36 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x38b}], 0x1) 11:39:36 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r1, 0x1) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r2, r0) 11:39:36 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:36 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) prctl$intptr(0x3e, 0x2) 11:39:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) [ 157.297128] netlink: 'syz-executor6': attribute type 1 has an invalid length. 11:39:36 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1003}], 0x1) 11:39:36 executing program 3: 11:39:36 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) readv(r2, &(0x7f0000000000), 0x3b4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400, 0x0) utimensat(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}, 0x0) dup2(r1, r0) socket$inet6_udp(0xa, 0x2, 0x0) 11:39:36 executing program 2: [ 157.338058] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:36 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:36 executing program 3: 11:39:36 executing program 2: 11:39:36 executing program 4: syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r0, r1) [ 157.487716] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 157.501700] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) close(r1) 11:39:37 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x422}], 0x1) 11:39:37 executing program 3: 11:39:37 executing program 2: 11:39:37 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x478, 0x0, 0x140, 0x0, 0x390, 0x390, 0x390, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @rand_addr=0x8, @empty, 0x6, 0xffffffff}}}, {{@uncond, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8, 0x4, 0x1}}}, {{@uncond, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xfffffffffffffffb, 0x4, 0x7fffffff}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4c8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) 11:39:37 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:37 executing program 2: 11:39:37 executing program 3: 11:39:37 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x210102, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000400)=[@in6={0xa, 0x4e21, 0x7, @empty, 0x1}, @in6={0xa, 0x4e20, 0x76, @loopback={0x0, 0x1}, 0x4}, @in6={0xa, 0x4e24, 0x1ff, @dev={0xfe, 0x80, [], 0xd}, 0x6}, @in={0x2, 0x4e20, @broadcast=0xffffffff}], 0x64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x2}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={r4, 0xfffffffffffffc01}, &(0x7f0000000380)=0xfffffffffffffc31) r5 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffffffffffffffc0, 0x80) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000000c0)=0x1b0, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) recvfrom(r2, &(0x7f0000000200)=""/173, 0xad, 0x20, 0x0, 0x0) r6 = gettid() prctl$setptracer(0x59616d61, r6) r7 = dup2(r2, r0) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000100)=@req3={0x8000, 0x53, 0xb21f, 0xed, 0x7, 0x5, 0x9}, 0x1c) 11:39:37 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x34}], 0x1) 11:39:37 executing program 3: 11:39:37 executing program 2: [ 158.300137] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 158.323104] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:37 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:37 executing program 2: [ 158.460123] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 158.472313] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) close(r1) 11:39:38 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1200}], 0x1) 11:39:38 executing program 3: 11:39:38 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:38 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="036fb904bae280d95d40135c9b0a4329cdd312c218f117e2bea31ccb12d2769a6e15f7255d670926e71d15d86cf95dc591671716dbbd4a57a9d25783d766b76aa0253f3a048ce32f649100b1fb7a8a640320f7ad70ef489eebfe625deb1f746b2d57ad6ffcebf766574249e2f1ce8d9a947cfdfabc17f382cc056570ad6c96658af7af013bd7e96ec9d401eb7a1825cee6adac1128f3b03f1809b9ea287051f64116510c0bbd676d331453ca2362e41ae728b088b3916735d7b39f804fdf58d87a8f8755bd1c62d86cba7d8d55fb9771647ba7992201698942a1a37e1f5375f2f70cc2968e0ede024ffccb69b8f641427f6ec4bae9227b1670b5beb9c321c4e218372d286a60e831291ceb154cca1eb8ddf5b3282707abcd2a41b071b87f53bbed74dca0310fba1d13a3ccca0996af17c67b3f55636c410a36ba51a5485bc8c06b5c476a394c85335b48c1423583eeece32dd20c5620d3550161e019b5fd24f3e8fa31894b1fe616f6ab0dbb85bea66bb100d9f20264741ed43713335bcdef5cb08e42", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:38 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x8000, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) r3 = socket(0x1e, 0x1000000000001, 0x0) sendmsg(r3, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}, 0x0) recvmsg$kcm(r3, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r3, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x18}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1, 0x0, 0x1f}}], 0x3fffffffffffd23, 0x3, &(0x7f0000001340)={0x0, r4+30000000}) dup2(r1, r0) [ 159.182126] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 159.198283] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:38 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0xa00}], 0x1) 11:39:38 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x0, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:38 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080), 0x0) r3 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xfd}, &(0x7f00000000c0)=0x8) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000100)={r4, 0x6, 0x5, [0x1f, 0x52600668, 0x2c25, 0xb98, 0x2337e111]}, 0x12) 11:39:38 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x8000, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) r3 = socket(0x1e, 0x1000000000001, 0x0) sendmsg(r3, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}, 0x0) recvmsg$kcm(r3, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r3, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x18}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1, 0x0, 0x1f}}], 0x3fffffffffffd23, 0x3, &(0x7f0000001340)={0x0, r4+30000000}) dup2(r1, r0) 11:39:38 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:38 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x40d}], 0x1) 11:39:38 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:38 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1df}], 0x1) 11:39:39 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200)='\x00', 0xfffffffffffffff9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = memfd_create(&(0x7f0000000080)='em1system\x00', 0x3) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f00000000c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000240)={0x8, [0xffff, 0x2, 0x8001, 0x62c, 0x7, 0x2, 0x1, 0x80000001]}, 0x14) fcntl$getownex(r3, 0x10, &(0x7f0000000280)={0x0, 0x0}) ptrace$poke(0x5, r4, &(0x7f00000002c0), 0x1) 11:39:39 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x8000, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) r3 = socket(0x1e, 0x1000000000001, 0x0) sendmsg(r3, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}, 0x0) recvmsg$kcm(r3, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r3, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1, &(0x7f0000002c80)=""/123, 0x18}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1, 0x0, 0x1f}}], 0x3fffffffffffd23, 0x3, &(0x7f0000001340)={0x0, r4+30000000}) dup2(r1, r0) 11:39:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) close(r1) 11:39:39 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="0101560a07d1f5bfcb", 0x9) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r2, &(0x7f0000e76000)="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", 0x5b5, 0x0, &(0x7f0000bc8ff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) dup2(r1, r0) 11:39:39 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) [ 160.096849] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:39:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:39 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x900}], 0x1) 11:39:39 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xffffffff, 0x4000) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x0, 0xfdfd}) r1 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r2, r1) 11:39:39 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="036fb904bae280d95d40135c9b0a4329cdd312c218f117e2bea31ccb12d2769a6e15f7255d670926e71d15d86cf95dc591671716dbbd4a57a9d25783d766b76aa0253f3a048ce32f649100b1fb7a8a640320f7ad70ef489eebfe625deb1f746b2d57ad6ffcebf766574249e2f1ce8d9a947cfdfabc17f382cc056570ad6c96658af7af013bd7e96ec9d401eb7a1825cee6adac1128f3b03f1809b9ea287051f64116510c0bbd676d331453ca2362e41ae728b088b3916735d7b39f804fdf58d87a8f8755bd1c62d86cba7d8d55fb9771647ba7992201698942a1a37e1f5375f2f70cc2968e0ede024ffccb69b8f641427f6ec4bae9227b1670b5beb9c321c4e218372d286a60e831291ceb154cca1eb8ddf5b3282707abcd2a41b071b87f53bbed74dca0310fba1d13a3ccca0996af17c67b3f55636c410a36ba51a5485bc8c06b5c476a394c85335b48c1423583eeece32dd20c5620d3550161e019b5fd24f3e8fa31894b1fe616f6ab0dbb85bea66bb100d9f20264741ed43713335bcdef5cb08e42", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:39 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x500}], 0x1) 11:39:39 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) 11:39:39 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x645d1ad5, 0x802) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000100)=""/20, &(0x7f0000000140)=0x14) r1 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x60000, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r2, r1) 11:39:39 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x421}], 0x1) 11:39:39 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYRESOCT]) 11:39:39 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) 11:39:39 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) kexec_load(0x7fffffff, 0x0, &(0x7f00000002c0), 0x3f0003) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x9d, "5db47b69cf2f399ca811f631d034ba5d0899176133ec9ef4b46d32b8dba3658f43a64c0127aca515c8200c31c26a8fb932eb7ddeda5882fbb60f72e119978001c8bbaf796c2c5d2bda7a5187dd25ed99af6ce659c0f0de3c8c49ea4153bf39eb9a5ad80605b55841122a59ce4dd65e422d768d40969cebe2af6204f9fc9734d53dd54ef000cce75e5608d372e17fc944a964be8080e317717d865e8733"}, &(0x7f0000000100)=0xa5) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3, 0x2}, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x1177) dup2(r1, r0) 11:39:40 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:39:40 executing program 2 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:40 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x83}], 0x1) [ 160.915651] FAULT_INJECTION: forcing a failure. [ 160.915651] name failslab, interval 1, probability 0, space 0, times 0 [ 160.926974] CPU: 1 PID: 9529 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 160.935393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 160.944748] Call Trace: [ 160.947342] dump_stack+0x1c9/0x2b4 [ 160.951319] ? dump_stack_print_info.cold.2+0x52/0x52 [ 160.956507] ? __unlock_page_memcg+0x72/0x100 [ 160.961007] should_fail.cold.4+0xa/0x11 11:39:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) [ 160.965088] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 160.970208] ? perf_trace_lock+0xde/0x920 [ 160.974380] ? zap_class+0x740/0x740 [ 160.978135] ? lock_release+0xa30/0xa30 [ 160.982128] ? trace_hardirqs_on+0x10/0x10 [ 160.986379] ? trace_hardirqs_on+0x10/0x10 [ 160.990622] ? put_page+0x280/0x280 [ 160.994267] ? check_same_owner+0x340/0x340 [ 160.998599] ? alloc_set_pte+0xaf6/0x1790 [ 161.002850] ? rcu_note_context_switch+0x730/0x730 [ 161.007812] __should_failslab+0x124/0x180 [ 161.012083] should_failslab+0x9/0x14 [ 161.015902] kmem_cache_alloc+0x2af/0x760 [ 161.020069] ? perf_trace_lock+0x920/0x920 [ 161.024327] ? perf_trace_lock+0x920/0x920 [ 161.028570] jbd2__journal_start+0x1e7/0xa80 [ 161.033005] ? jbd2_write_access_granted.part.9+0x430/0x430 [ 161.038720] ? rcu_note_context_switch+0x730/0x730 [ 161.043666] ? trace_hardirqs_on+0x10/0x10 [ 161.047916] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 161.053476] __ext4_journal_start_sb+0x182/0x600 [ 161.058233] ? ext4_ioctl_setflags+0x278/0x7d0 [ 161.062808] ? ext4_journal_abort_handle.isra.5+0x260/0x260 [ 161.068530] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 161.074095] ? security_capable+0x99/0xc0 [ 161.078239] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 161.083771] ? ns_capable_common+0x13f/0x170 [ 161.088168] ext4_ioctl_setflags+0x278/0x7d0 [ 161.092576] ? ext4_ioc_getfsmap+0xed0/0xed0 [ 161.096998] ? down_read+0x1d0/0x1d0 [ 161.100715] ? mnt_clone_write+0xed/0x130 [ 161.104856] ? __mnt_want_write_file+0xa2/0xc0 [ 161.109443] ext4_ioctl+0xe41/0x4210 [ 161.114550] ? zap_class+0x740/0x740 [ 161.118266] ? ext4_ioctl_group_add+0x560/0x560 [ 161.122925] ? perf_trace_lock+0xde/0x920 [ 161.127058] ? _kstrtoull+0x188/0x250 [ 161.130846] ? _parse_integer+0x190/0x190 [ 161.134983] ? zap_class+0x740/0x740 [ 161.138710] ? lock_acquire+0x1e4/0x540 [ 161.142670] ? __fget+0x4ac/0x740 [ 161.146200] ? lock_downgrade+0x8f0/0x8f0 [ 161.150339] ? lock_release+0xa30/0xa30 [ 161.154299] ? zap_class+0x740/0x740 [ 161.158009] ? __f_unlock_pos+0x19/0x20 [ 161.161989] ? __fget+0x4d5/0x740 [ 161.165434] ? ksys_dup3+0x690/0x690 [ 161.169143] ? kasan_check_write+0x14/0x20 [ 161.173369] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 161.178300] ? fsnotify+0xbac/0x14e0 [ 161.182022] ? vfs_write+0x2f3/0x560 [ 161.185725] ? ext4_ioctl_group_add+0x560/0x560 [ 161.190384] do_vfs_ioctl+0x1de/0x1720 [ 161.194260] ? fsnotify_first_mark+0x350/0x350 [ 161.198830] ? ioctl_preallocate+0x300/0x300 [ 161.203239] ? __fget_light+0x2f7/0x440 [ 161.207211] ? fget_raw+0x20/0x20 [ 161.210664] ? __sb_end_write+0xac/0xe0 [ 161.214641] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 161.220168] ? fput+0x130/0x1a0 [ 161.223436] ? ksys_write+0x1ae/0x260 [ 161.227230] ? security_file_ioctl+0x94/0xc0 [ 161.231623] ksys_ioctl+0xa9/0xd0 [ 161.235080] __x64_sys_ioctl+0x73/0xb0 [ 161.238957] do_syscall_64+0x1b9/0x820 [ 161.242832] ? finish_task_switch+0x1d3/0x870 [ 161.247314] ? syscall_return_slowpath+0x5e0/0x5e0 [ 161.252236] ? syscall_return_slowpath+0x31d/0x5e0 [ 161.257164] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 161.262170] ? prepare_exit_to_usermode+0x291/0x3b0 [ 161.267174] ? perf_trace_sys_enter+0xb10/0xb10 [ 161.271841] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 161.276684] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 161.281859] RIP: 0033:0x455e29 [ 161.285031] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 161.304256] RSP: 002b:00007f91d383cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:39:40 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) init_module(&(0x7f0000000000)='eth0}posix_acl_accesswlan1\x00', 0x290, &(0x7f0000000040)='&ppp1!wlan1trusted^ppp1wlan0\x00') r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x44, "1e74048bc28be5c8a227b52fbb8535f08d5d390f9d924650821f77fa63eb3c4c99c8b4c8adb55c83f5e3effc76b759373f5e4c61707ec7f27e7f925b44ec4cd5aa676996"}, &(0x7f00000001c0)=0x4c) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={r2, 0xa3a3}, 0x8) socket$inet6(0xa, 0xa, 0x8000) timerfd_gettime(r1, &(0x7f0000000240)) sendto$inet6(r0, &(0x7f0000000280)="0404000000c000ddb8460900fff5", 0xe, 0x0, &(0x7f0000000080)={0xa, 0x8864, 0x20000000005, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) ioctl$TIOCEXCL(r1, 0x540c) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x94000) write$cgroup_int(r3, &(0x7f0000000100)=0x9, 0x12) exit_group(0x100) 11:39:40 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) 11:39:40 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x7, 0x7, &(0x7f0000000540)=[{&(0x7f0000000100)="303817d053f8fda7fc1cb0500528e440abd14ff9e7add21274c97f987f7e2d894a8b50726353145bd1ead6a85f1f205b5efbf6123ca9085d15c9b96a71bf90cd9c737140fbdbfa6f5d642b44c8bb6aed929944c4546a405bb7e2afa34098ab0424f26a23a4c34fa2545cf6b3afc529fd4aee997865", 0x75}, {&(0x7f0000000200), 0x0, 0x7f}, {&(0x7f0000000240)="f71e6556ebb8f655e5b5d1722ed2a7ae43897b5bfd6d27fe57b08e4df16b551e2ce49f2549caee6c2542cc9d03f8fbdd69206d90ed41ac452b8c9b852944a182d2eda2041ed60bf7f230e27f79d8f6b69c2428237b660b", 0x57, 0x1}, {&(0x7f00000002c0)="14b8b9810d42c2c51a20003da4498523835dc07aa00b99713bd2e4e756ad536223b69bb85949708ec7b126f8d4cb2729c4ad20bad058c4f161871a3be68aacaf82c084a11d8f127c7815c391ac3c7250619bb196cd26d69b45a546c64609f57b9f3fde24581a697ff3f4805873fa4794933a3db35f4353ca566b63842684537874f9", 0x82, 0x80000000}, {&(0x7f0000000380)="0ba0d25533243996d0ed677547faf7df5b2e2d2a77f7a461faf147a4633f403a6e734ccefb821e6c0cb4ab9acf251af292fd", 0x32, 0x1}, {&(0x7f00000003c0)="04b7dda1dc8fe90b1cb3c4e2472895d1e461d231a14cf5700435464efd5f6d87b50f549d4b6b46c4a8fc3bfe7c9ec1c5a24b8d9d1b704a3336d26c816a5c9fc68f65090b82e46c4447433190df68424da453dce549c87b73621368fd17d2f9e2a0edf02e4c2f0e26b494495aa650fa578bd98ea739705baf107d00a73d08a88ef1ca1f8fd944d579f998c245", 0x8c, 0x3ff}, {&(0x7f0000000480)="afbad46daa861f69ec0042fa3980eeb552ae940c2242598bd7983feede20bd98ac3768807c5d85837078ccab0b90ac5ceb50e707bb69ad0bc4ff49c3f35753f3d1d7d8f2ca8b1fffdf7db08a0833407cd118e4ce87bb4e4e85d6f29b73369b50017808faa4df33dc9c98f590ac088fa6092c8a45365bb8619895dda75158221dfc937199ae5c4b70e66c", 0x8a, 0x69}], 0x20040, 0x0) 11:39:40 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x476}], 0x1) 11:39:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="036fb904bae280d95d40135c9b0a4329cdd312c218f117e2bea31ccb12d2769a6e15f7255d670926e71d15d86cf95dc591671716dbbd4a57a9d25783d766b76aa0253f3a048ce32f649100b1fb7a8a640320f7ad70ef489eebfe625deb1f746b2d57ad6ffcebf766574249e2f1ce8d9a947cfdfabc17f382cc056570ad6c96658af7af013bd7e96ec9d401eb7a1825cee6adac1128f3b03f1809b9ea287051f64116510c0bbd676d331453ca2362e41ae728b088b3916735d7b39f804fdf58d87a8f8755bd1c62d86cba7d8d55fb9771647ba7992201698942a1a37e1f5375f2f70cc2968e0ede024ffccb69b8f641427f6ec4bae9227b1670b5beb9c321c4e218372d286a60e831291ceb154cca1eb8ddf5b3282707abcd2a41b071b87f53bbed74dca0310fba1d13a3ccca0996af17c67b3f55636c410a36ba51a5485bc8c06b5c476a394c85335b48c1423583eeece32dd20c5620d3550161e019b5fd24f3e8fa31894b1fe616f6ab0dbb85bea66bb100d9f20264741ed43713335bcdef5cb08e42", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:40 executing program 2 (fault-call:4 fault-nth:1): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) [ 161.311954] RAX: ffffffffffffffda RBX: 00007f91d383d6d4 RCX: 0000000000455e29 [ 161.319211] RDX: 0000000020000280 RSI: 0000000040086602 RDI: 0000000000000014 [ 161.326477] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 161.333736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 161.341007] R13: 00000000004bfc11 R14: 00000000004cf158 R15: 0000000000000000 11:39:40 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)}], 0x1}, 0x0) 11:39:40 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x29}], 0x1) 11:39:40 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x8000) getsockopt$packet_int(r2, 0x107, 0x12, &(0x7f00000006c0), &(0x7f0000001740)=0x4) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x10840, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000002080), &(0x7f00000020c0)=0x14) openat$zero(0xffffffffffffff9c, &(0x7f0000001f80)='/dev/zero\x00', 0x200000, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000002040)='/dev/mixer\x00', 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x9, 0x40000) sendmsg$nl_generic(r5, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000005c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x424}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) syz_open_dev$vcsn(&(0x7f0000002000)='/dev/vcs#\x00', 0x4, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhost-net\x00', 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/134, 0x2c}, {&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000200)=""/93, 0x5d}, {&(0x7f0000000280)=""/84, 0x4c}, {&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000340)=""/188, 0xbc}, {&(0x7f0000000400)=""/176, 0xb0}], 0x8) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000001fc0)=ANY=[@ANYBLOB="010060307f6ed5e21b2200000000000008000080ff0000000900000000080000"]) dup2(r1, r0) 11:39:40 executing program 3: r0 = socket(0x9, 0x5, 0x0) ioctl$void(r0, 0x5450) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x3304, &(0x7f0000000080)) [ 161.474361] FAULT_INJECTION: forcing a failure. [ 161.474361] name failslab, interval 1, probability 0, space 0, times 0 [ 161.485720] CPU: 1 PID: 9559 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 161.494214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 161.503592] Call Trace: [ 161.506222] dump_stack+0x1c9/0x2b4 [ 161.509896] ? dump_stack_print_info.cold.2+0x52/0x52 [ 161.515198] ? trace_hardirqs_on+0x10/0x10 [ 161.519452] should_fail.cold.4+0xa/0x11 [ 161.523512] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 161.528607] ? __perf_event_task_sched_in+0x91d/0xbb0 [ 161.533791] ? perf_trace_lock+0xde/0x920 [ 161.537948] ? zap_class+0x740/0x740 [ 161.541656] ? trace_hardirqs_on+0x10/0x10 [ 161.545878] ? perf_trace_lock+0x920/0x920 [ 161.550100] ? kasan_check_write+0x14/0x20 [ 161.554347] ? trace_hardirqs_on+0x10/0x10 [ 161.558603] ? trace_hardirqs_on+0x10/0x10 [ 161.562842] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 161.567693] ? perf_trace_lock+0xde/0x920 [ 161.571835] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 161.576667] __should_failslab+0x124/0x180 [ 161.580915] should_failslab+0x9/0x14 [ 161.584710] kmem_cache_alloc+0x47/0x760 [ 161.588785] ? rcu_note_context_switch+0x730/0x730 [ 161.593714] ? compat_start_thread+0x80/0x80 [ 161.598115] ? mempool_free+0x370/0x370 [ 161.602081] mempool_alloc_slab+0x44/0x60 [ 161.606238] mempool_alloc+0x193/0x4b0 [ 161.610126] ? mempool_destroy+0x30/0x30 [ 161.614177] ? lock_acquire+0x1e4/0x540 [ 161.618154] ? jbd2_journal_get_log_tail+0x18f/0x550 [ 161.623255] ? lock_downgrade+0x8f0/0x8f0 [ 161.627399] bio_alloc_bioset+0x39c/0x6f0 [ 161.631545] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 161.636126] ? bvec_alloc+0x2d0/0x2d0 [ 161.639924] ? kasan_check_write+0x14/0x20 [ 161.644148] ? kasan_check_write+0x14/0x20 [ 161.648370] ? do_raw_read_unlock+0x3f/0x60 [ 161.652689] blkdev_issue_flush+0xd1/0x300 [ 161.656921] jbd2_cleanup_journal_tail+0x230/0x2c0 [ 161.661847] ? jbd2_journal_skip_recovery.cold.13+0x4d/0x4d [ 161.667555] ? kasan_check_read+0x11/0x20 [ 161.671694] ? do_raw_spin_unlock+0xa7/0x2f0 [ 161.676090] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 161.680673] jbd2_log_do_checkpoint+0xd5/0x1370 [ 161.685342] ? remove_wait_queue+0x360/0x360 [ 161.689764] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 161.695469] ? lock_acquire+0x1e4/0x540 [ 161.699431] ? jbd2_journal_flush+0x144/0x540 [ 161.703921] ? lock_downgrade+0x8f0/0x8f0 [ 161.708068] ? kasan_check_read+0x11/0x20 [ 161.712200] ? do_raw_spin_unlock+0xa7/0x2f0 [ 161.716590] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 161.721164] ? kasan_check_write+0x14/0x20 [ 161.725406] ? do_raw_spin_lock+0xc1/0x200 [ 161.729660] jbd2_journal_flush+0x156/0x540 [ 161.733992] ext4_change_inode_journal_flag+0x230/0x3e0 [ 161.739359] ext4_ioctl_setflags+0x5fd/0x7d0 [ 161.743776] ? ext4_ioc_getfsmap+0xed0/0xed0 [ 161.748174] ? down_read+0x1d0/0x1d0 [ 161.751889] ? __mnt_want_write_file+0xa2/0xc0 [ 161.756456] ext4_ioctl+0xe41/0x4210 [ 161.760163] ? zap_class+0x740/0x740 [ 161.763883] ? ext4_ioctl_group_add+0x560/0x560 [ 161.768535] ? perf_trace_lock+0xde/0x920 [ 161.772666] ? _kstrtoull+0x188/0x250 [ 161.776452] ? _parse_integer+0x190/0x190 [ 161.780632] ? zap_class+0x740/0x740 [ 161.784353] ? lock_acquire+0x1e4/0x540 [ 161.788317] ? __fget+0x4ac/0x740 [ 161.791773] ? lock_downgrade+0x8f0/0x8f0 [ 161.795921] ? lock_release+0xa30/0xa30 [ 161.799877] ? zap_class+0x740/0x740 [ 161.803597] ? __f_unlock_pos+0x19/0x20 [ 161.807556] ? __fget+0x4d5/0x740 [ 161.810992] ? ksys_dup3+0x690/0x690 [ 161.814705] ? kasan_check_write+0x14/0x20 [ 161.818937] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 161.823857] ? fsnotify+0xbac/0x14e0 [ 161.827555] ? vfs_write+0x2f3/0x560 [ 161.831264] ? ext4_ioctl_group_add+0x560/0x560 [ 161.835927] do_vfs_ioctl+0x1de/0x1720 [ 161.839800] ? fsnotify_first_mark+0x350/0x350 [ 161.844366] ? ioctl_preallocate+0x300/0x300 [ 161.848775] ? __fget_light+0x2f7/0x440 [ 161.852760] ? fget_raw+0x20/0x20 [ 161.856200] ? __sb_end_write+0xac/0xe0 [ 161.860165] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 161.865687] ? fput+0x130/0x1a0 [ 161.868960] ? ksys_write+0x1ae/0x260 [ 161.872749] ? security_file_ioctl+0x94/0xc0 [ 161.877151] ksys_ioctl+0xa9/0xd0 [ 161.880597] __x64_sys_ioctl+0x73/0xb0 [ 161.884473] do_syscall_64+0x1b9/0x820 [ 161.888349] ? finish_task_switch+0x1d3/0x870 [ 161.892845] ? syscall_return_slowpath+0x5e0/0x5e0 [ 161.897764] ? syscall_return_slowpath+0x31d/0x5e0 [ 161.902677] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 161.907683] ? prepare_exit_to_usermode+0x291/0x3b0 [ 161.912689] ? perf_trace_sys_enter+0xb10/0xb10 [ 161.917351] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 161.922182] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 161.927368] RIP: 0033:0x455e29 [ 161.930540] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 161.949738] RSP: 002b:00007f91d383cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.957451] RAX: ffffffffffffffda RBX: 00007f91d383d6d4 RCX: 0000000000455e29 [ 161.964728] RDX: 0000000020000280 RSI: 0000000040086602 RDI: 0000000000000014 [ 161.971988] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 161.979252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 161.986522] R13: 00000000004bfc11 R14: 00000000004cf158 R15: 0000000000000001 11:39:41 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)}], 0x1}, 0x0) 11:39:41 executing program 2 (fault-call:4 fault-nth:2): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) [ 162.175477] FAULT_INJECTION: forcing a failure. [ 162.175477] name failslab, interval 1, probability 0, space 0, times 0 [ 162.187091] CPU: 0 PID: 9589 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 162.195435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.204811] Call Trace: [ 162.207415] dump_stack+0x1c9/0x2b4 [ 162.211061] ? dump_stack_print_info.cold.2+0x52/0x52 [ 162.216306] should_fail.cold.4+0xa/0x11 [ 162.220666] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 162.225815] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 162.230953] ? trace_hardirqs_on+0x10/0x10 [ 162.235220] ? perf_tp_event+0xc40/0xc40 [ 162.239282] ? trace_hardirqs_on+0x10/0x10 [ 162.243510] ? memset+0x31/0x40 [ 162.246788] ? perf_trace_lock+0xde/0x920 [ 162.250950] ? zap_class+0x740/0x740 [ 162.254669] ? perf_trace_lock+0x920/0x920 [ 162.258894] ? perf_trace_lock+0xde/0x920 [ 162.263062] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 162.268628] __should_failslab+0x124/0x180 [ 162.272868] should_failslab+0x9/0x14 [ 162.276686] kmem_cache_alloc_node+0x56/0x780 [ 162.281216] ? perf_swevent_event+0x2e0/0x2e0 [ 162.285746] create_task_io_context+0xbd/0x580 [ 162.290339] ? ioc_clear_queue+0x610/0x610 [ 162.294573] ? lock_acquire+0x1e4/0x540 [ 162.298545] ? generic_make_request_checks+0x1091/0x2410 [ 162.304018] ? lock_downgrade+0x8f0/0x8f0 [ 162.308170] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 162.313707] ? __disk_get_part+0x1ec/0x320 [ 162.318111] ? part_in_flight_rw+0x2f0/0x2f0 [ 162.322602] ? lock_acquire+0x1e4/0x540 [ 162.326572] ? rcu_note_context_switch+0x730/0x730 [ 162.331527] generic_make_request_checks+0x164f/0x2410 [ 162.336812] ? blk_init_queue+0x30/0x30 [ 162.340794] ? blk_queue_enter+0xb47/0xed0 [ 162.345053] ? blk_exit_rl+0x80/0x80 [ 162.348779] ? save_stack+0xa9/0xd0 [ 162.352436] ? save_stack+0x43/0xd0 [ 162.356068] ? kasan_kmalloc+0xc4/0xe0 [ 162.359945] ? kasan_slab_alloc+0x12/0x20 [ 162.364084] ? kmem_cache_alloc+0x12e/0x760 [ 162.368401] ? mempool_alloc_slab+0x44/0x60 [ 162.372724] ? mempool_alloc+0x193/0x4b0 [ 162.376780] ? bio_alloc_bioset+0x39c/0x6f0 [ 162.381118] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 162.386235] ? trace_hardirqs_on+0x10/0x10 [ 162.390474] ? perf_tp_event+0xc40/0xc40 [ 162.394531] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 162.399643] ? perf_trace_lock+0xde/0x920 [ 162.403794] ? memset+0x31/0x40 [ 162.407074] ? perf_trace_lock+0xde/0x920 [ 162.411229] generic_make_request+0x2aa/0x1800 [ 162.415808] ? zap_class+0x740/0x740 [ 162.419536] ? perf_trace_lock+0x920/0x920 [ 162.423770] ? blk_get_request+0x7e0/0x7e0 [ 162.428000] ? kasan_slab_alloc+0x12/0x20 [ 162.432164] ? rcu_note_context_switch+0x730/0x730 [ 162.437101] ? mempool_alloc_slab+0x44/0x60 [ 162.441431] ? mempool_free+0x370/0x370 [ 162.445423] ? lock_acquire+0x1e4/0x540 [ 162.449499] ? guard_bio_eod+0x1ed/0x600 [ 162.453566] ? lock_downgrade+0x8f0/0x8f0 [ 162.457721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 162.463261] submit_bio+0xba/0x460 [ 162.466806] ? submit_bio+0xba/0x460 [ 162.470522] ? generic_make_request+0x1800/0x1800 [ 162.475360] ? __bio_add_page+0x122/0x280 [ 162.479596] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 162.484617] ? guard_bio_eod+0x2b4/0x600 [ 162.488675] ? bio_add_page+0xed/0x120 [ 162.492562] submit_bh_wbc+0x5de/0x790 [ 162.496453] write_dirty_buffer+0xba/0x150 [ 162.500707] jbd2_log_do_checkpoint+0xc08/0x1370 [ 162.505473] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 162.511198] ? lock_acquire+0x1e4/0x540 [ 162.515166] ? jbd2_journal_flush+0x144/0x540 [ 162.520055] ? kasan_check_read+0x11/0x20 [ 162.524205] ? do_raw_spin_unlock+0xa7/0x2f0 [ 162.528620] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 162.533209] ? kasan_check_write+0x14/0x20 [ 162.537439] ? do_raw_spin_lock+0xc1/0x200 [ 162.541700] jbd2_journal_flush+0x156/0x540 [ 162.546031] ext4_change_inode_journal_flag+0x230/0x3e0 [ 162.551407] ext4_ioctl_setflags+0x5fd/0x7d0 [ 162.555818] ? ext4_ioc_getfsmap+0xed0/0xed0 [ 162.560231] ? down_read+0x1d0/0x1d0 [ 162.563953] ? __mnt_want_write_file+0xa2/0xc0 [ 162.568533] ext4_ioctl+0xe41/0x4210 [ 162.572242] ? zap_class+0x740/0x740 [ 162.575961] ? ext4_ioctl_group_add+0x560/0x560 [ 162.580626] ? perf_trace_lock+0xde/0x920 [ 162.584773] ? _parse_integer+0x190/0x190 [ 162.588922] ? zap_class+0x740/0x740 [ 162.592655] ? lock_acquire+0x1e4/0x540 [ 162.596625] ? __fget+0x4ac/0x740 [ 162.600072] ? lock_downgrade+0x8f0/0x8f0 [ 162.604230] ? lock_release+0xa30/0xa30 [ 162.608198] ? zap_class+0x740/0x740 [ 162.611928] ? __f_unlock_pos+0x19/0x20 [ 162.615902] ? __fget+0x4d5/0x740 [ 162.619356] ? ksys_dup3+0x690/0x690 [ 162.623074] ? kasan_check_write+0x14/0x20 [ 162.627312] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 162.632231] ? fsnotify+0xbac/0x14e0 [ 162.635939] ? vfs_write+0x2f3/0x560 [ 162.639651] ? ext4_ioctl_group_add+0x560/0x560 [ 162.644327] do_vfs_ioctl+0x1de/0x1720 [ 162.648211] ? fsnotify_first_mark+0x350/0x350 [ 162.652790] ? ioctl_preallocate+0x300/0x300 [ 162.657197] ? __fget_light+0x2f7/0x440 [ 162.661167] ? fget_raw+0x20/0x20 [ 162.664622] ? __sb_end_write+0xac/0xe0 [ 162.668599] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 162.674129] ? fput+0x130/0x1a0 [ 162.677403] ? ksys_write+0x1ae/0x260 [ 162.681207] ? security_file_ioctl+0x94/0xc0 [ 162.685611] ksys_ioctl+0xa9/0xd0 [ 162.689061] __x64_sys_ioctl+0x73/0xb0 [ 162.692958] do_syscall_64+0x1b9/0x820 [ 162.696840] ? finish_task_switch+0x1d3/0x870 [ 162.701344] ? syscall_return_slowpath+0x5e0/0x5e0 [ 162.706272] ? syscall_return_slowpath+0x31d/0x5e0 [ 162.711203] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 162.716215] ? prepare_exit_to_usermode+0x291/0x3b0 [ 162.721241] ? perf_trace_sys_enter+0xb10/0xb10 [ 162.725917] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 162.730765] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 162.735958] RIP: 0033:0x455e29 [ 162.739156] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 162.758645] RSP: 002b:00007f91d383cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.766370] RAX: ffffffffffffffda RBX: 00007f91d383d6d4 RCX: 0000000000455e29 [ 162.773635] RDX: 0000000020000280 RSI: 0000000040086602 RDI: 0000000000000014 [ 162.780995] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 162.788329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 162.795692] R13: 00000000004bfc11 R14: 00000000004cf158 R15: 0000000000000002 11:39:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:39:42 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x33b}], 0x1) 11:39:42 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x800000000007, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:39:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004e00)=[{{&(0x7f0000000880)=@ipx, 0x80, &(0x7f0000000b80)=[{&(0x7f0000003040)=""/4096, 0x1000}], 0x1, &(0x7f0000000c40)=""/99, 0x63}}], 0x1, 0x0, &(0x7f0000004fc0)) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x3, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, &(0x7f0000000cc0)) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x8000) 11:39:42 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)}], 0x1}, 0x0) 11:39:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:42 executing program 2 (fault-call:4 fault-nth:3): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:42 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x4000, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1400) 11:39:42 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = dup2(r1, r0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x22020}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x300, 0x70bd27, 0x25dfdbfd, {0xb}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x322}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044805}, 0x20044004) 11:39:42 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e2800", 0x26}], 0x1}, 0x0) 11:39:42 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1015}], 0x1) [ 162.923363] FAULT_INJECTION: forcing a failure. [ 162.923363] name failslab, interval 1, probability 0, space 0, times 0 [ 162.934782] CPU: 0 PID: 9615 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 162.943117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.952504] Call Trace: [ 162.955112] dump_stack+0x1c9/0x2b4 [ 162.958755] ? dump_stack_print_info.cold.2+0x52/0x52 [ 162.963949] ? zap_class+0x740/0x740 [ 162.967670] should_fail.cold.4+0xa/0x11 [ 162.971735] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 162.976940] ? blk_exit_rl+0x80/0x80 [ 162.980678] ? save_stack+0xa9/0xd0 [ 162.984317] ? kmem_cache_alloc+0x12e/0x760 [ 162.988642] ? mempool_alloc_slab+0x44/0x60 [ 162.992966] ? bio_alloc_bioset+0x39c/0x6f0 [ 162.997308] ? lock_acquire+0x1e4/0x540 [ 163.001286] ? generic_make_request+0x527/0x1800 [ 163.006063] ? lock_downgrade+0x8f0/0x8f0 [ 163.010213] ? lock_release+0xa30/0xa30 [ 163.014182] ? perf_trace_lock+0xde/0x920 [ 163.018336] ? memset+0x31/0x40 [ 163.021619] ? generic_make_request+0x550/0x1800 [ 163.026379] __should_failslab+0x124/0x180 [ 163.030633] should_failslab+0x9/0x14 [ 163.034446] kmem_cache_alloc+0x47/0x760 [ 163.038507] ? rcu_note_context_switch+0x730/0x730 [ 163.043458] ? mempool_free+0x370/0x370 [ 163.047461] mempool_alloc_slab+0x44/0x60 [ 163.051708] mempool_alloc+0x193/0x4b0 [ 163.055612] ? mempool_destroy+0x30/0x30 [ 163.060303] ? lock_downgrade+0x8f0/0x8f0 [ 163.064463] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 163.070040] bio_alloc_bioset+0x39c/0x6f0 [ 163.074193] ? generic_make_request+0x1800/0x1800 [ 163.079051] ? bvec_alloc+0x2d0/0x2d0 [ 163.082857] ? check_same_owner+0x340/0x340 [ 163.087190] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 163.092212] ? guard_bio_eod+0x2b4/0x600 [ 163.096274] submit_bh_wbc+0x14b/0x790 [ 163.100180] write_dirty_buffer+0xba/0x150 [ 163.104438] jbd2_log_do_checkpoint+0xc08/0x1370 [ 163.109228] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 163.114944] ? lock_acquire+0x1e4/0x540 [ 163.118922] ? jbd2_journal_flush+0x144/0x540 [ 163.123431] ? kasan_check_read+0x11/0x20 [ 163.127597] ? do_raw_spin_unlock+0xa7/0x2f0 [ 163.132012] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 163.136631] ? kasan_check_write+0x14/0x20 [ 163.140872] ? do_raw_spin_lock+0xc1/0x200 [ 163.145108] jbd2_journal_flush+0x156/0x540 [ 163.149436] ext4_change_inode_journal_flag+0x230/0x3e0 [ 163.154797] ext4_ioctl_setflags+0x5fd/0x7d0 [ 163.159210] ? ext4_ioc_getfsmap+0xed0/0xed0 [ 163.163610] ? down_read+0x1d0/0x1d0 [ 163.167316] ? __mnt_want_write_file+0xa2/0xc0 [ 163.171906] ext4_ioctl+0xe41/0x4210 [ 163.175636] ? zap_class+0x740/0x740 [ 163.179356] ? ext4_ioctl_group_add+0x560/0x560 [ 163.184026] ? perf_trace_lock+0xde/0x920 [ 163.188178] ? _parse_integer+0x190/0x190 [ 163.192332] ? zap_class+0x740/0x740 [ 163.196083] ? lock_acquire+0x1e4/0x540 [ 163.200064] ? __fget+0x4ac/0x740 [ 163.203511] ? lock_downgrade+0x8f0/0x8f0 [ 163.207670] ? lock_release+0xa30/0xa30 [ 163.211641] ? zap_class+0x740/0x740 [ 163.215371] ? __f_unlock_pos+0x19/0x20 [ 163.219345] ? __fget+0x4d5/0x740 [ 163.222796] ? ksys_dup3+0x690/0x690 [ 163.226510] ? kasan_check_write+0x14/0x20 [ 163.230737] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 163.235664] ? fsnotify+0xbac/0x14e0 [ 163.239380] ? vfs_write+0x2f3/0x560 [ 163.243086] ? ext4_ioctl_group_add+0x560/0x560 [ 163.247793] do_vfs_ioctl+0x1de/0x1720 [ 163.251684] ? fsnotify_first_mark+0x350/0x350 [ 163.256269] ? ioctl_preallocate+0x300/0x300 [ 163.260667] ? __fget_light+0x2f7/0x440 [ 163.264631] ? fget_raw+0x20/0x20 [ 163.268084] ? __sb_end_write+0xac/0xe0 [ 163.272068] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 163.277607] ? fput+0x130/0x1a0 [ 163.280882] ? ksys_write+0x1ae/0x260 [ 163.284679] ? security_file_ioctl+0x94/0xc0 [ 163.289083] ksys_ioctl+0xa9/0xd0 [ 163.292532] __x64_sys_ioctl+0x73/0xb0 [ 163.296428] do_syscall_64+0x1b9/0x820 [ 163.300306] ? finish_task_switch+0x1d3/0x870 [ 163.304794] ? syscall_return_slowpath+0x5e0/0x5e0 [ 163.309752] ? syscall_return_slowpath+0x31d/0x5e0 [ 163.314695] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 163.319714] ? prepare_exit_to_usermode+0x291/0x3b0 [ 163.324729] ? perf_trace_sys_enter+0xb10/0xb10 [ 163.329412] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 163.334275] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 163.339979] RIP: 0033:0x455e29 [ 163.343191] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 163.362537] RSP: 002b:00007f91d383cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.370278] RAX: ffffffffffffffda RBX: 00007f91d383d6d4 RCX: 0000000000455e29 [ 163.377558] RDX: 0000000020000280 RSI: 0000000040086602 RDI: 0000000000000014 [ 163.384842] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 163.392144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 163.399411] R13: 00000000004bfc11 R14: 00000000004cf158 R15: 0000000000000003 11:39:42 executing program 2 (fault-call:4 fault-nth:4): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:42 executing program 3: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000240)={[{@discard='discard', 0x2c}]}) [ 163.469630] netlink: 'syz-executor6': attribute type 1 has an invalid length. 11:39:42 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0xb00}], 0x1) 11:39:42 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e2800", 0x26}], 0x1}, 0x0) [ 163.556342] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 163.557405] JFS: discard option not supported on device [ 163.575968] FAULT_INJECTION: forcing a failure. [ 163.575968] name failslab, interval 1, probability 0, space 0, times 0 [ 163.587314] CPU: 1 PID: 9638 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 163.595639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.605085] Call Trace: [ 163.607678] dump_stack+0x1c9/0x2b4 [ 163.611331] ? dump_stack_print_info.cold.2+0x52/0x52 [ 163.621136] should_fail.cold.4+0xa/0x11 [ 163.625197] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 163.630410] ? __perf_event_task_sched_in+0x91d/0xbb0 [ 163.635606] ? perf_trace_lock+0xde/0x920 [ 163.639752] ? perf_trace_lock+0xde/0x920 [ 163.643892] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 163.648754] ? zap_class+0x740/0x740 [ 163.652470] ? perf_trace_lock+0x920/0x920 [ 163.656708] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 163.662259] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 163.667455] ? perf_sched_cb_inc+0x2e0/0x2e0 [ 163.671878] __should_failslab+0x124/0x180 [ 163.676129] should_failslab+0x9/0x14 [ 163.679946] kmem_cache_alloc+0x47/0x760 [ 163.684015] ? rcu_note_context_switch+0x730/0x730 [ 163.688947] ? mempool_free+0x370/0x370 [ 163.693090] mempool_alloc_slab+0x44/0x60 [ 163.697239] mempool_alloc+0x193/0x4b0 [ 163.701139] ? mempool_destroy+0x30/0x30 [ 163.705212] ? is_bpf_text_address+0xd7/0x170 [ 163.709726] ? kernel_text_address+0x79/0xf0 [ 163.714129] ? __kernel_text_address+0xd/0x40 [ 163.718624] ? unwind_get_return_address+0x61/0xa0 [ 163.723561] bio_alloc_bioset+0x39c/0x6f0 [ 163.727864] ? bvec_alloc+0x2d0/0x2d0 [ 163.731687] submit_bh_wbc+0x14b/0x790 [ 163.735591] ? bio_free+0xf2/0x150 [ 163.739145] submit_bh+0x28/0x30 [ 163.742509] jbd2_write_superblock+0x58c/0xbb0 [ 163.747084] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 163.751663] ? jbd2_journal_abort+0x30/0x30 [ 163.755973] ? do_raw_spin_lock+0xc1/0x200 [ 163.760199] ? trace_hardirqs_off+0xd/0x10 [ 163.764428] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 163.769527] ? debug_check_no_obj_freed+0x30b/0x595 [ 163.774536] ? trace_hardirqs_on+0xd/0x10 [ 163.778687] jbd2_journal_update_sb_log_tail+0x1ff/0x390 [ 163.784150] ? jbd2_journal_get_log_tail+0x550/0x550 [ 163.789263] ? trace_hardirqs_on+0xd/0x10 [ 163.793398] ? kmem_cache_free+0x22e/0x2d0 [ 163.797625] __jbd2_update_log_tail+0x13f/0x650 [ 163.802285] ? jbd2_journal_update_sb_log_tail+0x390/0x390 [ 163.807903] ? bio_put+0x183/0x1f0 [ 163.811431] ? bio_free+0x150/0x150 [ 163.815062] ? kasan_check_write+0x14/0x20 [ 163.819286] ? do_raw_read_unlock+0x3f/0x60 [ 163.823611] jbd2_cleanup_journal_tail+0x1a0/0x2c0 [ 163.828546] ? jbd2_journal_skip_recovery.cold.13+0x4d/0x4d [ 163.834260] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 163.838845] ? kasan_check_write+0x14/0x20 [ 163.843073] ? do_raw_spin_lock+0xc1/0x200 [ 163.847304] jbd2_log_do_checkpoint+0xa19/0x1370 [ 163.852075] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 163.857791] ? lock_acquire+0x1e4/0x540 [ 163.861755] ? jbd2_journal_flush+0x144/0x540 [ 163.866247] ? kasan_check_read+0x11/0x20 [ 163.870398] ? do_raw_spin_unlock+0xa7/0x2f0 [ 163.874807] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 163.879396] ? kasan_check_write+0x14/0x20 [ 163.883620] ? do_raw_spin_lock+0xc1/0x200 [ 163.887849] jbd2_journal_flush+0x156/0x540 [ 163.892179] ext4_change_inode_journal_flag+0x230/0x3e0 [ 163.897548] ext4_ioctl_setflags+0x5fd/0x7d0 [ 163.901967] ? ext4_ioc_getfsmap+0xed0/0xed0 [ 163.906366] ? down_read+0x1d0/0x1d0 [ 163.910158] ? __mnt_want_write_file+0xa2/0xc0 [ 163.914732] ext4_ioctl+0xe41/0x4210 [ 163.918434] ? zap_class+0x740/0x740 [ 163.922155] ? ext4_ioctl_group_add+0x560/0x560 [ 163.926814] ? perf_trace_lock+0xde/0x920 [ 163.930949] ? _kstrtoull+0x188/0x250 [ 163.934738] ? _parse_integer+0x190/0x190 [ 163.938880] ? zap_class+0x740/0x740 [ 163.942615] ? lock_acquire+0x1e4/0x540 [ 163.946590] ? __fget+0x4ac/0x740 [ 163.950379] ? lock_downgrade+0x8f0/0x8f0 [ 163.954531] ? lock_release+0xa30/0xa30 [ 163.958521] ? zap_class+0x740/0x740 [ 163.962326] ? __f_unlock_pos+0x19/0x20 [ 163.966294] ? __fget+0x4d5/0x740 [ 163.969758] ? ksys_dup3+0x690/0x690 [ 163.973468] ? kasan_check_write+0x14/0x20 [ 163.977700] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 163.982619] ? fsnotify+0xbac/0x14e0 [ 163.986326] ? vfs_write+0x2f3/0x560 [ 163.990047] ? ext4_ioctl_group_add+0x560/0x560 [ 163.994708] do_vfs_ioctl+0x1de/0x1720 [ 163.998599] ? fsnotify_first_mark+0x350/0x350 [ 164.003200] ? ioctl_preallocate+0x300/0x300 [ 164.007612] ? __fget_light+0x2f7/0x440 [ 164.011593] ? fget_raw+0x20/0x20 [ 164.015041] ? __sb_end_write+0xac/0xe0 [ 164.019036] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 164.024762] ? fput+0x130/0x1a0 [ 164.028054] ? ksys_write+0x1ae/0x260 [ 164.031867] ? security_file_ioctl+0x94/0xc0 [ 164.036296] ksys_ioctl+0xa9/0xd0 [ 164.039748] __x64_sys_ioctl+0x73/0xb0 [ 164.043642] do_syscall_64+0x1b9/0x820 [ 164.047523] ? syscall_return_slowpath+0x5e0/0x5e0 [ 164.052456] ? syscall_return_slowpath+0x31d/0x5e0 [ 164.057374] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 164.062378] ? prepare_exit_to_usermode+0x291/0x3b0 [ 164.067385] ? perf_trace_sys_enter+0xb10/0xb10 [ 164.072046] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 164.076889] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 164.082075] RIP: 0033:0x455e29 [ 164.085260] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 164.104576] RSP: 002b:00007f91d383cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.112273] RAX: ffffffffffffffda RBX: 00007f91d383d6d4 RCX: 0000000000455e29 [ 164.119530] RDX: 0000000020000280 RSI: 0000000040086602 RDI: 0000000000000014 [ 164.126789] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 164.134057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 164.141316] R13: 00000000004bfc11 R14: 00000000004cf158 R15: 0000000000000004 [ 164.184146] JFS: discard option not supported on device 11:39:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:39:43 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x14) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r2, r0) 11:39:43 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e2800", 0x26}], 0x1}, 0x0) 11:39:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="036fb904bae280d95d40135c9b0a4329cdd312c218f117e2bea31ccb12d2769a6e15f7255d670926e71d15d86cf95dc591671716dbbd4a57a9d25783d766b76aa0253f3a048ce32f649100b1fb7a8a640320f7ad70ef489eebfe625deb1f746b2d57ad6ffcebf766574249e2f1ce8d9a947cfdfabc17f382cc056570ad6c96658af7af013bd7e96ec9d401eb7a1825cee6adac1128f3b03f1809b9ea287051f64116510c0bbd676d331453ca2362e41ae728b088b3916735d7b39f804fdf58d87a8f8755bd1c62d86cba7d8d55fb9771647ba7992201698942a1a37e1f5375f2f70cc2968e0ede024ffccb69b8f641427f6ec4bae9227b1670b5beb9c321c4e218372d286a60e831291ceb154cca1eb8ddf5b3282707abcd2a41b071b87f53bbed74dca0310fba1d13a3ccca0996af17c67b3f55636c410a36ba51a5485bc8c06b5c476a394c85335b48c1423583eeece32dd20c5620d3550161e019b5fd24f3e8fa31894b1fe616f6ab0dbb85bea66bb100d9f20264741ed43713335bcdef5cb08e42", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:43 executing program 2 (fault-call:4 fault-nth:5): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:43 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:43 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x8000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x70, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e630c400400000003000000000000000b6300000663044004000000056304400000000001634040000000000000000003000000000000000000000010000000000000000000000050000000000000000800000000000000", @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB="8561646600000000030000000000000001000000000000003f00000000000004852a526e1b6e5f2b646600000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000d1e0c22cf94714150032a144c745c8da33c25742cbda2f56079d0ed6f314c070ef2dc453260206e6534fe29981cd29320fa65ed748b901a6039519322fafb041dda65ce5318641fc1209a426efa7d405f844b8ba4d4485ca5cd4602adf4c140e9cf09f9440bd4adacc7d8cf6bdeb87f0aa44c82671b6e6284cadb481cdd5c802a727a4b7b0508d567ca66ab43340226e70f01a9fbbb09fcbfb3ac400153cd023a453301bf8679c99c6"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0563044001000000"], 0xf2, 0x0, &(0x7f00000002c0)="50bf92303d2df62747c668c3d72a3ddace132cc506cb219de49c3938ff3175a8642c4e401958cfad21efad368e452af37505959a73ca18b3ab9551b4422bef481ad15dcfaedb67b13746cab8000aa0fb2c6c40abfd614d7a5fa2aa9c9b5ff4e8feff6cf69dad9a88197b72012bba12ae4f308eaecee5c9dc69b65dc652e4bb9986c4459743b6ab957048eb33f42cb78e064f84811a5f699ee863b4fc693d0fb0a68fa31e0766ba9decb948e364bffd961f789fab8d13f2d7d3ea431712c5f58c01a2c819b145f63c8753868f83614c44322535e3c0354634183ac4d61e4d869c0f595e6036c7f930154343f20c915b604ad2"}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1, 0x101000) 11:39:43 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x336}], 0x1) 11:39:43 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x8000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000180)) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f00000001c0)=""/101) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000140)=0x0) fcntl$setown(r2, 0x8, r4) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000240)=""/163) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000540)={0x0, 0x3}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000005c0)={r6, @in={{0x2, 0x4e22, @rand_addr=0x2}}}, 0x84) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x40000, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e22, @loopback=0x7f000001}}, 0x8, 0xff, 0x3f, "8ed2b0b5d6ba57112a35b508749b0ef0e3dbaad8c33ea36eb3aa4223a8450cb65d972409f1dbb45acb02596652364e24c3468adc9d358eac2b64a521441d4de5824ee81acbf96b85b9fa8b02a6b6896e"}, 0xd8) r8 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x600000) write$P9_RREADDIR(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xe4) [ 164.297626] netlink: 'syz-executor6': attribute type 1 has an invalid length. 11:39:43 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d1", 0x39}], 0x1}, 0x0) [ 164.338618] FAULT_INJECTION: forcing a failure. [ 164.338618] name failslab, interval 1, probability 0, space 0, times 0 [ 164.350166] CPU: 0 PID: 9675 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 164.358672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.368047] Call Trace: [ 164.370634] dump_stack+0x1c9/0x2b4 [ 164.374261] ? dump_stack_print_info.cold.2+0x52/0x52 [ 164.379454] should_fail.cold.4+0xa/0x11 [ 164.383524] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 164.388658] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 164.393786] ? trace_hardirqs_on+0x10/0x10 [ 164.398044] ? perf_tp_event+0xc40/0xc40 [ 164.402217] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 164.407328] ? perf_trace_lock+0xde/0x920 [ 164.411475] ? trace_hardirqs_on+0x10/0x10 [ 164.415716] ? perf_tp_event+0xc40/0xc40 [ 164.419770] ? perf_trace_lock+0x920/0x920 [ 164.424187] ? lock_release+0xa30/0xa30 [ 164.428179] __should_failslab+0x124/0x180 [ 164.432426] should_failslab+0x9/0x14 [ 164.436246] kmem_cache_alloc+0x47/0x760 [ 164.440302] ? rcu_note_context_switch+0x730/0x730 [ 164.445237] ? mempool_free+0x370/0x370 [ 164.449205] mempool_alloc_slab+0x44/0x60 [ 164.453375] mempool_alloc+0x193/0x4b0 [ 164.457272] ? mempool_destroy+0x30/0x30 [ 164.461340] ? kasan_check_read+0x11/0x20 [ 164.465501] ? kasan_check_write+0x14/0x20 [ 164.469737] bio_alloc_bioset+0x39c/0x6f0 [ 164.473878] ? blk_start_plug+0xcc/0x370 [ 164.477950] ? bvec_alloc+0x2d0/0x2d0 [ 164.481744] ? check_same_owner+0x340/0x340 [ 164.486094] submit_bh_wbc+0x14b/0x790 [ 164.489977] write_dirty_buffer+0xba/0x150 [ 164.494217] jbd2_log_do_checkpoint+0xc08/0x1370 [ 164.499001] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 164.504727] ? lock_acquire+0x1e4/0x540 [ 164.508697] ? jbd2_journal_flush+0x144/0x540 [ 164.513194] ? kasan_check_read+0x11/0x20 [ 164.517382] ? do_raw_spin_unlock+0xa7/0x2f0 [ 164.522137] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 164.526719] ? kasan_check_write+0x14/0x20 [ 164.530948] ? do_raw_spin_lock+0xc1/0x200 [ 164.535191] jbd2_journal_flush+0x156/0x540 [ 164.539515] ext4_change_inode_journal_flag+0x230/0x3e0 [ 164.544874] ext4_ioctl_setflags+0x5fd/0x7d0 [ 164.549290] ? ext4_ioc_getfsmap+0xed0/0xed0 [ 164.553699] ? down_read+0x1d0/0x1d0 [ 164.557419] ? __mnt_want_write_file+0xa2/0xc0 [ 164.561995] ext4_ioctl+0xe41/0x4210 [ 164.565723] ? zap_class+0x740/0x740 [ 164.569443] ? ext4_ioctl_group_add+0x560/0x560 [ 164.574114] ? perf_trace_lock+0xde/0x920 [ 164.578253] ? _parse_integer+0x190/0x190 [ 164.582394] ? zap_class+0x740/0x740 [ 164.586114] ? lock_acquire+0x1e4/0x540 [ 164.590162] ? __fget+0x4ac/0x740 [ 164.593607] ? lock_downgrade+0x8f0/0x8f0 [ 164.597753] ? lock_release+0xa30/0xa30 [ 164.601715] ? zap_class+0x740/0x740 [ 164.605437] ? __f_unlock_pos+0x19/0x20 [ 164.609404] ? __fget+0x4d5/0x740 [ 164.612856] ? ksys_dup3+0x690/0x690 [ 164.616568] ? kasan_check_write+0x14/0x20 [ 164.620805] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 164.625731] ? fsnotify+0xbac/0x14e0 [ 164.629442] ? vfs_write+0x2f3/0x560 [ 164.633154] ? ext4_ioctl_group_add+0x560/0x560 [ 164.637826] do_vfs_ioctl+0x1de/0x1720 [ 164.641717] ? fsnotify_first_mark+0x350/0x350 [ 164.646301] ? ioctl_preallocate+0x300/0x300 [ 164.650697] ? __fget_light+0x2f7/0x440 [ 164.654663] ? fget_raw+0x20/0x20 [ 164.658114] ? __sb_end_write+0xac/0xe0 [ 164.662099] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 164.667627] ? fput+0x130/0x1a0 [ 164.670897] ? ksys_write+0x1ae/0x260 [ 164.674723] ? security_file_ioctl+0x94/0xc0 [ 164.679141] ksys_ioctl+0xa9/0xd0 [ 164.682613] __x64_sys_ioctl+0x73/0xb0 [ 164.686514] do_syscall_64+0x1b9/0x820 [ 164.690389] ? finish_task_switch+0x1d3/0x870 [ 164.694874] ? syscall_return_slowpath+0x5e0/0x5e0 [ 164.699794] ? syscall_return_slowpath+0x31d/0x5e0 [ 164.704731] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 164.709752] ? prepare_exit_to_usermode+0x291/0x3b0 [ 164.714772] ? perf_trace_sys_enter+0xb10/0xb10 [ 164.719434] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 164.724292] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 164.729587] RIP: 0033:0x455e29 [ 164.732760] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 164.752254] RSP: 002b:00007f91d383cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.759976] RAX: ffffffffffffffda RBX: 00007f91d383d6d4 RCX: 0000000000455e29 [ 164.767253] RDX: 0000000020000280 RSI: 0000000040086602 RDI: 0000000000000014 [ 164.774522] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 164.781794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 164.789064] R13: 00000000004bfc11 R14: 00000000004cf158 R15: 0000000000000005 11:39:44 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x10}], 0x1) 11:39:44 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$setendian(0x14, 0x1) setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000200), 0x4) [ 164.845317] netlink: 'syz-executor6': attribute type 1 has an invalid length. 11:39:44 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d1", 0x39}], 0x1}, 0x0) 11:39:44 executing program 2 (fault-call:4 fault-nth:6): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:44 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = dup2(r1, r0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080)={0x303, 0x33}, 0x4) 11:39:44 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0xb5}], 0x1) [ 164.948313] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 164.987317] FAULT_INJECTION: forcing a failure. [ 164.987317] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 164.999169] CPU: 1 PID: 9710 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 165.007511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.017312] Call Trace: [ 165.019921] dump_stack+0x1c9/0x2b4 [ 165.023573] ? dump_stack_print_info.cold.2+0x52/0x52 [ 165.028788] ? blk_mq_make_request+0x443/0x23f0 [ 165.033452] ? lock_acquire+0x1e4/0x540 [ 165.037424] should_fail.cold.4+0xa/0x11 [ 165.041480] ? blk_mq_try_issue_directly+0x1f0/0x1f0 [ 165.046573] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 165.051678] ? trace_hardirqs_on+0x10/0x10 [ 165.055906] ? radix_tree_lookup+0x21/0x30 [ 165.060221] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 165.065752] ? blkg_lookup_slowpath+0xd4/0x280 [ 165.070336] ? blkg_dev_name+0x120/0x120 [ 165.074395] ? perf_trace_lock+0xde/0x920 [ 165.078553] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 165.083387] ? perf_trace_lock+0x920/0x920 [ 165.087649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 165.093203] ? should_fail+0x246/0xd86 [ 165.097092] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 165.102182] ? blk_exit_rl+0x80/0x80 [ 165.105886] __alloc_pages_nodemask+0x36e/0xdb0 [ 165.110548] ? kmem_cache_alloc+0x12e/0x760 [ 165.114859] ? mempool_alloc_slab+0x44/0x60 [ 165.119176] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 165.124283] ? lock_acquire+0x1e4/0x540 [ 165.128258] ? generic_make_request+0x527/0x1800 [ 165.133006] ? lock_downgrade+0x8f0/0x8f0 [ 165.137167] ? lock_release+0xa30/0xa30 [ 165.141138] ? perf_trace_lock+0xde/0x920 [ 165.145283] ? trace_hardirqs_on+0x10/0x10 [ 165.149505] ? zap_class+0x740/0x740 [ 165.153213] cache_grow_begin+0x91/0x710 [ 165.157264] kmem_cache_alloc+0x689/0x760 [ 165.161410] ? mempool_free+0x370/0x370 [ 165.165375] mempool_alloc_slab+0x44/0x60 [ 165.169509] mempool_alloc+0x193/0x4b0 [ 165.173386] ? mempool_destroy+0x30/0x30 [ 165.177464] ? lock_downgrade+0x8f0/0x8f0 [ 165.181602] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 165.187143] bio_alloc_bioset+0x39c/0x6f0 [ 165.191297] ? generic_make_request+0x1800/0x1800 [ 165.196128] ? bvec_alloc+0x2d0/0x2d0 [ 165.199917] ? check_same_owner+0x340/0x340 [ 165.204227] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 165.209238] ? guard_bio_eod+0x2b4/0x600 [ 165.213294] submit_bh_wbc+0x14b/0x790 [ 165.217173] write_dirty_buffer+0xba/0x150 [ 165.221405] jbd2_log_do_checkpoint+0xc08/0x1370 [ 165.226260] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 165.231999] ? lock_acquire+0x1e4/0x540 [ 165.235967] ? jbd2_journal_flush+0x144/0x540 [ 165.240566] ? kasan_check_read+0x11/0x20 [ 165.244714] ? do_raw_spin_unlock+0xa7/0x2f0 [ 165.249391] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 165.253966] ? kasan_check_write+0x14/0x20 [ 165.258187] ? do_raw_spin_lock+0xc1/0x200 [ 165.262429] jbd2_journal_flush+0x156/0x540 [ 165.266757] ext4_change_inode_journal_flag+0x230/0x3e0 [ 165.272107] ext4_ioctl_setflags+0x5fd/0x7d0 [ 165.276501] ? ext4_ioc_getfsmap+0xed0/0xed0 [ 165.280907] ? down_read+0x1d0/0x1d0 [ 165.284622] ? __mnt_want_write_file+0xa2/0xc0 [ 165.289212] ext4_ioctl+0xe41/0x4210 [ 165.292910] ? zap_class+0x740/0x740 [ 165.296614] ? ext4_ioctl_group_add+0x560/0x560 [ 165.301283] ? perf_trace_lock+0xde/0x920 [ 165.305430] ? _kstrtoull+0x188/0x250 [ 165.309233] ? _parse_integer+0x190/0x190 [ 165.313380] ? zap_class+0x740/0x740 [ 165.317101] ? lock_acquire+0x1e4/0x540 [ 165.321069] ? __fget+0x4ac/0x740 [ 165.324518] ? lock_downgrade+0x8f0/0x8f0 [ 165.328666] ? lock_release+0xa30/0xa30 [ 165.332638] ? zap_class+0x740/0x740 [ 165.336342] ? __f_unlock_pos+0x19/0x20 [ 165.340313] ? __fget+0x4d5/0x740 [ 165.343779] ? ksys_dup3+0x690/0x690 [ 165.347486] ? kasan_check_write+0x14/0x20 [ 165.351709] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 165.356625] ? fsnotify+0xbac/0x14e0 [ 165.360324] ? vfs_write+0x2f3/0x560 [ 165.364034] ? ext4_ioctl_group_add+0x560/0x560 [ 165.368708] do_vfs_ioctl+0x1de/0x1720 [ 165.372584] ? fsnotify_first_mark+0x350/0x350 [ 165.377164] ? ioctl_preallocate+0x300/0x300 [ 165.381572] ? __fget_light+0x2f7/0x440 [ 165.385796] ? fget_raw+0x20/0x20 [ 165.389238] ? __sb_end_write+0xac/0xe0 [ 165.393215] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 165.398754] ? fput+0x130/0x1a0 [ 165.402040] ? ksys_write+0x1ae/0x260 [ 165.405830] ? security_file_ioctl+0x94/0xc0 [ 165.410225] ksys_ioctl+0xa9/0xd0 [ 165.413678] __x64_sys_ioctl+0x73/0xb0 [ 165.417561] do_syscall_64+0x1b9/0x820 [ 165.421448] ? finish_task_switch+0x1d3/0x870 [ 165.425930] ? syscall_return_slowpath+0x5e0/0x5e0 [ 165.430852] ? syscall_return_slowpath+0x31d/0x5e0 [ 165.435781] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 165.440795] ? prepare_exit_to_usermode+0x291/0x3b0 [ 165.445809] ? perf_trace_sys_enter+0xb10/0xb10 [ 165.450480] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 165.455340] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 165.460515] RIP: 0033:0x455e29 [ 165.463685] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 165.482862] RSP: 002b:00007f91d383cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.490578] RAX: ffffffffffffffda RBX: 00007f91d383d6d4 RCX: 0000000000455e29 [ 165.497847] RDX: 0000000020000280 RSI: 0000000040086602 RDI: 0000000000000014 [ 165.505107] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 165.512377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 165.519663] R13: 00000000004bfc11 R14: 00000000004cf158 R15: 0000000000000006 11:39:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:39:44 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:39:44 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r3 = dup2(r1, r0) tee(r2, r2, 0x8001, 0xa) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000080)) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000300)={@broadcast=0xffffffff, @rand_addr=0x2, r4}, 0xc) 11:39:44 executing program 2 (fault-call:4 fault-nth:7): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:44 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d1", 0x39}], 0x1}, 0x0) [ 165.661139] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 165.709249] FAULT_INJECTION: forcing a failure. [ 165.709249] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 165.721086] CPU: 0 PID: 9737 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 165.729658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.739037] Call Trace: [ 165.741636] dump_stack+0x1c9/0x2b4 [ 165.745258] ? dump_stack_print_info.cold.2+0x52/0x52 [ 165.750443] ? blk_mq_make_request+0x443/0x23f0 [ 165.755102] ? lock_acquire+0x1e4/0x540 [ 165.759079] should_fail.cold.4+0xa/0x11 [ 165.763147] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 165.768245] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 165.773341] ? trace_hardirqs_on+0x10/0x10 [ 165.777574] ? perf_tp_event+0xc40/0xc40 [ 165.781645] ? radix_tree_lookup+0x21/0x30 [ 165.785887] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 165.791439] ? blkg_lookup_slowpath+0xd4/0x280 [ 165.796046] ? blkg_dev_name+0x120/0x120 [ 165.800123] ? memset+0x31/0x40 [ 165.803425] ? perf_trace_lock_acquire+0x4f9/0x9a0 [ 165.808365] ? perf_trace_lock+0x920/0x920 [ 165.812597] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 165.818128] ? should_fail+0x246/0xd86 [ 165.822016] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 165.827132] ? blk_exit_rl+0x80/0x80 [ 165.830857] __alloc_pages_nodemask+0x36e/0xdb0 [ 165.835529] ? kmem_cache_alloc+0x12e/0x760 [ 165.839855] ? mempool_alloc_slab+0x44/0x60 [ 165.844638] ? mempool_alloc+0x193/0x4b0 [ 165.849144] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 165.854170] ? lock_acquire+0x1e4/0x540 [ 165.858928] ? generic_make_request+0x527/0x1800 [ 165.863691] ? lock_downgrade+0x8f0/0x8f0 [ 165.867845] ? lock_release+0xa30/0xa30 [ 165.871819] ? memset+0x31/0x40 [ 165.875100] cache_grow_begin+0x91/0x710 [ 165.879159] kmem_cache_alloc+0x689/0x760 [ 165.883308] ? mempool_free+0x370/0x370 [ 165.887274] mempool_alloc_slab+0x44/0x60 [ 165.891416] mempool_alloc+0x193/0x4b0 [ 165.895315] ? mempool_destroy+0x30/0x30 [ 165.899384] ? lock_downgrade+0x8f0/0x8f0 [ 165.903535] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 165.909089] bio_alloc_bioset+0x39c/0x6f0 [ 165.913233] ? generic_make_request+0x1800/0x1800 [ 165.918180] ? bvec_alloc+0x2d0/0x2d0 [ 165.921973] ? check_same_owner+0x340/0x340 [ 165.926291] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 165.931309] ? guard_bio_eod+0x2b4/0x600 [ 165.935366] submit_bh_wbc+0x14b/0x790 [ 165.939261] write_dirty_buffer+0xba/0x150 [ 165.943502] jbd2_log_do_checkpoint+0xc08/0x1370 [ 165.948275] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 165.953984] ? lock_acquire+0x1e4/0x540 [ 165.957963] ? jbd2_journal_flush+0x144/0x540 [ 165.962469] ? kasan_check_read+0x11/0x20 [ 165.966619] ? do_raw_spin_unlock+0xa7/0x2f0 [ 165.971045] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 165.975634] ? kasan_check_write+0x14/0x20 [ 165.979884] ? do_raw_spin_lock+0xc1/0x200 [ 165.984121] jbd2_journal_flush+0x156/0x540 [ 165.988439] ext4_change_inode_journal_flag+0x230/0x3e0 [ 165.993796] ext4_ioctl_setflags+0x5fd/0x7d0 [ 165.998207] ? ext4_ioc_getfsmap+0xed0/0xed0 [ 166.002606] ? down_read+0x1d0/0x1d0 [ 166.006317] ? __mnt_want_write_file+0xa2/0xc0 [ 166.010901] ext4_ioctl+0xe41/0x4210 [ 166.014613] ? ext4_ioctl_group_add+0x560/0x560 [ 166.019286] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 166.024816] ? _kstrtoull+0x188/0x250 [ 166.028608] ? _parse_integer+0x190/0x190 [ 166.032750] ? lock_release+0xa30/0xa30 [ 166.036731] ? lock_acquire+0x1e4/0x540 [ 166.040966] ? __fget+0x4ac/0x740 [ 166.044409] ? lock_downgrade+0x8f0/0x8f0 [ 166.048564] ? lock_release+0xa30/0xa30 [ 166.052530] ? pid_task+0x115/0x200 [ 166.056159] ? find_vpid+0xf0/0xf0 [ 166.059781] ? __f_unlock_pos+0x19/0x20 [ 166.063758] ? __fget+0x4d5/0x740 [ 166.067208] ? ksys_dup3+0x690/0x690 [ 166.070936] ? kasan_check_write+0x14/0x20 [ 166.075175] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 166.080107] ? fsnotify+0xbac/0x14e0 [ 166.083823] ? vfs_write+0x2f3/0x560 [ 166.087548] ? ext4_ioctl_group_add+0x560/0x560 [ 166.092223] do_vfs_ioctl+0x1de/0x1720 [ 166.096105] ? fsnotify_first_mark+0x350/0x350 [ 166.100674] ? __fsnotify_parent+0xcc/0x420 [ 166.105012] ? ioctl_preallocate+0x300/0x300 [ 166.109507] ? __fget_light+0x2f7/0x440 [ 166.113475] ? fget_raw+0x20/0x20 [ 166.116920] ? __sb_end_write+0xac/0xe0 [ 166.120906] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 166.126451] ? fput+0x130/0x1a0 [ 166.129733] ? ksys_write+0x1ae/0x260 [ 166.133537] ? security_file_ioctl+0x94/0xc0 [ 166.137937] ksys_ioctl+0xa9/0xd0 [ 166.141402] __x64_sys_ioctl+0x73/0xb0 [ 166.145280] do_syscall_64+0x1b9/0x820 [ 166.149163] ? finish_task_switch+0x1d3/0x870 [ 166.153654] ? syscall_return_slowpath+0x5e0/0x5e0 [ 166.158577] ? syscall_return_slowpath+0x31d/0x5e0 [ 166.163499] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 166.168504] ? prepare_exit_to_usermode+0x291/0x3b0 [ 166.173507] ? perf_trace_sys_enter+0xb10/0xb10 [ 166.178166] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 166.183023] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 166.188306] RIP: 0033:0x455e29 [ 166.191478] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 166.210772] RSP: 002b:00007f91d383cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.218500] RAX: ffffffffffffffda RBX: 00007f91d383d6d4 RCX: 0000000000455e29 [ 166.225768] RDX: 0000000020000280 RSI: 0000000040086602 RDI: 0000000000000014 [ 166.233036] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 166.240314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 166.247571] R13: 00000000004bfc11 R14: 00000000004cf158 R15: 0000000000000007 11:39:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:45 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x43c}], 0x1) 11:39:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:45 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000980), 0x0, &(0x7f00000000c0)={[{@largeio='largeio', 0x2c}]}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x402, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 11:39:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:39:45 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = fcntl$dupfd(r2, 0x406, r2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000140)=0x88c, 0x4) readv(r1, &(0x7f0000000080), 0x10000000000001e9) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000002c0)=""/200) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000080)={[{0x400, 0x6, 0x9, 0x8000, 0x3, 0x6, 0x6, 0x3, 0xe8a0, 0x516f, 0x2b9a, 0x9, 0x100000001}, {0x9, 0x1, 0x3f, 0x1000, 0x7, 0x800000000000000, 0x1b400, 0xc29, 0x0, 0x93, 0x7, 0xfffffffffffffff8, 0x7}, {0x5, 0xfffffffffffffffb, 0xd8, 0xf0d, 0x0, 0x2, 0x9, 0x6, 0x6, 0x1, 0x7, 0x7f, 0x7}], 0x3f}) dup2(r2, r0) socketpair(0x1, 0x0, 0x2, &(0x7f0000000100)) 11:39:45 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db", 0x43}], 0x1}, 0x0) 11:39:45 executing program 2 (fault-call:4 fault-nth:8): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) [ 166.416352] netlink: 'syz-executor6': attribute type 1 has an invalid length. 11:39:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) [ 166.467934] XFS (loop3): Invalid superblock magic number [ 166.474746] FAULT_INJECTION: forcing a failure. [ 166.474746] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 166.486589] CPU: 1 PID: 9769 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 166.495452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.504806] Call Trace: [ 166.507388] dump_stack+0x1c9/0x2b4 [ 166.511015] ? dump_stack_print_info.cold.2+0x52/0x52 [ 166.516201] ? blk_mq_make_request+0x443/0x23f0 [ 166.520879] ? lock_acquire+0x1e4/0x540 [ 166.524856] ? bio_associate_blkcg+0x272/0x3e0 [ 166.529438] should_fail.cold.4+0xa/0x11 [ 166.533498] ? blk_mq_try_issue_directly+0x1f0/0x1f0 [ 166.538634] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 166.543759] ? trace_hardirqs_on+0x10/0x10 [ 166.548002] ? radix_tree_lookup+0x21/0x30 [ 166.552254] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 166.557796] ? blkg_lookup_slowpath+0xd4/0x280 [ 166.562366] ? blkg_dev_name+0x120/0x120 [ 166.566418] ? perf_trace_lock+0xde/0x920 [ 166.570557] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 166.575922] ? perf_trace_lock+0x920/0x920 [ 166.580147] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 166.585671] ? should_fail+0x246/0xd86 [ 166.589545] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 166.594649] ? blk_exit_rl+0x80/0x80 [ 166.598365] __alloc_pages_nodemask+0x36e/0xdb0 [ 166.603036] ? kmem_cache_alloc+0x12e/0x760 [ 166.607358] ? mempool_alloc_slab+0x44/0x60 [ 166.611679] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 166.616693] ? lock_acquire+0x1e4/0x540 [ 166.620662] ? generic_make_request+0x527/0x1800 [ 166.625421] ? lock_downgrade+0x8f0/0x8f0 [ 166.629583] ? lock_release+0xa30/0xa30 [ 166.633562] ? perf_trace_lock+0xde/0x920 [ 166.637701] ? trace_hardirqs_on+0x10/0x10 [ 166.641933] ? zap_class+0x740/0x740 [ 166.645638] cache_grow_begin+0x91/0x710 [ 166.649691] kmem_cache_alloc+0x689/0x760 [ 166.653829] ? mempool_free+0x370/0x370 [ 166.657788] mempool_alloc_slab+0x44/0x60 [ 166.661920] mempool_alloc+0x193/0x4b0 [ 166.665805] ? mempool_destroy+0x30/0x30 [ 166.669852] ? lock_downgrade+0x8f0/0x8f0 [ 166.673994] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 166.679526] bio_alloc_bioset+0x39c/0x6f0 [ 166.683681] ? generic_make_request+0x1800/0x1800 [ 166.688517] ? bvec_alloc+0x2d0/0x2d0 [ 166.692418] ? check_same_owner+0x340/0x340 [ 166.696739] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 166.701744] ? guard_bio_eod+0x2b4/0x600 [ 166.705796] submit_bh_wbc+0x14b/0x790 [ 166.709674] write_dirty_buffer+0xba/0x150 [ 166.713893] jbd2_log_do_checkpoint+0xc08/0x1370 [ 166.718654] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 166.724367] ? lock_acquire+0x1e4/0x540 [ 166.728350] ? jbd2_journal_flush+0x144/0x540 [ 166.732837] ? kasan_check_read+0x11/0x20 [ 166.736990] ? do_raw_spin_unlock+0xa7/0x2f0 [ 166.741388] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 166.745967] ? kasan_check_write+0x14/0x20 [ 166.750189] ? do_raw_spin_lock+0xc1/0x200 [ 166.754412] jbd2_journal_flush+0x156/0x540 [ 166.758738] ext4_change_inode_journal_flag+0x230/0x3e0 [ 166.764095] ext4_ioctl_setflags+0x5fd/0x7d0 [ 166.768508] ? ext4_ioc_getfsmap+0xed0/0xed0 [ 166.772927] ? down_read+0x1d0/0x1d0 [ 166.776629] ? __mnt_want_write_file+0xa2/0xc0 [ 166.781373] ext4_ioctl+0xe41/0x4210 [ 166.785107] ? zap_class+0x740/0x740 [ 166.788813] ? ext4_ioctl_group_add+0x560/0x560 [ 166.793471] ? perf_trace_lock+0xde/0x920 [ 166.797628] ? _kstrtoull+0x188/0x250 [ 166.801427] ? _parse_integer+0x190/0x190 [ 166.805571] ? zap_class+0x740/0x740 [ 166.809300] ? lock_acquire+0x1e4/0x540 [ 166.813266] ? __fget+0x4ac/0x740 [ 166.816719] ? lock_downgrade+0x8f0/0x8f0 [ 166.820877] ? lock_release+0xa30/0xa30 [ 166.824851] ? zap_class+0x740/0x740 [ 166.828558] ? __f_unlock_pos+0x19/0x20 [ 166.832523] ? __fget+0x4d5/0x740 [ 166.835986] ? ksys_dup3+0x690/0x690 [ 166.839715] ? kasan_check_write+0x14/0x20 [ 166.843955] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 166.848870] ? fsnotify+0xbac/0x14e0 [ 166.852568] ? vfs_write+0x2f3/0x560 [ 166.856310] ? ext4_ioctl_group_add+0x560/0x560 [ 166.860973] do_vfs_ioctl+0x1de/0x1720 [ 166.864853] ? fsnotify_first_mark+0x350/0x350 [ 166.869442] ? ioctl_preallocate+0x300/0x300 [ 166.873846] ? __fget_light+0x2f7/0x440 [ 166.877806] ? fget_raw+0x20/0x20 [ 166.881248] ? __sb_end_write+0xac/0xe0 [ 166.885210] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 166.890744] ? fput+0x130/0x1a0 [ 166.894027] ? ksys_write+0x1ae/0x260 [ 166.897833] ? security_file_ioctl+0x94/0xc0 [ 166.902227] ksys_ioctl+0xa9/0xd0 [ 166.905676] __x64_sys_ioctl+0x73/0xb0 [ 166.909552] do_syscall_64+0x1b9/0x820 [ 166.913426] ? syscall_return_slowpath+0x5e0/0x5e0 [ 166.918344] ? syscall_return_slowpath+0x31d/0x5e0 [ 166.923260] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 166.928272] ? prepare_exit_to_usermode+0x291/0x3b0 [ 166.933284] ? perf_trace_sys_enter+0xb10/0xb10 [ 166.937939] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 166.942769] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 166.947963] RIP: 0033:0x455e29 11:39:46 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x29f}], 0x1) [ 166.951150] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 166.970381] RSP: 002b:00007f91d383cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.978076] RAX: ffffffffffffffda RBX: 00007f91d383d6d4 RCX: 0000000000455e29 [ 166.985333] RDX: 0000000020000280 RSI: 0000000040086602 RDI: 0000000000000014 [ 166.992584] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 166.999839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 167.007109] R13: 00000000004bfc11 R14: 00000000004cf158 R15: 0000000000000008 11:39:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:46 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db", 0x43}], 0x1}, 0x0) 11:39:46 executing program 2 (fault-call:4 fault-nth:9): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(0xffffffffffffffff) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:39:46 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:39:46 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1ad}], 0x1) [ 167.141514] XFS (loop3): Invalid superblock magic number [ 167.151387] netlink: 'syz-executor6': attribute type 1 has an invalid length. 11:39:46 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = fcntl$dupfd(r2, 0x406, r2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000140)=0x88c, 0x4) readv(r1, &(0x7f0000000080), 0x10000000000001e9) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000002c0)=""/200) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000080)={[{0x400, 0x6, 0x9, 0x8000, 0x3, 0x6, 0x6, 0x3, 0xe8a0, 0x516f, 0x2b9a, 0x9, 0x100000001}, {0x9, 0x1, 0x3f, 0x1000, 0x7, 0x800000000000000, 0x1b400, 0xc29, 0x0, 0x93, 0x7, 0xfffffffffffffff8, 0x7}, {0x5, 0xfffffffffffffffb, 0xd8, 0xf0d, 0x0, 0x2, 0x9, 0x6, 0x6, 0x1, 0x7, 0x7f, 0x7}], 0x3f}) dup2(r2, r0) socketpair(0x1, 0x0, 0x2, &(0x7f0000000100)) 11:39:46 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db", 0x43}], 0x1}, 0x0) [ 167.199950] FAULT_INJECTION: forcing a failure. [ 167.199950] name failslab, interval 1, probability 0, space 0, times 0 [ 167.211330] CPU: 0 PID: 9806 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 167.219691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.229074] Call Trace: [ 167.231749] dump_stack+0x1c9/0x2b4 [ 167.235463] ? dump_stack_print_info.cold.2+0x52/0x52 [ 167.240737] ? zap_class+0x740/0x740 [ 167.244508] should_fail.cold.4+0xa/0x11 [ 167.248600] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 167.253755] ? blk_exit_rl+0x80/0x80 [ 167.257523] ? save_stack+0xa9/0xd0 [ 167.261185] ? kmem_cache_alloc+0x12e/0x760 [ 167.265791] ? mempool_alloc_slab+0x44/0x60 [ 167.270144] ? bio_alloc_bioset+0x39c/0x6f0 [ 167.274505] ? lock_acquire+0x1e4/0x540 [ 167.278479] ? generic_make_request+0x527/0x1800 [ 167.283236] ? lock_downgrade+0x8f0/0x8f0 [ 167.287416] ? lock_release+0xa30/0xa30 [ 167.291407] ? perf_trace_lock+0xde/0x920 [ 167.295728] ? memset+0x31/0x40 [ 167.299017] ? generic_make_request+0x550/0x1800 [ 167.303801] __should_failslab+0x124/0x180 [ 167.308060] should_failslab+0x9/0x14 [ 167.311868] kmem_cache_alloc+0x47/0x760 [ 167.315952] ? rcu_note_context_switch+0x730/0x730 [ 167.320915] ? mempool_free+0x370/0x370 [ 167.324891] mempool_alloc_slab+0x44/0x60 [ 167.329048] mempool_alloc+0x193/0x4b0 [ 167.333041] ? mempool_destroy+0x30/0x30 [ 167.337120] ? lock_downgrade+0x8f0/0x8f0 [ 167.341283] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 167.346869] bio_alloc_bioset+0x39c/0x6f0 [ 167.351039] ? generic_make_request+0x1800/0x1800 [ 167.355884] ? bvec_alloc+0x2d0/0x2d0 [ 167.359697] ? check_same_owner+0x340/0x340 [ 167.364022] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 167.369054] ? guard_bio_eod+0x2b4/0x600 [ 167.373117] submit_bh_wbc+0x14b/0x790 [ 167.377027] write_dirty_buffer+0xba/0x150 [ 167.381263] jbd2_log_do_checkpoint+0xc08/0x1370 [ 167.386038] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 167.391750] ? lock_acquire+0x1e4/0x540 [ 167.395722] ? jbd2_journal_flush+0x144/0x540 [ 167.400231] ? kasan_check_read+0x11/0x20 [ 167.404387] ? do_raw_spin_unlock+0xa7/0x2f0 [ 167.408794] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 167.413381] ? kasan_check_write+0x14/0x20 [ 167.417629] ? do_raw_spin_lock+0xc1/0x200 [ 167.421871] jbd2_journal_flush+0x156/0x540 [ 167.426202] ext4_change_inode_journal_flag+0x230/0x3e0 [ 167.431575] ext4_ioctl_setflags+0x5fd/0x7d0 [ 167.436006] ? ext4_ioc_getfsmap+0xed0/0xed0 [ 167.440413] ? down_read+0x1d0/0x1d0 [ 167.444125] ? __mnt_want_write_file+0xa2/0xc0 [ 167.448709] ext4_ioctl+0xe41/0x4210 [ 167.452434] ? zap_class+0x740/0x740 [ 167.456167] ? ext4_ioctl_group_add+0x560/0x560 [ 167.460837] ? perf_trace_lock+0xde/0x920 [ 167.464982] ? _parse_integer+0x190/0x190 [ 167.469142] ? zap_class+0x740/0x740 [ 167.472877] ? lock_acquire+0x1e4/0x540 [ 167.476844] ? __fget+0x4ac/0x740 [ 167.480291] ? lock_downgrade+0x8f0/0x8f0 [ 167.484449] ? lock_release+0xa30/0xa30 [ 167.488415] ? zap_class+0x740/0x740 [ 167.492146] ? __f_unlock_pos+0x19/0x20 [ 167.496123] ? __fget+0x4d5/0x740 [ 167.499580] ? ksys_dup3+0x690/0x690 [ 167.503340] ? kasan_check_write+0x14/0x20 [ 167.507575] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 167.512500] ? fsnotify+0xbac/0x14e0 [ 167.516215] ? vfs_write+0x2f3/0x560 [ 167.519931] ? ext4_ioctl_group_add+0x560/0x560 [ 167.524602] do_vfs_ioctl+0x1de/0x1720 [ 167.528662] ? fsnotify_first_mark+0x350/0x350 [ 167.533270] ? ioctl_preallocate+0x300/0x300 [ 167.537687] ? __fget_light+0x2f7/0x440 [ 167.541660] ? fget_raw+0x20/0x20 [ 167.545111] ? __sb_end_write+0xac/0xe0 [ 167.549086] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 167.554618] ? fput+0x130/0x1a0 [ 167.557914] ? ksys_write+0x1ae/0x260 [ 167.561721] ? security_file_ioctl+0x94/0xc0 [ 167.566136] ksys_ioctl+0xa9/0xd0 [ 167.569591] __x64_sys_ioctl+0x73/0xb0 [ 167.573491] do_syscall_64+0x1b9/0x820 [ 167.577375] ? finish_task_switch+0x1d3/0x870 [ 167.581870] ? syscall_return_slowpath+0x5e0/0x5e0 [ 167.586811] ? syscall_return_slowpath+0x31d/0x5e0 [ 167.592518] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 167.597532] ? prepare_exit_to_usermode+0x291/0x3b0 [ 167.602544] ? perf_trace_sys_enter+0xb10/0xb10 [ 167.607219] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 167.612074] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.617268] RIP: 0033:0x455e29 [ 167.620462] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 167.639972] RSP: 002b:00007f91d383cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:39:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="036fb904bae280d95d40135c9b0a4329cdd312c218f117e2bea31ccb12d2769a6e15f7255d670926e71d15d86cf95dc591671716dbbd4a57a9d25783d766b76aa0253f3a048ce32f649100b1fb7a8a640320f7ad70ef489eebfe625deb1f746b2d57ad6ffcebf766574249e2f1ce8d9a947cfdfabc17f382cc056570ad6c96658af7af013bd7e96ec9d401eb7a1825cee6adac1128f3b03f1809b9ea287051f64116510c0bbd676d331453ca2362e41ae728b088b3916735d7b39f804fdf58d87a8f8755bd1c62d86cba7d8d55fb9771647ba7992201698942a1a37e1f5375f2f70cc2968e0ede024ffccb69b8f641427f6ec4bae9227b1670b5beb9c321c4e218372d286a60e831291ceb154cca1eb8ddf5b3282707abcd2a41b071b87f53bbed74dca0310fba1d13a3ccca0996af17c67b3f55636c410a36ba51a5485bc8c06b5c476a394c85335b48c1423583eeece32dd20c5620d3550161e019b5fd24f3e8fa31894b1fe616f6ab0dbb85bea66bb100d9f20264741ed43713335bcdef5cb08e42", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) [ 167.647696] RAX: ffffffffffffffda RBX: 00007f91d383d6d4 RCX: 0000000000455e29 [ 167.655011] RDX: 0000000020000280 RSI: 0000000040086602 RDI: 0000000000000014 [ 167.662290] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 167.669566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 167.676832] R13: 00000000004bfc11 R14: 00000000004cf158 R15: 0000000000000009 11:39:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) [ 167.733450] netlink: 'syz-executor6': attribute type 1 has an invalid length. 11:39:46 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x350}], 0x1) 11:39:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:46 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)="736563757269747d917617cb0e3dbe4574656f00", 0x0) write(r1, &(0x7f0000000040)="16", 0x1) sendfile(r1, r1, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000000)) uname(&(0x7f00000002c0)=""/4096) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x840, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x3}, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000200)={r5, 0xca}, &(0x7f0000000240)=0x8) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xb3cec4bfd7da8f98, 0x0) ioctl$KDGETMODE(r6, 0x4b3b, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000280)={r5, 0x6, 0x5, 0x2}, 0x10) dup2(r3, r0) 11:39:46 executing program 2 (fault-call:4 fault-nth:10): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:47 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd3", 0x48}], 0x1}, 0x0) 11:39:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) [ 167.891560] FAULT_INJECTION: forcing a failure. [ 167.891560] name failslab, interval 1, probability 0, space 0, times 0 [ 167.902957] CPU: 1 PID: 9840 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 167.911308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.920684] Call Trace: [ 167.923283] dump_stack+0x1c9/0x2b4 [ 167.926936] ? dump_stack_print_info.cold.2+0x52/0x52 [ 167.932164] ? zap_class+0x740/0x740 [ 167.935914] should_fail.cold.4+0xa/0x11 [ 167.940010] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 167.945122] ? blk_exit_rl+0x80/0x80 [ 167.948847] ? save_stack+0xa9/0xd0 [ 167.952480] ? kmem_cache_alloc+0x12e/0x760 [ 167.956811] ? mempool_alloc_slab+0x44/0x60 [ 167.961143] ? bio_alloc_bioset+0x39c/0x6f0 [ 167.965472] ? submit_bh_wbc+0x14b/0x790 [ 167.969541] ? jbd2_log_do_checkpoint+0xc08/0x1370 [ 167.974479] ? ext4_change_inode_journal_flag+0x230/0x3e0 [ 167.980033] ? lock_acquire+0x1e4/0x540 [ 167.984014] ? generic_make_request+0x527/0x1800 [ 167.988780] ? lock_downgrade+0x8f0/0x8f0 [ 167.992937] ? lock_release+0xa30/0xa30 [ 167.996920] ? perf_trace_lock+0xde/0x920 [ 168.001081] ? trace_hardirqs_on+0x10/0x10 [ 168.005329] ? zap_class+0x740/0x740 [ 168.009069] ? generic_make_request+0x550/0x1800 [ 168.013866] __should_failslab+0x124/0x180 [ 168.018118] should_failslab+0x9/0x14 [ 168.021932] kmem_cache_alloc+0x47/0x760 [ 168.026003] ? rcu_note_context_switch+0x730/0x730 [ 168.030952] ? mempool_free+0x370/0x370 [ 168.035026] mempool_alloc_slab+0x44/0x60 [ 168.039183] mempool_alloc+0x193/0x4b0 [ 168.043086] ? mempool_destroy+0x30/0x30 [ 168.047160] ? lock_downgrade+0x8f0/0x8f0 [ 168.051320] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 168.056883] bio_alloc_bioset+0x39c/0x6f0 [ 168.061044] ? generic_make_request+0x1800/0x1800 [ 168.065892] ? bvec_alloc+0x2d0/0x2d0 [ 168.069699] ? check_same_owner+0x340/0x340 [ 168.074025] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 168.079046] ? guard_bio_eod+0x2b4/0x600 [ 168.083117] submit_bh_wbc+0x14b/0x790 [ 168.087016] write_dirty_buffer+0xba/0x150 [ 168.091264] jbd2_log_do_checkpoint+0xc08/0x1370 [ 168.096033] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 168.101754] ? lock_acquire+0x1e4/0x540 [ 168.105732] ? jbd2_journal_flush+0x144/0x540 [ 168.110239] ? kasan_check_read+0x11/0x20 [ 168.114391] ? do_raw_spin_unlock+0xa7/0x2f0 [ 168.118800] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 168.123390] ? kasan_check_write+0x14/0x20 [ 168.127626] ? do_raw_spin_lock+0xc1/0x200 [ 168.131893] jbd2_journal_flush+0x156/0x540 [ 168.136247] ext4_change_inode_journal_flag+0x230/0x3e0 [ 168.141620] ext4_ioctl_setflags+0x5fd/0x7d0 [ 168.146033] ? ext4_ioc_getfsmap+0xed0/0xed0 [ 168.150444] ? down_read+0x1d0/0x1d0 [ 168.154165] ? __mnt_want_write_file+0xa2/0xc0 [ 168.158757] ext4_ioctl+0xe41/0x4210 [ 168.162471] ? zap_class+0x740/0x740 [ 168.166196] ? ext4_ioctl_group_add+0x560/0x560 [ 168.170870] ? perf_trace_lock+0xde/0x920 [ 168.175021] ? _kstrtoull+0x188/0x250 [ 168.178837] ? _parse_integer+0x190/0x190 [ 168.182996] ? zap_class+0x740/0x740 [ 168.186732] ? lock_acquire+0x1e4/0x540 [ 168.190710] ? __fget+0x4ac/0x740 [ 168.194167] ? lock_downgrade+0x8f0/0x8f0 [ 168.198327] ? lock_release+0xa30/0xa30 [ 168.202307] ? zap_class+0x740/0x740 [ 168.206272] ? __f_unlock_pos+0x19/0x20 [ 168.210253] ? __fget+0x4d5/0x740 [ 168.213736] ? ksys_dup3+0x690/0x690 [ 168.217468] ? kasan_check_write+0x14/0x20 [ 168.221715] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 168.226673] ? fsnotify+0xbac/0x14e0 [ 168.230394] ? vfs_write+0x2f3/0x560 [ 168.234392] ? ext4_ioctl_group_add+0x560/0x560 [ 168.239065] do_vfs_ioctl+0x1de/0x1720 [ 168.242957] ? fsnotify_first_mark+0x350/0x350 [ 168.247552] ? ioctl_preallocate+0x300/0x300 [ 168.251984] ? __fget_light+0x2f7/0x440 [ 168.255965] ? fget_raw+0x20/0x20 [ 168.259424] ? __sb_end_write+0xac/0xe0 [ 168.263417] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 168.268954] ? fput+0x130/0x1a0 [ 168.272239] ? ksys_write+0x1ae/0x260 [ 168.276048] ? security_file_ioctl+0x94/0xc0 [ 168.280464] ksys_ioctl+0xa9/0xd0 [ 168.283926] __x64_sys_ioctl+0x73/0xb0 [ 168.287822] do_syscall_64+0x1b9/0x820 [ 168.291710] ? finish_task_switch+0x1d3/0x870 [ 168.296218] ? syscall_return_slowpath+0x5e0/0x5e0 [ 168.301184] ? syscall_return_slowpath+0x31d/0x5e0 [ 168.306466] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 168.311487] ? prepare_exit_to_usermode+0x291/0x3b0 [ 168.316596] ? perf_trace_sys_enter+0xb10/0xb10 [ 168.321269] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 168.326120] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 168.331313] RIP: 0033:0x455e29 [ 168.334515] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 168.354733] RSP: 002b:00007f91d383cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.362454] RAX: ffffffffffffffda RBX: 00007f91d383d6d4 RCX: 0000000000455e29 [ 168.369731] RDX: 0000000020000280 RSI: 0000000040086602 RDI: 0000000000000014 [ 168.377006] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 168.384282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 11:39:47 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1006}], 0x1) [ 168.391556] R13: 00000000004bfc11 R14: 00000000004cf158 R15: 000000000000000a 11:39:47 executing program 5: read(0xffffffffffffffff, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) [ 168.443461] netlink: 'syz-executor6': attribute type 1 has an invalid length. 11:39:47 executing program 2 (fault-call:4 fault-nth:11): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:47 executing program 3: r0 = socket$inet_sctp(0x2, 0x4000001, 0x84) sendto$inet(r0, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f0000007ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x73, &(0x7f0000018000)={0x0, @in6={{0xa}}}, &(0x7f0000000000)=0x8c) 11:39:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:39:47 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd3", 0x48}], 0x1}, 0x0) 11:39:47 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x7ffff000}], 0x1) [ 168.586348] FAULT_INJECTION: forcing a failure. [ 168.586348] name failslab, interval 1, probability 0, space 0, times 0 [ 168.597698] CPU: 1 PID: 9861 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 168.606023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.615381] Call Trace: [ 168.617981] dump_stack+0x1c9/0x2b4 [ 168.621624] ? dump_stack_print_info.cold.2+0x52/0x52 [ 168.626825] ? zap_class+0x740/0x740 [ 168.630553] should_fail.cold.4+0xa/0x11 [ 168.634623] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 168.639754] ? blk_exit_rl+0x80/0x80 [ 168.643474] ? save_stack+0xa9/0xd0 [ 168.647125] ? kmem_cache_alloc+0x12e/0x760 [ 168.651458] ? mempool_alloc_slab+0x44/0x60 [ 168.655774] ? bio_alloc_bioset+0x39c/0x6f0 [ 168.660087] ? submit_bh_wbc+0x14b/0x790 [ 168.664138] ? jbd2_log_do_checkpoint+0xc08/0x1370 [ 168.669077] ? ext4_change_inode_journal_flag+0x230/0x3e0 [ 168.674701] ? lock_acquire+0x1e4/0x540 [ 168.678684] ? generic_make_request+0x527/0x1800 [ 168.683434] ? lock_downgrade+0x8f0/0x8f0 [ 168.687587] ? lock_release+0xa30/0xa30 [ 168.691571] ? do_raw_spin_unlock+0xa7/0x2f0 [ 168.695977] ? generic_make_request+0x550/0x1800 [ 168.700729] __should_failslab+0x124/0x180 [ 168.704969] should_failslab+0x9/0x14 [ 168.708759] kmem_cache_alloc+0x47/0x760 [ 168.712810] ? rcu_note_context_switch+0x730/0x730 [ 168.717734] ? mempool_free+0x370/0x370 [ 168.721699] mempool_alloc_slab+0x44/0x60 [ 168.725839] mempool_alloc+0x193/0x4b0 [ 168.729740] ? mempool_destroy+0x30/0x30 [ 168.733800] ? lock_downgrade+0x8f0/0x8f0 [ 168.737939] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 168.743492] bio_alloc_bioset+0x39c/0x6f0 [ 168.747636] ? generic_make_request+0x1800/0x1800 [ 168.752489] ? bvec_alloc+0x2d0/0x2d0 [ 168.756280] ? check_same_owner+0x340/0x340 [ 168.760591] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 168.765601] ? guard_bio_eod+0x2b4/0x600 [ 168.769659] submit_bh_wbc+0x14b/0x790 [ 168.773542] write_dirty_buffer+0xba/0x150 [ 168.777771] jbd2_log_do_checkpoint+0xc08/0x1370 [ 168.782526] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 168.788228] ? lock_acquire+0x1e4/0x540 [ 168.792188] ? jbd2_journal_flush+0x144/0x540 [ 168.796770] ? kasan_check_read+0x11/0x20 [ 168.800905] ? do_raw_spin_unlock+0xa7/0x2f0 [ 168.805313] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 168.809885] ? kasan_check_write+0x14/0x20 [ 168.814108] ? do_raw_spin_lock+0xc1/0x200 [ 168.818355] jbd2_journal_flush+0x156/0x540 [ 168.822675] ext4_change_inode_journal_flag+0x230/0x3e0 [ 168.828143] ext4_ioctl_setflags+0x5fd/0x7d0 [ 168.832562] ? ext4_ioc_getfsmap+0xed0/0xed0 [ 168.836972] ? down_read+0x1d0/0x1d0 [ 168.841384] ? __mnt_want_write_file+0xa2/0xc0 [ 168.845959] ext4_ioctl+0xe41/0x4210 [ 168.849681] ? zap_class+0x740/0x740 [ 168.853390] ? ext4_ioctl_group_add+0x560/0x560 [ 168.858064] ? perf_trace_lock+0xde/0x920 [ 168.862231] ? _kstrtoull+0x188/0x250 [ 168.866044] ? _parse_integer+0x190/0x190 [ 168.870188] ? zap_class+0x740/0x740 [ 168.873911] ? lock_acquire+0x1e4/0x540 [ 168.877876] ? __fget+0x4ac/0x740 [ 168.881323] ? lock_downgrade+0x8f0/0x8f0 [ 168.885478] ? lock_release+0xa30/0xa30 [ 168.889529] ? zap_class+0x740/0x740 [ 168.893240] ? __f_unlock_pos+0x19/0x20 [ 168.897472] ? __fget+0x4d5/0x740 [ 168.900922] ? ksys_dup3+0x690/0x690 [ 168.904650] ? kasan_check_write+0x14/0x20 [ 168.908891] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 168.913810] ? fsnotify+0xbac/0x14e0 [ 168.917513] ? vfs_write+0x2f3/0x560 [ 168.921218] ? ext4_ioctl_group_add+0x560/0x560 [ 168.925890] do_vfs_ioctl+0x1de/0x1720 [ 168.929775] ? fsnotify_first_mark+0x350/0x350 [ 168.934355] ? ioctl_preallocate+0x300/0x300 [ 168.938774] ? __fget_light+0x2f7/0x440 [ 168.942851] ? fget_raw+0x20/0x20 [ 168.946310] ? __sb_end_write+0xac/0xe0 [ 168.950292] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 168.955830] ? fput+0x130/0x1a0 [ 168.959115] ? ksys_write+0x1ae/0x260 [ 168.962920] ? security_file_ioctl+0x94/0xc0 [ 168.967515] ksys_ioctl+0xa9/0xd0 [ 168.970976] __x64_sys_ioctl+0x73/0xb0 [ 168.974871] do_syscall_64+0x1b9/0x820 [ 168.978752] ? finish_task_switch+0x1d3/0x870 [ 168.983239] ? syscall_return_slowpath+0x5e0/0x5e0 [ 168.988164] ? syscall_return_slowpath+0x31d/0x5e0 [ 168.993095] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 168.998119] ? prepare_exit_to_usermode+0x291/0x3b0 [ 169.003148] ? perf_trace_sys_enter+0xb10/0xb10 [ 169.007816] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 169.012661] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.017842] RIP: 0033:0x455e29 [ 169.021038] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 169.040375] RSP: 002b:00007f91d383cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.048092] RAX: ffffffffffffffda RBX: 00007f91d383d6d4 RCX: 0000000000455e29 [ 169.055371] RDX: 0000000020000280 RSI: 0000000040086602 RDI: 0000000000000014 [ 169.062644] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 169.069915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 169.077173] R13: 00000000004bfc11 R14: 00000000004cf158 R15: 000000000000000b 11:39:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, &(0x7f00000011c0)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:48 executing program 5: read(0xffffffffffffffff, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x24, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) open(&(0x7f0000000000)='./file0\x00', 0x800, 0xa9) semget(0x2, 0x3, 0x4a0) 11:39:48 executing program 2 (fault-call:4 fault-nth:12): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) [ 169.233590] netlink: 'syz-executor6': attribute type 1 has an invalid length. 11:39:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) [ 169.387607] FAULT_INJECTION: forcing a failure. [ 169.387607] name failslab, interval 1, probability 0, space 0, times 0 [ 169.398981] CPU: 0 PID: 9898 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 169.407315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.416702] Call Trace: [ 169.419312] dump_stack+0x1c9/0x2b4 [ 169.422981] ? dump_stack_print_info.cold.2+0x52/0x52 [ 169.428195] ? zap_class+0x740/0x740 [ 169.431937] should_fail.cold.4+0xa/0x11 [ 169.436019] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 169.441166] ? blk_exit_rl+0x80/0x80 [ 169.444899] ? save_stack+0xa9/0xd0 [ 169.448547] ? kmem_cache_alloc+0x12e/0x760 [ 169.452899] ? mempool_alloc_slab+0x44/0x60 [ 169.457240] ? bio_alloc_bioset+0x39c/0x6f0 [ 169.461611] ? lock_acquire+0x1e4/0x540 [ 169.465610] ? generic_make_request+0x527/0x1800 [ 169.470417] ? lock_downgrade+0x8f0/0x8f0 [ 169.474608] ? lock_release+0xa30/0xa30 [ 169.478623] ? perf_trace_lock+0xde/0x920 [ 169.482802] ? memset+0x31/0x40 [ 169.486115] ? generic_make_request+0x550/0x1800 [ 169.490917] __should_failslab+0x124/0x180 [ 169.495207] should_failslab+0x9/0x14 [ 169.499139] kmem_cache_alloc+0x47/0x760 [ 169.503234] ? rcu_note_context_switch+0x730/0x730 [ 169.508203] ? mempool_free+0x370/0x370 [ 169.512200] mempool_alloc_slab+0x44/0x60 [ 169.516375] mempool_alloc+0x193/0x4b0 [ 169.520295] ? mempool_destroy+0x30/0x30 [ 169.524388] ? lock_downgrade+0x8f0/0x8f0 [ 169.528562] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 169.534146] bio_alloc_bioset+0x39c/0x6f0 [ 169.538342] ? generic_make_request+0x1800/0x1800 [ 169.543241] ? bvec_alloc+0x2d0/0x2d0 [ 169.547071] ? check_same_owner+0x340/0x340 [ 169.551420] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 169.556458] ? guard_bio_eod+0x2b4/0x600 [ 169.560542] submit_bh_wbc+0x14b/0x790 [ 169.564459] write_dirty_buffer+0xba/0x150 [ 169.568714] jbd2_log_do_checkpoint+0xc08/0x1370 [ 169.573505] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 169.579236] ? lock_acquire+0x1e4/0x540 [ 169.583231] ? jbd2_journal_flush+0x144/0x540 [ 169.587763] ? kasan_check_read+0x11/0x20 [ 169.591966] ? do_raw_spin_unlock+0xa7/0x2f0 [ 169.596442] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 169.601061] ? kasan_check_write+0x14/0x20 [ 169.605321] ? do_raw_spin_lock+0xc1/0x200 [ 169.609593] jbd2_journal_flush+0x156/0x540 [ 169.613978] ext4_change_inode_journal_flag+0x230/0x3e0 [ 169.619376] ext4_ioctl_setflags+0x5fd/0x7d0 [ 169.623820] ? ext4_ioc_getfsmap+0xed0/0xed0 [ 169.628251] ? down_read+0x1d0/0x1d0 [ 169.632012] ? __mnt_want_write_file+0xa2/0xc0 [ 169.636625] ext4_ioctl+0xe41/0x4210 [ 169.640355] ? zap_class+0x740/0x740 [ 169.644115] ? ext4_ioctl_group_add+0x560/0x560 [ 169.648807] ? perf_trace_lock+0xde/0x920 [ 169.653002] ? _parse_integer+0x190/0x190 [ 169.657176] ? zap_class+0x740/0x740 [ 169.660963] ? lock_acquire+0x1e4/0x540 [ 169.664961] ? __fget+0x4ac/0x740 [ 169.668470] ? lock_downgrade+0x8f0/0x8f0 [ 169.672657] ? lock_release+0xa30/0xa30 [ 169.676649] ? zap_class+0x740/0x740 [ 169.680396] ? __f_unlock_pos+0x19/0x20 [ 169.684392] ? __fget+0x4d5/0x740 [ 169.687871] ? ksys_dup3+0x690/0x690 [ 169.691620] ? kasan_check_write+0x14/0x20 [ 169.695881] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 169.700832] ? fsnotify+0xbac/0x14e0 [ 169.704570] ? vfs_write+0x2f3/0x560 [ 169.708571] ? ext4_ioctl_group_add+0x560/0x560 [ 169.713264] do_vfs_ioctl+0x1de/0x1720 [ 169.717173] ? fsnotify_first_mark+0x350/0x350 [ 169.721782] ? ioctl_preallocate+0x300/0x300 [ 169.726212] ? __fget_light+0x2f7/0x440 [ 169.730205] ? fget_raw+0x20/0x20 [ 169.733679] ? __sb_end_write+0xac/0xe0 11:39:48 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000300), 0x4) dup2(r1, r0) 11:39:48 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd3", 0x48}], 0x1}, 0x0) 11:39:48 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x129}], 0x1) 11:39:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000180)={0x303, 0x33}, 0x4) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xb127, 0x42801) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={r3, @rand_addr=0xd3, @multicast1=0xe0000001}, 0xc) 11:39:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) [ 169.737682] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 169.743238] ? fput+0x130/0x1a0 [ 169.746532] ? ksys_write+0x1ae/0x260 [ 169.750353] ? security_file_ioctl+0x94/0xc0 [ 169.754777] ksys_ioctl+0xa9/0xd0 [ 169.758250] __x64_sys_ioctl+0x73/0xb0 [ 169.762157] do_syscall_64+0x1b9/0x820 [ 169.766055] ? finish_task_switch+0x1d3/0x870 [ 169.770575] ? syscall_return_slowpath+0x5e0/0x5e0 [ 169.775510] ? syscall_return_slowpath+0x31d/0x5e0 [ 169.780453] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 169.785516] ? prepare_exit_to_usermode+0x291/0x3b0 [ 169.790572] ? perf_trace_sys_enter+0xb10/0xb10 [ 169.795253] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 169.800103] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.805298] RIP: 0033:0x455e29 [ 169.808482] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 169.827844] RSP: 002b:00007f91d383cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.835571] RAX: ffffffffffffffda RBX: 00007f91d383d6d4 RCX: 0000000000455e29 [ 169.842833] RDX: 0000000020000280 RSI: 0000000040086602 RDI: 0000000000000014 [ 169.850107] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 169.857379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 169.864663] R13: 00000000004bfc11 R14: 00000000004cf158 R15: 000000000000000c 11:39:49 executing program 5: read(0xffffffffffffffff, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) [ 169.904542] netlink: 'syz-executor6': attribute type 1 has an invalid length. 11:39:49 executing program 2 (fault-call:4 fault-nth:13): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:49 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x4bb}], 0x1) 11:39:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:39:49 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed0", 0x4a}], 0x1}, 0x0) 11:39:49 executing program 4: syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = creat(&(0x7f00000000c0)='.\x00', 0x100) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000080)={0x9, 0x10, [0x7, 0x200, 0xffffffff, 0x10001]}) r3 = dup2(r2, r0) getsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 170.056682] FAULT_INJECTION: forcing a failure. [ 170.056682] name failslab, interval 1, probability 0, space 0, times 0 [ 170.068193] CPU: 1 PID: 9922 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 170.076529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.085979] Call Trace: [ 170.088585] dump_stack+0x1c9/0x2b4 [ 170.092232] ? dump_stack_print_info.cold.2+0x52/0x52 [ 170.097432] ? zap_class+0x740/0x740 [ 170.101164] should_fail.cold.4+0xa/0x11 [ 170.105249] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 170.110369] ? blk_exit_rl+0x80/0x80 [ 170.114106] ? save_stack+0xa9/0xd0 [ 170.117760] ? kmem_cache_alloc+0x12e/0x760 [ 170.122132] ? mempool_alloc_slab+0x44/0x60 [ 170.126464] ? bio_alloc_bioset+0x39c/0x6f0 [ 170.130796] ? submit_bh_wbc+0x14b/0x790 [ 170.134863] ? jbd2_log_do_checkpoint+0xc08/0x1370 [ 170.139801] ? ext4_change_inode_journal_flag+0x230/0x3e0 [ 170.145358] ? lock_acquire+0x1e4/0x540 [ 170.149342] ? generic_make_request+0x527/0x1800 [ 170.154106] ? lock_downgrade+0x8f0/0x8f0 [ 170.158252] ? lock_release+0xa30/0xa30 [ 170.162222] ? do_raw_spin_unlock+0xa7/0x2f0 [ 170.166638] ? generic_make_request+0x550/0x1800 [ 170.171388] __should_failslab+0x124/0x180 [ 170.175639] should_failslab+0x9/0x14 [ 170.179455] kmem_cache_alloc+0x47/0x760 [ 170.183514] ? rcu_note_context_switch+0x730/0x730 [ 170.188446] ? mempool_free+0x370/0x370 [ 170.192407] mempool_alloc_slab+0x44/0x60 [ 170.196555] mempool_alloc+0x193/0x4b0 [ 170.200444] ? mempool_destroy+0x30/0x30 [ 170.204494] ? lock_downgrade+0x8f0/0x8f0 [ 170.208645] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 170.214200] bio_alloc_bioset+0x39c/0x6f0 [ 170.218363] ? generic_make_request+0x1800/0x1800 [ 170.223217] ? bvec_alloc+0x2d0/0x2d0 [ 170.227017] ? check_same_owner+0x340/0x340 [ 170.231435] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 170.236454] ? guard_bio_eod+0x2b4/0x600 [ 170.240518] submit_bh_wbc+0x14b/0x790 [ 170.244422] write_dirty_buffer+0xba/0x150 [ 170.248855] jbd2_log_do_checkpoint+0xc08/0x1370 [ 170.253626] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 170.259339] ? lock_acquire+0x1e4/0x540 [ 170.263316] ? jbd2_journal_flush+0x144/0x540 [ 170.267817] ? kasan_check_read+0x11/0x20 [ 170.271948] ? do_raw_spin_unlock+0xa7/0x2f0 [ 170.276343] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 170.280912] ? kasan_check_write+0x14/0x20 [ 170.285233] ? do_raw_spin_lock+0xc1/0x200 [ 170.289467] jbd2_journal_flush+0x156/0x540 [ 170.293791] ext4_change_inode_journal_flag+0x230/0x3e0 [ 170.299142] ext4_ioctl_setflags+0x5fd/0x7d0 [ 170.303549] ? ext4_ioc_getfsmap+0xed0/0xed0 [ 170.307951] ? down_read+0x1d0/0x1d0 [ 170.311652] ? __mnt_want_write_file+0xa2/0xc0 [ 170.316230] ext4_ioctl+0xe41/0x4210 [ 170.319955] ? zap_class+0x740/0x740 [ 170.323655] ? ext4_ioctl_group_add+0x560/0x560 [ 170.328324] ? perf_trace_lock+0xde/0x920 [ 170.332458] ? _kstrtoull+0x188/0x250 [ 170.336260] ? _parse_integer+0x190/0x190 [ 170.340398] ? zap_class+0x740/0x740 [ 170.344116] ? lock_acquire+0x1e4/0x540 [ 170.348088] ? __fget+0x4ac/0x740 [ 170.351989] ? lock_downgrade+0x8f0/0x8f0 [ 170.356134] ? lock_release+0xa30/0xa30 [ 170.360352] ? zap_class+0x740/0x740 [ 170.364069] ? __f_unlock_pos+0x19/0x20 [ 170.368042] ? __fget+0x4d5/0x740 [ 170.371499] ? ksys_dup3+0x690/0x690 [ 170.375207] ? kasan_check_write+0x14/0x20 [ 170.379436] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 170.384367] ? fsnotify+0xbac/0x14e0 [ 170.388095] ? vfs_write+0x2f3/0x560 [ 170.391806] ? ext4_ioctl_group_add+0x560/0x560 [ 170.396464] do_vfs_ioctl+0x1de/0x1720 [ 170.401054] ? fsnotify_first_mark+0x350/0x350 [ 170.405639] ? ioctl_preallocate+0x300/0x300 [ 170.410066] ? __fget_light+0x2f7/0x440 [ 170.414042] ? fget_raw+0x20/0x20 [ 170.417491] ? __sb_end_write+0xac/0xe0 [ 170.421455] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 170.427004] ? fput+0x130/0x1a0 [ 170.430295] ? ksys_write+0x1ae/0x260 [ 170.434096] ? security_file_ioctl+0x94/0xc0 [ 170.438510] ksys_ioctl+0xa9/0xd0 [ 170.441960] __x64_sys_ioctl+0x73/0xb0 [ 170.445860] do_syscall_64+0x1b9/0x820 [ 170.449832] ? finish_task_switch+0x1d3/0x870 [ 170.454337] ? syscall_return_slowpath+0x5e0/0x5e0 [ 170.459262] ? syscall_return_slowpath+0x31d/0x5e0 [ 170.464197] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 170.469204] ? prepare_exit_to_usermode+0x291/0x3b0 [ 170.474208] ? perf_trace_sys_enter+0xb10/0xb10 [ 170.478871] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 170.483723] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 170.488903] RIP: 0033:0x455e29 [ 170.492079] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 170.511270] RSP: 002b:00007f91d383cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.518992] RAX: ffffffffffffffda RBX: 00007f91d383d6d4 RCX: 0000000000455e29 [ 170.526262] RDX: 0000000020000280 RSI: 0000000040086602 RDI: 0000000000000014 [ 170.533528] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 170.540795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 170.548049] R13: 00000000004bfc11 R14: 00000000004cf158 R15: 000000000000000d [ 170.577058] netlink: 'syz-executor6': attribute type 1 has an invalid length. 11:39:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, &(0x7f00000011c0)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(0xffffffffffffffff) 11:39:49 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x20002400}], 0x1) 11:39:49 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed0", 0x4a}], 0x1}, 0x0) 11:39:49 executing program 2 (fault-call:4 fault-nth:14): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:49 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sysfs$1(0x1, &(0x7f0000000080)='/dev/nbd#\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xfffffffffffff273}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f00000000c0)=""/125) [ 170.714319] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 170.743471] FAULT_INJECTION: forcing a failure. [ 170.743471] name failslab, interval 1, probability 0, space 0, times 0 [ 170.754840] CPU: 0 PID: 9955 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 11:39:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(0xffffffffffffffff) 11:39:49 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x6f, 0x30}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYBLOB="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"], &(0x7f00000001c0)=0xde) r2 = socket(0x4, 0x80000, 0x92c) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x50, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) 11:39:49 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x300}], 0x1) [ 170.763193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.772559] Call Trace: [ 170.775159] dump_stack+0x1c9/0x2b4 [ 170.778819] ? dump_stack_print_info.cold.2+0x52/0x52 [ 170.784313] should_fail.cold.4+0xa/0x11 [ 170.788410] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 170.793529] ? blk_exit_rl+0x80/0x80 [ 170.797264] ? save_stack+0xa9/0xd0 [ 170.800907] ? kmem_cache_alloc+0x12e/0x760 [ 170.805249] ? mempool_alloc_slab+0x44/0x60 [ 170.809576] ? mempool_alloc+0x193/0x4b0 [ 170.813650] ? bio_alloc_bioset+0x39c/0x6f0 [ 170.818006] ? lock_acquire+0x1e4/0x540 [ 170.822000] ? generic_make_request+0x527/0x1800 [ 170.826776] ? lock_downgrade+0x8f0/0x8f0 [ 170.830931] ? lock_release+0xa30/0xa30 [ 170.834924] ? memset+0x31/0x40 [ 170.838237] ? generic_make_request+0x550/0x1800 [ 170.843022] __should_failslab+0x124/0x180 [ 170.847282] should_failslab+0x9/0x14 [ 170.851083] kmem_cache_alloc+0x47/0x760 [ 170.855161] ? rcu_note_context_switch+0x730/0x730 [ 170.860110] ? mempool_free+0x370/0x370 [ 170.864081] mempool_alloc_slab+0x44/0x60 [ 170.868294] mempool_alloc+0x193/0x4b0 [ 170.872183] ? mempool_destroy+0x30/0x30 [ 170.876259] ? lock_downgrade+0x8f0/0x8f0 [ 170.880422] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 170.885988] bio_alloc_bioset+0x39c/0x6f0 [ 170.890159] ? generic_make_request+0x1800/0x1800 [ 170.895037] ? bvec_alloc+0x2d0/0x2d0 [ 170.898836] ? check_same_owner+0x340/0x340 [ 170.903181] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 170.908197] ? guard_bio_eod+0x2b4/0x600 [ 170.912259] submit_bh_wbc+0x14b/0x790 [ 170.916164] write_dirty_buffer+0xba/0x150 [ 170.920406] jbd2_log_do_checkpoint+0xc08/0x1370 [ 170.925174] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 170.930894] ? lock_acquire+0x1e4/0x540 [ 170.934872] ? jbd2_journal_flush+0x144/0x540 [ 170.939383] ? kasan_check_read+0x11/0x20 [ 170.943535] ? do_raw_spin_unlock+0xa7/0x2f0 [ 170.947944] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 170.952533] ? kasan_check_write+0x14/0x20 [ 170.956771] ? do_raw_spin_lock+0xc1/0x200 [ 170.961011] jbd2_journal_flush+0x156/0x540 [ 170.965344] ext4_change_inode_journal_flag+0x230/0x3e0 [ 170.970706] ext4_ioctl_setflags+0x5fd/0x7d0 [ 170.975122] ? ext4_ioc_getfsmap+0xed0/0xed0 [ 170.979535] ? down_read+0x1d0/0x1d0 [ 170.983260] ? __mnt_want_write_file+0xa2/0xc0 [ 170.987864] ext4_ioctl+0xe41/0x4210 [ 170.991578] ? ext4_ioctl_group_add+0x560/0x560 [ 170.996256] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 171.001797] ? _kstrtoull+0x188/0x250 [ 171.005605] ? _parse_integer+0x190/0x190 [ 171.009753] ? lock_release+0xa30/0xa30 [ 171.013734] ? lock_acquire+0x1e4/0x540 [ 171.017712] ? __fget+0x4ac/0x740 [ 171.021209] ? lock_downgrade+0x8f0/0x8f0 [ 171.025384] ? lock_release+0xa30/0xa30 [ 171.029356] ? pid_task+0x115/0x200 [ 171.032981] ? find_vpid+0xf0/0xf0 [ 171.036534] ? __f_unlock_pos+0x19/0x20 [ 171.040508] ? __fget+0x4d5/0x740 [ 171.043957] ? ksys_dup3+0x690/0x690 [ 171.047687] ? kasan_check_write+0x14/0x20 [ 171.051919] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 171.056853] ? fsnotify+0xbac/0x14e0 [ 171.060562] ? vfs_write+0x2f3/0x560 [ 171.064270] ? ext4_ioctl_group_add+0x560/0x560 [ 171.068934] do_vfs_ioctl+0x1de/0x1720 [ 171.072811] ? fsnotify_first_mark+0x350/0x350 [ 171.077402] ? __fsnotify_parent+0xcc/0x420 [ 171.081731] ? ioctl_preallocate+0x300/0x300 [ 171.086153] ? __fget_light+0x2f7/0x440 [ 171.090122] ? fget_raw+0x20/0x20 [ 171.093581] ? __sb_end_write+0xac/0xe0 [ 171.097571] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 171.103135] ? fput+0x130/0x1a0 [ 171.106445] ? ksys_write+0x1ae/0x260 [ 171.110249] ? security_file_ioctl+0x94/0xc0 [ 171.114668] ksys_ioctl+0xa9/0xd0 [ 171.118131] __x64_sys_ioctl+0x73/0xb0 [ 171.122039] do_syscall_64+0x1b9/0x820 [ 171.125942] ? syscall_return_slowpath+0x5e0/0x5e0 [ 171.130885] ? syscall_return_slowpath+0x31d/0x5e0 [ 171.135855] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 171.140884] ? prepare_exit_to_usermode+0x291/0x3b0 [ 171.145930] ? perf_trace_sys_enter+0xb10/0xb10 [ 171.150630] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 171.155506] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 171.160691] RIP: 0033:0x455e29 [ 171.163875] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 171.183216] RSP: 002b:00007f91d383cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.190942] RAX: ffffffffffffffda RBX: 00007f91d383d6d4 RCX: 0000000000455e29 [ 171.198223] RDX: 0000000020000280 RSI: 0000000040086602 RDI: 0000000000000014 [ 171.205507] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 171.212895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 171.220170] R13: 00000000004bfc11 R14: 00000000004cf158 R15: 000000000000000e 11:39:50 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed0", 0x4a}], 0x1}, 0x0) 11:39:50 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/llc\x00') ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000100)="f75030852f") r1 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r4 = dup2(r2, r3) write$P9_RCLUNK(r4, &(0x7f0000000080)={0x7, 0x79, 0x1}, 0x7) dup2(r2, r1) 11:39:50 executing program 2 (fault-call:4 fault-nth:15): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(0xffffffffffffffff) 11:39:50 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1007}], 0x1) [ 171.338557] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 171.430513] FAULT_INJECTION: forcing a failure. [ 171.430513] name failslab, interval 1, probability 0, space 0, times 0 [ 171.441870] CPU: 1 PID: 9992 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 171.450203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.459615] Call Trace: [ 171.462227] dump_stack+0x1c9/0x2b4 [ 171.465976] ? dump_stack_print_info.cold.2+0x52/0x52 [ 171.471175] ? zap_class+0x740/0x740 [ 171.474917] should_fail.cold.4+0xa/0x11 [ 171.479003] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 171.484120] ? blk_exit_rl+0x80/0x80 [ 171.487839] ? save_stack+0xa9/0xd0 [ 171.491458] ? kmem_cache_alloc+0x12e/0x760 [ 171.495780] ? mempool_alloc_slab+0x44/0x60 [ 171.500097] ? bio_alloc_bioset+0x39c/0x6f0 [ 171.504412] ? submit_bh_wbc+0x14b/0x790 [ 171.508479] ? jbd2_log_do_checkpoint+0xc08/0x1370 [ 171.513416] ? ext4_change_inode_journal_flag+0x230/0x3e0 [ 171.518958] ? lock_acquire+0x1e4/0x540 [ 171.522947] ? generic_make_request+0x527/0x1800 [ 171.527705] ? lock_downgrade+0x8f0/0x8f0 [ 171.531865] ? lock_release+0xa30/0xa30 [ 171.535834] ? perf_trace_lock+0xde/0x920 [ 171.539997] ? trace_hardirqs_on+0x10/0x10 [ 171.544251] ? zap_class+0x740/0x740 [ 171.548061] ? generic_make_request+0x550/0x1800 [ 171.552827] __should_failslab+0x124/0x180 [ 171.557080] should_failslab+0x9/0x14 [ 171.560871] kmem_cache_alloc+0x47/0x760 [ 171.564934] ? rcu_note_context_switch+0x730/0x730 [ 171.569865] ? mempool_free+0x370/0x370 [ 171.573830] mempool_alloc_slab+0x44/0x60 [ 171.578080] mempool_alloc+0x193/0x4b0 [ 171.581968] ? mempool_destroy+0x30/0x30 [ 171.586048] ? lock_downgrade+0x8f0/0x8f0 [ 171.590208] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 171.595749] bio_alloc_bioset+0x39c/0x6f0 [ 171.599893] ? generic_make_request+0x1800/0x1800 [ 171.604753] ? bvec_alloc+0x2d0/0x2d0 [ 171.608558] ? check_same_owner+0x340/0x340 [ 171.612875] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 171.617899] ? guard_bio_eod+0x2b4/0x600 [ 171.621947] submit_bh_wbc+0x14b/0x790 [ 171.625824] write_dirty_buffer+0xba/0x150 [ 171.630055] jbd2_log_do_checkpoint+0xc08/0x1370 [ 171.634818] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 171.640524] ? lock_acquire+0x1e4/0x540 [ 171.644572] ? jbd2_journal_flush+0x144/0x540 [ 171.649060] ? kasan_check_read+0x11/0x20 [ 171.653196] ? do_raw_spin_unlock+0xa7/0x2f0 [ 171.657601] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 171.662171] ? kasan_check_write+0x14/0x20 [ 171.666391] ? do_raw_spin_lock+0xc1/0x200 [ 171.670616] jbd2_journal_flush+0x156/0x540 [ 171.674937] ext4_change_inode_journal_flag+0x230/0x3e0 [ 171.680318] ext4_ioctl_setflags+0x5fd/0x7d0 [ 171.684725] ? ext4_ioc_getfsmap+0xed0/0xed0 [ 171.689140] ? down_read+0x1d0/0x1d0 [ 171.692848] ? __mnt_want_write_file+0xa2/0xc0 [ 171.697427] ext4_ioctl+0xe41/0x4210 [ 171.701131] ? zap_class+0x740/0x740 [ 171.704841] ? ext4_ioctl_group_add+0x560/0x560 [ 171.709517] ? perf_trace_lock+0xde/0x920 [ 171.713663] ? _kstrtoull+0x188/0x250 [ 171.717449] ? _parse_integer+0x190/0x190 [ 171.721611] ? zap_class+0x740/0x740 [ 171.725332] ? lock_acquire+0x1e4/0x540 [ 171.729305] ? __fget+0x4ac/0x740 [ 171.732745] ? lock_downgrade+0x8f0/0x8f0 [ 171.736890] ? lock_release+0xa30/0xa30 [ 171.740873] ? zap_class+0x740/0x740 [ 171.744597] ? __f_unlock_pos+0x19/0x20 [ 171.748660] ? __fget+0x4d5/0x740 [ 171.752106] ? ksys_dup3+0x690/0x690 [ 171.755822] ? kasan_check_write+0x14/0x20 [ 171.760057] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 171.765004] ? fsnotify+0xbac/0x14e0 [ 171.768726] ? vfs_write+0x2f3/0x560 [ 171.772448] ? ext4_ioctl_group_add+0x560/0x560 [ 171.777117] do_vfs_ioctl+0x1de/0x1720 [ 171.780992] ? fsnotify_first_mark+0x350/0x350 [ 171.785567] ? ioctl_preallocate+0x300/0x300 [ 171.790049] ? __fget_light+0x2f7/0x440 [ 171.794018] ? fget_raw+0x20/0x20 [ 171.797482] ? __sb_end_write+0xac/0xe0 [ 171.801457] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 171.806993] ? fput+0x130/0x1a0 [ 171.810294] ? ksys_write+0x1ae/0x260 [ 171.814113] ? security_file_ioctl+0x94/0xc0 [ 171.818511] ksys_ioctl+0xa9/0xd0 [ 171.821954] __x64_sys_ioctl+0x73/0xb0 [ 171.825834] do_syscall_64+0x1b9/0x820 [ 171.829711] ? finish_task_switch+0x1d3/0x870 [ 171.834308] ? syscall_return_slowpath+0x5e0/0x5e0 [ 171.839261] ? syscall_return_slowpath+0x31d/0x5e0 [ 171.844229] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 171.849243] ? prepare_exit_to_usermode+0x291/0x3b0 [ 171.854266] ? perf_trace_sys_enter+0xb10/0xb10 [ 171.858978] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 171.863854] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 171.869066] RIP: 0033:0x455e29 [ 171.872294] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 171.891490] RSP: 002b:00007f91d383cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.899201] RAX: ffffffffffffffda RBX: 00007f91d383d6d4 RCX: 0000000000455e29 [ 171.906486] RDX: 0000000020000280 RSI: 0000000040086602 RDI: 0000000000000014 [ 171.913761] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 171.921025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 171.928306] R13: 00000000004bfc11 R14: 00000000004cf158 R15: 000000000000000f 11:39:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, &(0x7f00000011c0)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000240)={r4, 0x3}, &(0x7f0000000380)=0x8) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f00000002c0)="0f20d835080000000f22d8652e262e360f0010b983040000b8f5ffffffbaff7f00000f30660f3881880040000066b80e010f00d0d092f9ffffff0f20ddc744240000000000c74424020d000000c7442406000000000f0114240fc75b639ac70000008500", 0x64}], 0x1, 0x0, &(0x7f00000002c0), 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200008}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r6, 0x204, 0x70bd2a, 0x25dfdbfb, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x55a7e179}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x19}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40804) 11:39:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:51 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01c", 0x4b}], 0x1}, 0x0) 11:39:51 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x0, &(0x7f0000000300)={'veth0_to_team\x00', @ifru_ivalue=0x8}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22}}, 0x5, 0x7ff, 0x5, 0x80000001, 0x3}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r4}, &(0x7f0000000280)=0x8) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$sock_ifreq(r1, 0x8910, &(0x7f00000002c0)={'bridge0\x00', @ifru_ivalue=0xa0}) dup2(r2, r0) 11:39:51 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x6a}], 0x1) 11:39:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:39:51 executing program 2 (fault-call:4 fault-nth:16): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) [ 172.203182] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 172.218538] FAULT_INJECTION: forcing a failure. [ 172.218538] name failslab, interval 1, probability 0, space 0, times 0 [ 172.229913] CPU: 0 PID: 10017 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 172.238389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.247742] Call Trace: [ 172.250372] dump_stack+0x1c9/0x2b4 [ 172.254013] ? dump_stack_print_info.cold.2+0x52/0x52 [ 172.259207] should_fail.cold.4+0xa/0x11 [ 172.263265] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 172.268358] ? blk_exit_rl+0x80/0x80 [ 172.272064] ? save_stack+0xa9/0xd0 [ 172.275686] ? kmem_cache_alloc+0x12e/0x760 [ 172.280002] ? mempool_alloc_slab+0x44/0x60 [ 172.284319] ? mempool_alloc+0x193/0x4b0 [ 172.288378] ? bio_alloc_bioset+0x39c/0x6f0 [ 172.292706] ? lock_acquire+0x1e4/0x540 [ 172.296687] ? generic_make_request+0x527/0x1800 [ 172.301463] ? lock_downgrade+0x8f0/0x8f0 [ 172.305614] ? lock_release+0xa30/0xa30 [ 172.309583] ? lock_downgrade+0x8f0/0x8f0 [ 172.313721] ? finish_task_switch+0x18a/0x870 [ 172.318212] ? memset+0x31/0x40 [ 172.321503] ? generic_make_request+0x550/0x1800 [ 172.326259] __should_failslab+0x124/0x180 [ 172.330488] should_failslab+0x9/0x14 [ 172.334310] kmem_cache_alloc+0x47/0x760 [ 172.338372] ? rcu_note_context_switch+0x730/0x730 [ 172.343301] ? mempool_free+0x370/0x370 [ 172.347275] mempool_alloc_slab+0x44/0x60 [ 172.351484] mempool_alloc+0x193/0x4b0 [ 172.355376] ? mempool_destroy+0x30/0x30 [ 172.359438] ? lock_downgrade+0x8f0/0x8f0 [ 172.363593] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 172.369132] bio_alloc_bioset+0x39c/0x6f0 [ 172.373285] ? generic_make_request+0x1800/0x1800 [ 172.378121] ? bvec_alloc+0x2d0/0x2d0 [ 172.381928] ? check_same_owner+0x340/0x340 [ 172.386243] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 172.391250] ? guard_bio_eod+0x2b4/0x600 [ 172.395308] submit_bh_wbc+0x14b/0x790 [ 172.399200] write_dirty_buffer+0xba/0x150 [ 172.403430] jbd2_log_do_checkpoint+0xc08/0x1370 [ 172.408193] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 172.413910] ? lock_acquire+0x1e4/0x540 [ 172.417889] ? jbd2_journal_flush+0x144/0x540 [ 172.422385] ? kasan_check_read+0x11/0x20 [ 172.426525] ? do_raw_spin_unlock+0xa7/0x2f0 [ 172.430927] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 172.435516] ? kasan_check_write+0x14/0x20 [ 172.439748] ? do_raw_spin_lock+0xc1/0x200 [ 172.443990] jbd2_journal_flush+0x156/0x540 [ 172.448321] ext4_change_inode_journal_flag+0x230/0x3e0 [ 172.453856] ext4_ioctl_setflags+0x5fd/0x7d0 [ 172.458266] ? ext4_ioc_getfsmap+0xed0/0xed0 [ 172.462666] ? down_read+0x1d0/0x1d0 [ 172.466377] ? __mnt_want_write_file+0xa2/0xc0 [ 172.470957] ext4_ioctl+0xe41/0x4210 [ 172.474672] ? ext4_ioctl_group_add+0x560/0x560 [ 172.479346] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 172.484878] ? _parse_integer+0x190/0x190 [ 172.489026] ? lock_release+0xa30/0xa30 [ 172.493012] ? lock_acquire+0x1e4/0x540 [ 172.497067] ? __fget+0x4ac/0x740 [ 172.500511] ? lock_downgrade+0x8f0/0x8f0 [ 172.504665] ? lock_release+0xa30/0xa30 [ 172.508632] ? pid_task+0x115/0x200 [ 172.512254] ? find_vpid+0xf0/0xf0 [ 172.515889] ? __f_unlock_pos+0x19/0x20 [ 172.520339] ? __fget+0x4d5/0x740 [ 172.523806] ? ksys_dup3+0x690/0x690 [ 172.527536] ? kasan_check_write+0x14/0x20 [ 172.531766] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 172.536686] ? fsnotify+0xbac/0x14e0 [ 172.540394] ? vfs_write+0x2f3/0x560 [ 172.544102] ? ext4_ioctl_group_add+0x560/0x560 [ 172.548776] do_vfs_ioctl+0x1de/0x1720 [ 172.552657] ? fsnotify_first_mark+0x350/0x350 [ 172.557231] ? __fsnotify_parent+0xcc/0x420 [ 172.561562] ? ioctl_preallocate+0x300/0x300 [ 172.565969] ? __fget_light+0x2f7/0x440 [ 172.569954] ? fget_raw+0x20/0x20 [ 172.573405] ? __sb_end_write+0xac/0xe0 [ 172.577379] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 172.582921] ? fput+0x130/0x1a0 [ 172.586196] ? ksys_write+0x1ae/0x260 [ 172.590005] ? security_file_ioctl+0x94/0xc0 [ 172.594419] ksys_ioctl+0xa9/0xd0 [ 172.597880] __x64_sys_ioctl+0x73/0xb0 [ 172.601767] do_syscall_64+0x1b9/0x820 [ 172.605652] ? finish_task_switch+0x1d3/0x870 [ 172.610144] ? syscall_return_slowpath+0x5e0/0x5e0 [ 172.615153] ? syscall_return_slowpath+0x31d/0x5e0 [ 172.620076] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 172.625101] ? prepare_exit_to_usermode+0x291/0x3b0 [ 172.630113] ? perf_trace_sys_enter+0xb10/0xb10 [ 172.634790] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 172.639639] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 172.644819] RIP: 0033:0x455e29 [ 172.647995] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 172.667390] RSP: 002b:00007f91d383cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.675531] RAX: ffffffffffffffda RBX: 00007f91d383d6d4 RCX: 0000000000455e29 [ 172.682800] RDX: 0000000020000280 RSI: 0000000040086602 RDI: 0000000000000014 [ 172.690074] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 172.697349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 11:39:51 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x271}], 0x1) 11:39:51 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = dup2(r1, r0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r2}, 0x10) [ 172.704609] R13: 00000000004bfc11 R14: 00000000004cf158 R15: 0000000000000010 11:39:51 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01c", 0x4b}], 0x1}, 0x0) 11:39:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:39:51 executing program 2 (fault-call:4 fault-nth:17): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:52 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000280000000000069078ac14ffaae000000100004e20", @ANYRES32=0x42424242, @ANYRES32=0x42424242, @ANYBLOB="f26e9def87c81eb3eeb21a9b2f5ec8d9a9229ffbcdc693a3b271c73e6840f471317bcdf37e087fbacf7a24aac8089eb1fe97ae82ef595fc5fdff89a83f45ac06b15c907abde257190b5f60af7864669c5e0f54d3e2e49aca5c28277e3b23b41ac7bbe8194c7c"], 0x0) 11:39:52 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x16f}], 0x1) [ 172.823335] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 172.898343] FAULT_INJECTION: forcing a failure. [ 172.898343] name failslab, interval 1, probability 0, space 0, times 0 [ 172.909759] CPU: 0 PID: 10045 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 172.918178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.927547] Call Trace: [ 172.930207] dump_stack+0x1c9/0x2b4 [ 172.933858] ? dump_stack_print_info.cold.2+0x52/0x52 [ 172.939080] ? zap_class+0x740/0x740 [ 172.942807] should_fail.cold.4+0xa/0x11 [ 172.946877] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 172.951989] ? blk_exit_rl+0x80/0x80 [ 172.955723] ? save_stack+0xa9/0xd0 [ 172.959366] ? kmem_cache_alloc+0x12e/0x760 [ 172.963691] ? mempool_alloc_slab+0x44/0x60 [ 172.968033] ? bio_alloc_bioset+0x39c/0x6f0 [ 172.972369] ? lock_acquire+0x1e4/0x540 [ 172.976348] ? generic_make_request+0x527/0x1800 [ 172.981107] ? lock_downgrade+0x8f0/0x8f0 [ 172.985311] ? lock_release+0xa30/0xa30 [ 172.989324] ? memset+0x31/0x40 [ 172.992646] ? generic_make_request+0x550/0x1800 [ 172.997430] __should_failslab+0x124/0x180 [ 173.001720] should_failslab+0x9/0x14 [ 173.005653] kmem_cache_alloc+0x47/0x760 [ 173.009727] ? rcu_note_context_switch+0x730/0x730 [ 173.014696] ? mempool_free+0x370/0x370 [ 173.018703] mempool_alloc_slab+0x44/0x60 [ 173.022865] mempool_alloc+0x193/0x4b0 [ 173.026793] ? mempool_destroy+0x30/0x30 [ 173.030873] ? lock_downgrade+0x8f0/0x8f0 [ 173.035046] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 173.040625] bio_alloc_bioset+0x39c/0x6f0 [ 173.044792] ? generic_make_request+0x1800/0x1800 [ 173.049657] ? bvec_alloc+0x2d0/0x2d0 [ 173.053490] ? check_same_owner+0x340/0x340 [ 173.057838] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 173.062884] ? guard_bio_eod+0x2b4/0x600 [ 173.066955] submit_bh_wbc+0x14b/0x790 [ 173.070848] write_dirty_buffer+0xba/0x150 [ 173.075100] jbd2_log_do_checkpoint+0xc08/0x1370 [ 173.079888] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 173.085594] ? lock_acquire+0x1e4/0x540 [ 173.089559] ? jbd2_journal_flush+0x144/0x540 [ 173.094080] ? kasan_check_read+0x11/0x20 [ 173.098231] ? do_raw_spin_unlock+0xa7/0x2f0 [ 173.102649] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 173.107251] ? kasan_check_write+0x14/0x20 [ 173.111523] ? do_raw_spin_lock+0xc1/0x200 [ 173.115762] jbd2_journal_flush+0x156/0x540 [ 173.120095] ext4_change_inode_journal_flag+0x230/0x3e0 [ 173.125476] ext4_ioctl_setflags+0x5fd/0x7d0 [ 173.129895] ? ext4_ioc_getfsmap+0xed0/0xed0 [ 173.134301] ? down_read+0x1d0/0x1d0 [ 173.138021] ? __mnt_want_write_file+0xa2/0xc0 [ 173.142623] ext4_ioctl+0xe41/0x4210 [ 173.146339] ? zap_class+0x740/0x740 [ 173.150050] ? ext4_ioctl_group_add+0x560/0x560 [ 173.154728] ? perf_trace_lock+0xde/0x920 [ 173.158884] ? _kstrtoull+0x188/0x250 [ 173.162680] ? _parse_integer+0x190/0x190 [ 173.166854] ? zap_class+0x740/0x740 [ 173.170590] ? lock_acquire+0x1e4/0x540 [ 173.174557] ? __fget+0x4ac/0x740 [ 173.178008] ? lock_downgrade+0x8f0/0x8f0 [ 173.182179] ? lock_release+0xa30/0xa30 [ 173.186161] ? zap_class+0x740/0x740 [ 173.189907] ? __f_unlock_pos+0x19/0x20 [ 173.193880] ? __fget+0x4d5/0x740 [ 173.197330] ? ksys_dup3+0x690/0x690 [ 173.201057] ? kasan_check_write+0x14/0x20 [ 173.205303] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 173.210277] ? fsnotify+0xbac/0x14e0 [ 173.214017] ? vfs_write+0x2f3/0x560 [ 173.217739] ? ext4_ioctl_group_add+0x560/0x560 [ 173.222408] do_vfs_ioctl+0x1de/0x1720 [ 173.226296] ? fsnotify_first_mark+0x350/0x350 [ 173.230964] ? ioctl_preallocate+0x300/0x300 [ 173.235374] ? __fget_light+0x2f7/0x440 [ 173.239361] ? fget_raw+0x20/0x20 [ 173.242848] ? __sb_end_write+0xac/0xe0 [ 173.246823] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 173.252361] ? fput+0x130/0x1a0 [ 173.255636] ? ksys_write+0x1ae/0x260 [ 173.259450] ? security_file_ioctl+0x94/0xc0 [ 173.263855] ksys_ioctl+0xa9/0xd0 [ 173.267323] __x64_sys_ioctl+0x73/0xb0 [ 173.271210] do_syscall_64+0x1b9/0x820 [ 173.275087] ? finish_task_switch+0x1d3/0x870 [ 173.279586] ? syscall_return_slowpath+0x5e0/0x5e0 [ 173.284512] ? syscall_return_slowpath+0x31d/0x5e0 [ 173.289443] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 173.294469] ? prepare_exit_to_usermode+0x291/0x3b0 [ 173.299483] ? perf_trace_sys_enter+0xb10/0xb10 [ 173.304161] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 173.309027] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 173.314242] RIP: 0033:0x455e29 [ 173.317423] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 173.336862] RSP: 002b:00007f91d383cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.344577] RAX: ffffffffffffffda RBX: 00007f91d383d6d4 RCX: 0000000000455e29 [ 173.351853] RDX: 0000000020000280 RSI: 0000000040086602 RDI: 0000000000000014 [ 173.359205] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 173.366657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 173.373949] R13: 00000000004bfc11 R14: 00000000004cf158 R15: 0000000000000011 11:39:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:52 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x200000, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x600000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000002c0)=""/187) r2 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$getown(r3, 0x9) fcntl$setstatus(r3, 0x4, 0x2000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0xb40a}, r5, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000740)) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x4) dup2(r4, r2) 11:39:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:39:52 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01c", 0x4b}], 0x1}, 0x0) 11:39:52 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x313}], 0x1) 11:39:52 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0xffe, 0x80200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x183300, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@mcast2, 0x0}, &(0x7f00000000c0)=0x14) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0700000010000000bc0e76237a1cc800", @ANYRES64=r2, @ANYRES64=r3/1000+30000, @ANYRES64=r4, @ANYRES64=r5/1000+10000, @ANYBLOB="0400002001000000010000e005020000dd57112132b5d33c"], 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x1) 11:39:52 executing program 2 (fault-call:4 fault-nth:18): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) [ 173.667194] netlink: 'syz-executor6': attribute type 1 has an invalid length. 11:39:52 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1de}], 0x1) 11:39:52 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 11:39:52 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3, 0x8000) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r1 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r2, r1) 11:39:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') ppoll(&(0x7f0000000100)=[{r0, 0x40}, {r1, 0x8}, {r0, 0x400}], 0x3, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)={0x8}, 0x8) pread64(r1, &(0x7f0000000000)=""/218, 0xffffff6b, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/76, 0x4c}], 0x1, 0x0) [ 173.708237] FAULT_INJECTION: forcing a failure. [ 173.708237] name failslab, interval 1, probability 0, space 0, times 0 [ 173.719590] CPU: 1 PID: 10067 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 173.728079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.737441] Call Trace: [ 173.740074] dump_stack+0x1c9/0x2b4 [ 173.743915] ? dump_stack_print_info.cold.2+0x52/0x52 [ 173.749125] ? zap_class+0x740/0x740 [ 173.752867] should_fail.cold.4+0xa/0x11 11:39:52 executing program 6 (fault-call:3 fault-nth:0): r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 173.756944] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 173.762058] ? blk_exit_rl+0x80/0x80 [ 173.765807] ? save_stack+0xa9/0xd0 [ 173.769444] ? kmem_cache_alloc+0x12e/0x760 [ 173.773771] ? mempool_alloc_slab+0x44/0x60 [ 173.778086] ? bio_alloc_bioset+0x39c/0x6f0 [ 173.782408] ? submit_bh_wbc+0x14b/0x790 [ 173.786475] ? jbd2_log_do_checkpoint+0xc08/0x1370 [ 173.791429] ? ext4_change_inode_journal_flag+0x230/0x3e0 [ 173.796963] ? lock_acquire+0x1e4/0x540 [ 173.800929] ? generic_make_request+0x527/0x1800 [ 173.805680] ? lock_downgrade+0x8f0/0x8f0 [ 173.809850] ? lock_release+0xa30/0xa30 [ 173.813838] ? do_raw_spin_unlock+0xa7/0x2f0 [ 173.818267] ? generic_make_request+0x550/0x1800 [ 173.823065] __should_failslab+0x124/0x180 [ 173.827315] should_failslab+0x9/0x14 [ 173.831131] kmem_cache_alloc+0x47/0x760 [ 173.835187] ? rcu_note_context_switch+0x730/0x730 [ 173.840123] ? mempool_free+0x370/0x370 [ 173.844102] mempool_alloc_slab+0x44/0x60 [ 173.848246] mempool_alloc+0x193/0x4b0 [ 173.852135] ? mempool_destroy+0x30/0x30 [ 173.856206] ? lock_downgrade+0x8f0/0x8f0 [ 173.860356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 173.865911] bio_alloc_bioset+0x39c/0x6f0 [ 173.870065] ? generic_make_request+0x1800/0x1800 [ 173.874915] ? bvec_alloc+0x2d0/0x2d0 [ 173.878712] ? check_same_owner+0x340/0x340 [ 173.883055] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 173.888078] ? guard_bio_eod+0x2b4/0x600 [ 173.892133] submit_bh_wbc+0x14b/0x790 [ 173.896033] write_dirty_buffer+0xba/0x150 [ 173.900269] jbd2_log_do_checkpoint+0xc08/0x1370 [ 173.905041] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 173.910761] ? lock_acquire+0x1e4/0x540 [ 173.914727] ? jbd2_journal_flush+0x144/0x540 [ 173.919222] ? kasan_check_read+0x11/0x20 [ 173.923372] ? do_raw_spin_unlock+0xa7/0x2f0 [ 173.927789] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 173.932383] ? kasan_check_write+0x14/0x20 [ 173.936615] ? do_raw_spin_lock+0xc1/0x200 [ 173.940861] jbd2_journal_flush+0x156/0x540 [ 173.945181] ext4_change_inode_journal_flag+0x230/0x3e0 [ 173.950548] ext4_ioctl_setflags+0x5fd/0x7d0 [ 173.954962] ? ext4_ioc_getfsmap+0xed0/0xed0 [ 173.959356] ? down_read+0x1d0/0x1d0 [ 173.963070] ? __mnt_want_write_file+0xa2/0xc0 [ 173.967655] ext4_ioctl+0xe41/0x4210 [ 173.971372] ? zap_class+0x740/0x740 [ 173.975085] ? ext4_ioctl_group_add+0x560/0x560 [ 173.979846] ? perf_trace_lock+0xde/0x920 [ 173.984005] ? _kstrtoull+0x188/0x250 [ 173.987828] ? _parse_integer+0x190/0x190 [ 173.991988] ? zap_class+0x740/0x740 [ 173.995713] ? lock_acquire+0x1e4/0x540 [ 173.999765] ? __fget+0x4ac/0x740 [ 174.003213] ? lock_downgrade+0x8f0/0x8f0 [ 174.007363] ? lock_release+0xa30/0xa30 [ 174.011340] ? zap_class+0x740/0x740 [ 174.015053] ? __f_unlock_pos+0x19/0x20 [ 174.019037] ? __fget+0x4d5/0x740 [ 174.022498] ? ksys_dup3+0x690/0x690 [ 174.026217] ? kasan_check_write+0x14/0x20 [ 174.030450] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 174.035365] ? fsnotify+0xbac/0x14e0 [ 174.039089] ? vfs_write+0x2f3/0x560 [ 174.042793] ? ext4_ioctl_group_add+0x560/0x560 [ 174.047446] do_vfs_ioctl+0x1de/0x1720 [ 174.051318] ? fsnotify_first_mark+0x350/0x350 [ 174.055884] ? ioctl_preallocate+0x300/0x300 [ 174.060277] ? __fget_light+0x2f7/0x440 [ 174.064234] ? fget_raw+0x20/0x20 [ 174.067682] ? __sb_end_write+0xac/0xe0 [ 174.071651] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 174.077175] ? fput+0x130/0x1a0 [ 174.080438] ? ksys_write+0x1ae/0x260 [ 174.084240] ? security_file_ioctl+0x94/0xc0 [ 174.088646] ksys_ioctl+0xa9/0xd0 [ 174.092105] __x64_sys_ioctl+0x73/0xb0 [ 174.095982] do_syscall_64+0x1b9/0x820 [ 174.099858] ? finish_task_switch+0x1d3/0x870 [ 174.104340] ? syscall_return_slowpath+0x5e0/0x5e0 [ 174.109262] ? syscall_return_slowpath+0x31d/0x5e0 [ 174.114188] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 174.119202] ? prepare_exit_to_usermode+0x291/0x3b0 [ 174.124307] ? perf_trace_sys_enter+0xb10/0xb10 [ 174.128972] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 174.133809] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 174.138999] RIP: 0033:0x455e29 [ 174.142192] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 174.161368] RSP: 002b:00007f91d383cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.169074] RAX: ffffffffffffffda RBX: 00007f91d383d6d4 RCX: 0000000000455e29 [ 174.176349] RDX: 0000000020000280 RSI: 0000000040086602 RDI: 0000000000000014 [ 174.183622] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 174.190882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 174.198141] R13: 00000000004bfc11 R14: 00000000004cf158 R15: 0000000000000012 11:39:53 executing program 2 (fault-call:4 fault-nth:19): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) [ 174.276497] FAULT_INJECTION: forcing a failure. [ 174.276497] name failslab, interval 1, probability 0, space 0, times 0 [ 174.287899] CPU: 1 PID: 10100 Comm: syz-executor6 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 174.296320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.305691] Call Trace: [ 174.308293] dump_stack+0x1c9/0x2b4 [ 174.311942] ? dump_stack_print_info.cold.2+0x52/0x52 [ 174.317155] ? perf_trace_lock+0xde/0x920 [ 174.321332] should_fail.cold.4+0xa/0x11 11:39:53 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:53 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x7, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000140)={{0x2}, 0x0, [], {0x0, 0x1c9c380}}) 11:39:53 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x144}], 0x1) [ 174.325415] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 174.330541] ? zap_class+0x740/0x740 [ 174.334278] ? zap_class+0x740/0x740 [ 174.338016] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 174.343588] ? lock_acquire+0x1e4/0x540 [ 174.347575] ? fs_reclaim_acquire+0x20/0x20 [ 174.352530] ? lock_downgrade+0x8f0/0x8f0 [ 174.356700] ? release_sock+0x1ec/0x2c0 [ 174.360690] ? check_same_owner+0x340/0x340 [ 174.365023] ? lock_downgrade+0x8f0/0x8f0 [ 174.369186] ? rcu_note_context_switch+0x730/0x730 [ 174.374130] __should_failslab+0x124/0x180 [ 174.378379] should_failslab+0x9/0x14 [ 174.382197] kmem_cache_alloc_node+0x272/0x780 [ 174.386796] ? __local_bh_enable_ip+0x161/0x230 [ 174.391489] ? _raw_spin_unlock_bh+0x30/0x40 [ 174.395919] __alloc_skb+0x119/0x790 [ 174.399704] ? skb_scrub_packet+0x490/0x490 [ 174.404492] ? netlink_insert+0x15d/0x3f0 [ 174.408687] ? __netlink_insert+0x13d0/0x13d0 [ 174.413212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 174.418792] ? netlink_autobind.isra.34+0x23b/0x320 [ 174.423861] netlink_sendmsg+0xb29/0xfc0 [ 174.427946] ? netlink_unicast+0x760/0x760 [ 174.432208] ? move_addr_to_kernel.part.20+0x100/0x100 [ 174.437509] ? security_socket_sendmsg+0x94/0xc0 [ 174.442280] ? netlink_unicast+0x760/0x760 [ 174.446540] sock_sendmsg+0xd5/0x120 [ 174.450277] ___sys_sendmsg+0x7fd/0x930 [ 174.454295] ? copy_msghdr_from_user+0x580/0x580 [ 174.459062] ? __f_unlock_pos+0x19/0x20 [ 174.463056] ? lock_downgrade+0x8f0/0x8f0 [ 174.467221] ? proc_fail_nth_write+0x9e/0x210 [ 174.471734] ? __fget_light+0x2f7/0x440 [ 174.475727] ? lock_acquire+0x1e4/0x540 [ 174.479742] ? fget_raw+0x20/0x20 [ 174.483229] ? kasan_check_write+0x14/0x20 [ 174.487523] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 174.492479] ? fsnotify+0xbac/0x14e0 [ 174.496226] ? vfs_write+0x2f3/0x560 [ 174.499965] ? wait_for_completion+0x8d0/0x8d0 [ 174.504566] ? lock_release+0xa30/0xa30 [ 174.508576] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 174.514226] ? sockfd_lookup_light+0xc5/0x160 [ 174.518765] __sys_sendmsg+0x11d/0x290 [ 174.522778] ? __ia32_sys_shutdown+0x80/0x80 [ 174.527552] ? __sb_end_write+0xac/0xe0 [ 174.531543] ? fput+0x130/0x1a0 [ 174.534837] ? ksys_write+0x1ae/0x260 [ 174.538660] ? syscall_slow_exit_work+0x500/0x500 [ 174.543533] __x64_sys_sendmsg+0x78/0xb0 [ 174.547615] do_syscall_64+0x1b9/0x820 [ 174.551517] ? finish_task_switch+0x1d3/0x870 [ 174.556013] ? syscall_return_slowpath+0x5e0/0x5e0 [ 174.560961] ? syscall_return_slowpath+0x31d/0x5e0 [ 174.565907] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 174.570928] ? prepare_exit_to_usermode+0x291/0x3b0 [ 174.575958] ? perf_trace_sys_enter+0xb10/0xb10 [ 174.580636] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 174.585496] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 174.590703] RIP: 0033:0x455e29 [ 174.593901] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 174.613202] RSP: 002b:00007fdc04eeac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.620908] RAX: ffffffffffffffda RBX: 00007fdc04eeb6d4 RCX: 0000000000455e29 11:39:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/16) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x40004) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000), 0x4) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000000c0), 0x10) 11:39:53 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x503000) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) write$P9_RMKNOD(r2, &(0x7f0000000140)={0x14, 0x13, 0x1, {0x0, 0x1, 0x7}}, 0x14) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) 11:39:53 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1048}], 0x1) 11:39:53 executing program 6 (fault-call:3 fault-nth:1): r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 174.628169] RDX: 0000000000000000 RSI: 0000000020011fc8 RDI: 0000000000000014 [ 174.635427] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 174.643123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 174.650394] R13: 00000000004c1165 R14: 00000000004d15d0 R15: 0000000000000000 [ 174.686917] FAULT_INJECTION: forcing a failure. [ 174.686917] name failslab, interval 1, probability 0, space 0, times 0 [ 174.698274] CPU: 1 PID: 10106 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 174.706695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.716045] Call Trace: [ 174.718685] dump_stack+0x1c9/0x2b4 [ 174.722333] ? dump_stack_print_info.cold.2+0x52/0x52 [ 174.727520] ? finish_task_switch+0x1d3/0x870 [ 174.732100] should_fail.cold.4+0xa/0x11 [ 174.736163] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 174.741263] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 174.746294] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 174.751074] ? lock_acquire+0x1e4/0x540 [ 174.755048] ? is_bpf_text_address+0xae/0x170 [ 174.759636] ? lock_downgrade+0x8f0/0x8f0 [ 174.763809] ? lock_release+0xa30/0xa30 [ 174.767792] ? trace_hardirqs_on+0x10/0x10 [ 174.772032] ? rcu_is_watching+0x8c/0x150 [ 174.776180] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 174.780842] ? is_bpf_text_address+0xd7/0x170 [ 174.785348] ? kernel_text_address+0x79/0xf0 [ 174.789763] ? __kernel_text_address+0xd/0x40 [ 174.794254] ? unwind_get_return_address+0x61/0xa0 [ 174.799198] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 174.804052] __should_failslab+0x124/0x180 [ 174.808297] should_failslab+0x9/0x14 [ 174.812098] kmem_cache_alloc+0x47/0x760 [ 174.816206] ? rcu_note_context_switch+0x730/0x730 [ 174.821137] ? save_stack+0x43/0xd0 [ 174.824762] ? __kasan_slab_free+0x11a/0x170 [ 174.829168] ? mempool_free+0x370/0x370 [ 174.833155] mempool_alloc_slab+0x44/0x60 [ 174.837310] mempool_alloc+0x193/0x4b0 [ 174.841217] ? kasan_check_read+0x11/0x20 [ 174.845359] ? mempool_destroy+0x30/0x30 [ 174.849424] ? lock_acquire+0x1e4/0x540 [ 174.853393] ? jbd2_journal_get_log_tail+0x18f/0x550 [ 174.858491] ? lock_downgrade+0x8f0/0x8f0 [ 174.862649] bio_alloc_bioset+0x39c/0x6f0 [ 174.866819] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 174.871403] ? bvec_alloc+0x2d0/0x2d0 [ 174.875195] ? kasan_check_write+0x14/0x20 [ 174.879416] ? kasan_check_write+0x14/0x20 [ 174.883639] ? do_raw_read_unlock+0x3f/0x60 [ 174.887948] blkdev_issue_flush+0xd1/0x300 [ 174.892173] jbd2_cleanup_journal_tail+0x230/0x2c0 [ 174.897178] ? jbd2_journal_skip_recovery.cold.13+0x4d/0x4d [ 174.902883] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 174.907737] ? kasan_check_write+0x14/0x20 [ 174.911959] ? do_raw_spin_lock+0xc1/0x200 [ 174.916207] jbd2_log_do_checkpoint+0xa19/0x1370 [ 174.920966] ? __jbd2_journal_remove_checkpoint+0x8c0/0x8c0 [ 174.926666] ? lock_acquire+0x1e4/0x540 [ 174.930628] ? jbd2_journal_flush+0x144/0x540 [ 174.935131] ? kasan_check_read+0x11/0x20 [ 174.939284] ? do_raw_spin_unlock+0xa7/0x2f0 [ 174.943688] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 174.948263] ? kasan_check_write+0x14/0x20 [ 174.952496] ? do_raw_spin_lock+0xc1/0x200 [ 174.956734] jbd2_journal_flush+0x156/0x540 [ 174.961063] ext4_change_inode_journal_flag+0x230/0x3e0 [ 174.966424] ext4_ioctl_setflags+0x5fd/0x7d0 [ 174.970850] ? ext4_ioc_getfsmap+0xed0/0xed0 [ 174.975280] ? down_read+0x1d0/0x1d0 [ 174.979019] ? __mnt_want_write_file+0xa2/0xc0 [ 174.983616] ext4_ioctl+0xe41/0x4210 [ 174.987357] ? ext4_ioctl_group_add+0x560/0x560 [ 174.992033] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 174.997602] ? _parse_integer+0x190/0x190 [ 175.001746] ? lock_release+0xa30/0xa30 [ 175.005716] ? lock_acquire+0x1e4/0x540 [ 175.009679] ? __fget+0x4ac/0x740 [ 175.013122] ? lock_downgrade+0x8f0/0x8f0 [ 175.017261] ? lock_release+0xa30/0xa30 [ 175.021222] ? pid_task+0x115/0x200 [ 175.024842] ? find_vpid+0xf0/0xf0 [ 175.028384] ? __f_unlock_pos+0x19/0x20 [ 175.032371] ? __fget+0x4d5/0x740 [ 175.035822] ? ksys_dup3+0x690/0x690 [ 175.039527] ? kasan_check_write+0x14/0x20 [ 175.043770] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 175.048708] ? fsnotify+0xbac/0x14e0 [ 175.052431] ? vfs_write+0x2f3/0x560 [ 175.056167] ? ext4_ioctl_group_add+0x560/0x560 [ 175.060836] do_vfs_ioctl+0x1de/0x1720 [ 175.064714] ? fsnotify_first_mark+0x350/0x350 [ 175.069295] ? __fsnotify_parent+0xcc/0x420 [ 175.073631] ? ioctl_preallocate+0x300/0x300 [ 175.078066] ? __fget_light+0x2f7/0x440 [ 175.082034] ? fget_raw+0x20/0x20 [ 175.085478] ? __sb_end_write+0xac/0xe0 [ 175.089446] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 175.094975] ? fput+0x130/0x1a0 [ 175.098251] ? ksys_write+0x1ae/0x260 [ 175.102061] ? security_file_ioctl+0x94/0xc0 [ 175.106490] ksys_ioctl+0xa9/0xd0 [ 175.109942] __x64_sys_ioctl+0x73/0xb0 [ 175.113826] do_syscall_64+0x1b9/0x820 [ 175.117711] ? finish_task_switch+0x1d3/0x870 [ 175.122214] ? syscall_return_slowpath+0x5e0/0x5e0 [ 175.127143] ? syscall_return_slowpath+0x31d/0x5e0 [ 175.132170] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 175.137189] ? prepare_exit_to_usermode+0x291/0x3b0 [ 175.142193] ? perf_trace_sys_enter+0xb10/0xb10 [ 175.146849] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 175.151709] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 175.156902] RIP: 0033:0x455e29 [ 175.160075] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 175.179288] RSP: 002b:00007f91d383cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.187020] RAX: ffffffffffffffda RBX: 00007f91d383d6d4 RCX: 0000000000455e29 [ 175.194290] RDX: 0000000020000280 RSI: 0000000040086602 RDI: 0000000000000014 [ 175.201548] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 175.208833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 175.216097] R13: 00000000004bfc11 R14: 00000000004cf158 R15: 0000000000000013 11:39:54 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) [ 175.260191] FAULT_INJECTION: forcing a failure. [ 175.260191] name failslab, interval 1, probability 0, space 0, times 0 [ 175.271589] CPU: 0 PID: 10134 Comm: syz-executor6 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 175.280171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.289536] Call Trace: [ 175.292145] dump_stack+0x1c9/0x2b4 [ 175.295785] ? dump_stack_print_info.cold.2+0x52/0x52 [ 175.300973] should_fail.cold.4+0xa/0x11 [ 175.305027] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 175.310121] ? __save_stack_trace+0x8d/0xf0 [ 175.314458] ? save_stack+0xa9/0xd0 [ 175.318081] ? save_stack+0x43/0xd0 [ 175.321698] ? kasan_slab_alloc+0x12/0x20 [ 175.325833] ? kmem_cache_alloc_node+0x144/0x780 [ 175.330664] ? __alloc_skb+0x119/0x790 [ 175.334561] ? netlink_sendmsg+0xb29/0xfc0 [ 175.338787] ? sock_sendmsg+0xd5/0x120 [ 175.342663] ? ___sys_sendmsg+0x7fd/0x930 [ 175.346796] ? __sys_sendmsg+0x11d/0x290 [ 175.350851] ? do_syscall_64+0x1b9/0x820 [ 175.354904] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 175.360260] ? lock_acquire+0x1e4/0x540 [ 175.364221] ? fs_reclaim_acquire+0x20/0x20 [ 175.368531] ? lock_downgrade+0x8f0/0x8f0 [ 175.372694] ? check_same_owner+0x340/0x340 [ 175.377007] ? lock_downgrade+0x8f0/0x8f0 [ 175.381150] ? rcu_note_context_switch+0x730/0x730 [ 175.386079] __should_failslab+0x124/0x180 [ 175.390307] should_failslab+0x9/0x14 [ 175.394115] kmem_cache_alloc_node_trace+0x26f/0x770 [ 175.399222] ? kasan_kmalloc+0xc4/0xe0 [ 175.403122] __kmalloc_node_track_caller+0x33/0x70 [ 175.408047] __kmalloc_reserve.isra.41+0x3a/0xe0 [ 175.412805] __alloc_skb+0x155/0x790 [ 175.416530] ? skb_scrub_packet+0x490/0x490 [ 175.420851] ? netlink_insert+0x15d/0x3f0 [ 175.424992] ? __netlink_insert+0x13d0/0x13d0 [ 175.429484] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 175.435014] ? netlink_autobind.isra.34+0x23b/0x320 [ 175.440029] netlink_sendmsg+0xb29/0xfc0 [ 175.444083] ? netlink_unicast+0x760/0x760 [ 175.448311] ? move_addr_to_kernel.part.20+0x100/0x100 [ 175.453581] ? security_socket_sendmsg+0x94/0xc0 [ 175.458331] ? netlink_unicast+0x760/0x760 [ 175.462555] sock_sendmsg+0xd5/0x120 [ 175.466259] ___sys_sendmsg+0x7fd/0x930 [ 175.470221] ? find_vpid+0xf0/0xf0 [ 175.473769] ? copy_msghdr_from_user+0x580/0x580 [ 175.478512] ? __f_unlock_pos+0x19/0x20 [ 175.482476] ? lock_downgrade+0x8f0/0x8f0 [ 175.486630] ? proc_fail_nth_write+0x9e/0x210 [ 175.491125] ? __fget_light+0x2f7/0x440 [ 175.495088] ? lock_acquire+0x1e4/0x540 [ 175.499055] ? fget_raw+0x20/0x20 [ 175.502499] ? kasan_check_write+0x14/0x20 [ 175.506720] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 175.511634] ? fsnotify+0xbac/0x14e0 [ 175.515337] ? vfs_write+0x2f3/0x560 [ 175.519047] ? wait_for_completion+0x8d0/0x8d0 [ 175.523619] ? lock_release+0xa30/0xa30 [ 175.527590] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 175.533117] ? sockfd_lookup_light+0xc5/0x160 [ 175.537600] __sys_sendmsg+0x11d/0x290 [ 175.541474] ? __ia32_sys_shutdown+0x80/0x80 [ 175.545870] ? __sb_end_write+0xac/0xe0 [ 175.549852] ? fput+0x130/0x1a0 [ 175.553119] ? ksys_write+0x1ae/0x260 [ 175.556915] __x64_sys_sendmsg+0x78/0xb0 [ 175.560965] do_syscall_64+0x1b9/0x820 [ 175.564836] ? finish_task_switch+0x1d3/0x870 [ 175.569319] ? syscall_return_slowpath+0x5e0/0x5e0 [ 175.574239] ? syscall_return_slowpath+0x31d/0x5e0 [ 175.579159] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 175.584168] ? prepare_exit_to_usermode+0x291/0x3b0 [ 175.589179] ? perf_trace_sys_enter+0xb10/0xb10 [ 175.593841] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 175.598677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 175.603857] RIP: 0033:0x455e29 [ 175.607029] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 175.626256] RSP: 002b:00007fdc04eeac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.633955] RAX: ffffffffffffffda RBX: 00007fdc04eeb6d4 RCX: 0000000000455e29 [ 175.641224] RDX: 0000000000000000 RSI: 0000000020011fc8 RDI: 0000000000000014 [ 175.648480] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 11:39:54 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 11:39:54 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) [ 175.655746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 175.662999] R13: 00000000004c1165 R14: 00000000004d15d0 R15: 0000000000000001 11:39:54 executing program 6 (fault-call:3 fault-nth:2): r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:54 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x9b}], 0x1) 11:39:54 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x84) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f00000000c0)=[0x0, 0x2]) dup2(r2, r0) sync_file_range(r1, 0x6, 0x5, 0x0) [ 175.755850] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 175.770180] FAULT_INJECTION: forcing a failure. [ 175.770180] name failslab, interval 1, probability 0, space 0, times 0 [ 175.781558] CPU: 1 PID: 10154 Comm: syz-executor6 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 175.789971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.799362] Call Trace: [ 175.801988] dump_stack+0x1c9/0x2b4 11:39:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) [ 175.805642] ? dump_stack_print_info.cold.2+0x52/0x52 [ 175.810919] ? perf_trace_lock+0xde/0x920 [ 175.815092] should_fail.cold.4+0xa/0x11 [ 175.819188] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 175.824311] ? zap_class+0x740/0x740 [ 175.828042] ? nfnetlink_rcv_msg+0xd97/0x1070 [ 175.832570] ? do_raw_spin_unlock+0xa7/0x2f0 [ 175.836999] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 175.841603] ? do_raw_spin_lock+0x200/0x200 [ 175.845963] ? lock_acquire+0x1e4/0x540 [ 175.849961] ? fs_reclaim_acquire+0x20/0x20 11:39:55 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(r1, r0) ioctl$FICLONE(r2, 0x40049409, r2) 11:39:55 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x4001, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000200)=0x0) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r1, &(0x7f0000000380)={r3, r5, 0x3}) getsockname(r1, &(0x7f0000000080)=@ethernet={0x0, @broadcast}, &(0x7f0000000100)=0x80) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') syz_open_dev$amidi(&(0x7f00000003c0)='/dev/amidi#\x00', 0x3, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="7a4719d395f534b5a06b4b144e892fe7582a69c45111bcc90f7fbd9f1f484f5a3b4468dafec6b25bd59e79787f4099a77355d4b057ecb48a94dcc089447ce62c9eb38b4e3b09623a61453d5479363858cf87c7027cebd220f7166e192f0e599b592479", @ANYRES16=r6, @ANYBLOB="200026bd7000fcdbdf250d0000001c000200080005000600000008000300020000000800070000100000"], 0x30}, 0x1}, 0x4000000) dup2(r2, r0) [ 175.854333] ? lock_downgrade+0x8f0/0x8f0 [ 175.858551] ? check_same_owner+0x340/0x340 [ 175.862905] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 175.868470] ? ip_set_dump+0x117/0x2e0 [ 175.872491] ? rcu_note_context_switch+0x730/0x730 [ 175.877466] ? call_ad+0x670/0x670 [ 175.881047] __should_failslab+0x124/0x180 [ 175.885311] should_failslab+0x9/0x14 [ 175.889130] kmem_cache_alloc_node+0x272/0x780 [ 175.893739] ? __asan_poison_stack_memory+0x37/0x40 [ 175.898785] ? nfnetlink_rcv_msg+0x67c/0x1070 11:39:55 executing program 4: syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000000c0)={0x6, 0xc, [0x10001, 0x8, 0xffff]}) dup2(r0, r0) [ 175.903307] __alloc_skb+0x119/0x790 [ 175.907048] ? skb_scrub_packet+0x490/0x490 [ 175.911395] ? nfnetlink_bind+0x3b0/0x3b0 [ 175.915569] ? lock_acquire+0x1e4/0x540 [ 175.919570] ? __netlink_lookup+0x5b8/0xab0 [ 175.923924] ? perf_trace_lock+0xde/0x920 [ 175.928116] ? lock_downgrade+0x8f0/0x8f0 [ 175.932292] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 175.937334] netlink_ack+0x2df/0xbe0 [ 175.941080] ? netlink_sendmsg+0xfc0/0xfc0 [ 175.945346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 175.950914] netlink_rcv_skb+0x35d/0x440 [ 175.954999] ? nfnetlink_bind+0x3b0/0x3b0 [ 175.959174] ? netlink_ack+0xbe0/0xbe0 [ 175.963069] ? __netlink_ns_capable+0x100/0x130 [ 175.967741] nfnetlink_rcv+0x1c0/0x4d0 [ 175.971628] ? nfnetlink_rcv_batch+0x1910/0x1910 [ 175.976376] ? kasan_check_write+0x14/0x20 [ 175.980615] netlink_unicast+0x5a0/0x760 [ 175.984669] ? netlink_attachskb+0x9a0/0x9a0 [ 175.989077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 175.994613] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 175.999631] netlink_sendmsg+0xa18/0xfc0 [ 176.003698] ? netlink_unicast+0x760/0x760 [ 176.007928] ? move_addr_to_kernel.part.20+0x100/0x100 [ 176.013206] ? security_socket_sendmsg+0x94/0xc0 [ 176.017952] ? netlink_unicast+0x760/0x760 [ 176.022181] sock_sendmsg+0xd5/0x120 [ 176.025915] ___sys_sendmsg+0x7fd/0x930 [ 176.029903] ? copy_msghdr_from_user+0x580/0x580 [ 176.034671] ? __f_unlock_pos+0x19/0x20 [ 176.038646] ? lock_downgrade+0x8f0/0x8f0 [ 176.042791] ? proc_fail_nth_write+0x9e/0x210 [ 176.047283] ? __fget_light+0x2f7/0x440 [ 176.051262] ? lock_acquire+0x1e4/0x540 [ 176.055237] ? fget_raw+0x20/0x20 [ 176.058686] ? kasan_check_write+0x14/0x20 [ 176.062935] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 176.067882] ? fsnotify+0xbac/0x14e0 [ 176.071595] ? vfs_write+0x2f3/0x560 [ 176.075311] ? wait_for_completion+0x8d0/0x8d0 [ 176.079907] ? lock_release+0xa30/0xa30 [ 176.083897] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 176.089445] ? sockfd_lookup_light+0xc5/0x160 [ 176.093946] __sys_sendmsg+0x11d/0x290 [ 176.097837] ? __ia32_sys_shutdown+0x80/0x80 [ 176.102245] ? __sb_end_write+0xac/0xe0 [ 176.106234] ? fput+0x130/0x1a0 [ 176.109521] ? ksys_write+0x1ae/0x260 [ 176.113324] ? syscall_slow_exit_work+0x500/0x500 [ 176.118169] __x64_sys_sendmsg+0x78/0xb0 [ 176.122232] do_syscall_64+0x1b9/0x820 [ 176.126109] ? finish_task_switch+0x1d3/0x870 [ 176.130611] ? syscall_return_slowpath+0x5e0/0x5e0 [ 176.135539] ? syscall_return_slowpath+0x31d/0x5e0 [ 176.140466] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 176.145486] ? prepare_exit_to_usermode+0x291/0x3b0 [ 176.150530] ? perf_trace_sys_enter+0xb10/0xb10 [ 176.155188] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 176.160035] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 176.165223] RIP: 0033:0x455e29 [ 176.168408] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 176.187812] RSP: 002b:00007fdc04eeac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.195516] RAX: ffffffffffffffda RBX: 00007fdc04eeb6d4 RCX: 0000000000455e29 11:39:55 executing program 6 (fault-call:3 fault-nth:3): r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 176.202785] RDX: 0000000000000000 RSI: 0000000020011fc8 RDI: 0000000000000014 [ 176.210045] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 176.217304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 176.224562] R13: 00000000004c1165 R14: 00000000004d15d0 R15: 0000000000000002 [ 176.233190] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:55 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x197}], 0x1) 11:39:55 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 11:39:55 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x4) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = dup2(r1, r0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) rt_sigqueueinfo(r3, 0x29, &(0x7f0000000100)={0x9, 0x8, 0x7f, 0x80000001}) [ 176.302870] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 176.360116] FAULT_INJECTION: forcing a failure. [ 176.360116] name failslab, interval 1, probability 0, space 0, times 0 [ 176.371437] CPU: 0 PID: 10181 Comm: syz-executor6 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 176.379853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.389226] Call Trace: [ 176.391835] dump_stack+0x1c9/0x2b4 [ 176.395495] ? dump_stack_print_info.cold.2+0x52/0x52 [ 176.400712] ? perf_trace_lock+0xde/0x920 [ 176.404901] should_fail.cold.4+0xa/0x11 11:39:55 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40305828, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:55 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000700)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x84) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f00000000c0)=[0x0, 0x2]) dup2(r2, r0) sync_file_range(r1, 0x6, 0x5, 0x0) [ 176.408961] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 176.414081] ? __save_stack_trace+0x8d/0xf0 [ 176.418435] ? save_stack+0x43/0xd0 [ 176.422086] ? kasan_slab_alloc+0x12/0x20 [ 176.426292] ? kmem_cache_alloc_node+0x144/0x780 [ 176.431069] ? netlink_ack+0x2df/0xbe0 [ 176.434988] ? netlink_rcv_skb+0x35d/0x440 [ 176.439245] ? nfnetlink_rcv+0x1c0/0x4d0 [ 176.443329] ? netlink_unicast+0x5a0/0x760 [ 176.447581] ? sock_sendmsg+0xd5/0x120 [ 176.451496] ? lock_acquire+0x1e4/0x540 [ 176.455489] ? fs_reclaim_acquire+0x20/0x20 [ 176.459827] ? lock_downgrade+0x8f0/0x8f0 [ 176.464002] ? check_same_owner+0x340/0x340 [ 176.468341] ? lock_downgrade+0x8f0/0x8f0 [ 176.472503] ? rcu_note_context_switch+0x730/0x730 [ 176.477450] __should_failslab+0x124/0x180 [ 176.481704] should_failslab+0x9/0x14 [ 176.485522] kmem_cache_alloc_node_trace+0x26f/0x770 [ 176.491247] ? kasan_kmalloc+0xc4/0xe0 [ 176.495156] __kmalloc_node_track_caller+0x33/0x70 [ 176.500106] __kmalloc_reserve.isra.41+0x3a/0xe0 [ 176.504905] __alloc_skb+0x155/0x790 [ 176.508631] ? skb_scrub_packet+0x490/0x490 [ 176.512966] ? nfnetlink_bind+0x3b0/0x3b0 [ 176.517512] ? lock_acquire+0x1e4/0x540 [ 176.521507] ? __netlink_lookup+0x5b8/0xab0 [ 176.525853] ? lock_downgrade+0x8f0/0x8f0 [ 176.530000] ? __alloc_skb+0x155/0x790 [ 176.533885] ? lock_release+0xa30/0xa30 [ 176.538050] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 176.543415] ? lock_downgrade+0x8f0/0x8f0 [ 176.547552] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 176.552742] netlink_ack+0x2df/0xbe0 [ 176.556462] ? __netlink_lookup+0x5e1/0xab0 [ 176.560791] ? netlink_sendmsg+0xfc0/0xfc0 [ 176.565027] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 176.570585] netlink_rcv_skb+0x35d/0x440 [ 176.574647] ? nfnetlink_bind+0x3b0/0x3b0 [ 176.578826] ? netlink_ack+0xbe0/0xbe0 [ 176.582725] ? __netlink_ns_capable+0x100/0x130 [ 176.587399] nfnetlink_rcv+0x1c0/0x4d0 [ 176.591287] ? nfnetlink_rcv_batch+0x1910/0x1910 [ 176.596053] ? kasan_check_write+0x14/0x20 [ 176.600308] netlink_unicast+0x5a0/0x760 [ 176.604362] ? netlink_attachskb+0x9a0/0x9a0 [ 176.608758] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 176.614394] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 176.619408] netlink_sendmsg+0xa18/0xfc0 [ 176.623468] ? netlink_unicast+0x760/0x760 [ 176.627709] ? move_addr_to_kernel.part.20+0x100/0x100 [ 176.633010] ? security_socket_sendmsg+0x94/0xc0 [ 176.638174] ? netlink_unicast+0x760/0x760 [ 176.642511] sock_sendmsg+0xd5/0x120 [ 176.646237] ___sys_sendmsg+0x7fd/0x930 [ 176.650213] ? find_vpid+0xf0/0xf0 [ 176.653752] ? copy_msghdr_from_user+0x580/0x580 [ 176.659038] ? __f_unlock_pos+0x19/0x20 [ 176.663029] ? lock_downgrade+0x8f0/0x8f0 [ 176.667632] ? proc_fail_nth_write+0x9e/0x210 [ 176.672141] ? __fget_light+0x2f7/0x440 [ 176.676124] ? lock_acquire+0x1e4/0x540 [ 176.680102] ? fget_raw+0x20/0x20 [ 176.683568] ? kasan_check_write+0x14/0x20 [ 176.687825] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 176.692768] ? fsnotify+0xbac/0x14e0 [ 176.696473] ? vfs_write+0x2f3/0x560 [ 176.700204] ? wait_for_completion+0x8d0/0x8d0 [ 176.704874] ? lock_release+0xa30/0xa30 [ 176.708868] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 176.714410] ? sockfd_lookup_light+0xc5/0x160 [ 176.718907] __sys_sendmsg+0x11d/0x290 [ 176.722793] ? __ia32_sys_shutdown+0x80/0x80 [ 176.727470] ? __sb_end_write+0xac/0xe0 [ 176.731536] ? fput+0x130/0x1a0 [ 176.734819] ? ksys_write+0x1ae/0x260 [ 176.739271] __x64_sys_sendmsg+0x78/0xb0 [ 176.743343] do_syscall_64+0x1b9/0x820 [ 176.747240] ? finish_task_switch+0x1d3/0x870 [ 176.752274] ? syscall_return_slowpath+0x5e0/0x5e0 [ 176.757219] ? syscall_return_slowpath+0x31d/0x5e0 [ 176.762164] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 176.767205] ? prepare_exit_to_usermode+0x291/0x3b0 [ 176.772214] ? perf_trace_sys_enter+0xb10/0xb10 [ 176.776901] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 176.781775] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 176.786957] RIP: 0033:0x455e29 [ 176.790132] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 11:39:56 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 11:39:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x4000, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x0, 0x7fffffff, 0x40, 0x0, 0xfffffffffffffffa, 0x1, 0x8, 0x5, 0x3dff}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="b8010000000f01d90f22db0f20d835080000000f22d8f26db9004d564bb84b000000ba000000000f30ea00300000a6000fc72d0000000026f30f01c966b850008ee0b8070000000f23d00f21f8353000000a0f23f8", 0x55}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:39:56 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x13b}], 0x1) 11:39:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:56 executing program 6 (fault-call:3 fault-nth:4): r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 176.809345] RSP: 002b:00007fdc04eeac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.817055] RAX: ffffffffffffffda RBX: 00007fdc04eeb6d4 RCX: 0000000000455e29 [ 176.824320] RDX: 0000000000000000 RSI: 0000000020011fc8 RDI: 0000000000000014 [ 176.831595] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 176.838974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 176.846250] R13: 00000000004c1165 R14: 00000000004d15d0 R15: 0000000000000003 [ 176.853710] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:56 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x400c6615, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:56 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x176}], 0x1) [ 176.922576] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 176.965182] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. [ 176.982190] FAULT_INJECTION: forcing a failure. [ 176.982190] name failslab, interval 1, probability 0, space 0, times 0 [ 176.993887] CPU: 1 PID: 10219 Comm: syz-executor6 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 177.002304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.011662] Call Trace: [ 177.014266] dump_stack+0x1c9/0x2b4 [ 177.017898] ? dump_stack_print_info.cold.2+0x52/0x52 [ 177.023083] ? perf_trace_lock+0xde/0x920 [ 177.027222] should_fail.cold.4+0xa/0x11 [ 177.031284] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 177.036375] ? zap_class+0x740/0x740 [ 177.040080] ? ___ratelimit+0x36f/0x655 [ 177.044044] ? nfnetlink_rcv_msg+0xed7/0x1070 [ 177.048536] ? kasan_check_read+0x11/0x20 [ 177.052677] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 177.058655] ? lock_acquire+0x1e4/0x540 [ 177.062978] ? fs_reclaim_acquire+0x20/0x20 [ 177.067298] ? lock_downgrade+0x8f0/0x8f0 [ 177.071441] ? check_same_owner+0x340/0x340 [ 177.075774] ? nla_parse+0x32b/0x4e0 [ 177.079487] ? lock_release+0xa30/0xa30 [ 177.083461] ? rcu_note_context_switch+0x730/0x730 [ 177.088382] __should_failslab+0x124/0x180 [ 177.092619] should_failslab+0x9/0x14 [ 177.096412] kmem_cache_alloc_node+0x272/0x780 [ 177.100992] ? __asan_poison_stack_memory+0x37/0x40 [ 177.106017] ? nfnetlink_rcv_msg+0x67c/0x1070 [ 177.110606] __alloc_skb+0x119/0x790 [ 177.114310] ? skb_scrub_packet+0x490/0x490 [ 177.118616] ? nfnetlink_bind+0x3b0/0x3b0 [ 177.122769] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 177.128292] ? netlink_unicast+0x398/0x760 [ 177.132516] ? netlink_attachskb+0x9a0/0x9a0 [ 177.136919] netlink_ack+0x2df/0xbe0 [ 177.140621] ? netlink_sendmsg+0xfc0/0xfc0 [ 177.144852] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 177.150572] netlink_rcv_skb+0x35d/0x440 [ 177.154717] ? nfnetlink_bind+0x3b0/0x3b0 [ 177.158878] ? netlink_ack+0xbe0/0xbe0 [ 177.162760] ? __netlink_ns_capable+0x100/0x130 [ 177.167431] nfnetlink_rcv+0x1c0/0x4d0 [ 177.171316] ? nfnetlink_rcv_batch+0x1910/0x1910 [ 177.176063] ? kasan_check_write+0x14/0x20 [ 177.180302] netlink_unicast+0x5a0/0x760 [ 177.184363] ? netlink_attachskb+0x9a0/0x9a0 [ 177.188773] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 177.194302] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 177.199324] netlink_sendmsg+0xa18/0xfc0 [ 177.203380] ? netlink_unicast+0x760/0x760 [ 177.207623] ? move_addr_to_kernel.part.20+0x100/0x100 [ 177.212899] ? security_socket_sendmsg+0x94/0xc0 [ 177.217647] ? netlink_unicast+0x760/0x760 [ 177.221869] sock_sendmsg+0xd5/0x120 [ 177.225570] ___sys_sendmsg+0x7fd/0x930 [ 177.229532] ? copy_msghdr_from_user+0x580/0x580 [ 177.234281] ? __f_unlock_pos+0x19/0x20 [ 177.238252] ? lock_downgrade+0x8f0/0x8f0 [ 177.242389] ? proc_fail_nth_write+0x9e/0x210 [ 177.246886] ? __fget_light+0x2f7/0x440 [ 177.250938] ? lock_acquire+0x1e4/0x540 [ 177.254899] ? fget_raw+0x20/0x20 [ 177.258346] ? kasan_check_write+0x14/0x20 [ 177.262567] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 177.267503] ? fsnotify+0xbac/0x14e0 [ 177.271214] ? vfs_write+0x2f3/0x560 [ 177.274925] ? wait_for_completion+0x8d0/0x8d0 [ 177.279667] ? lock_release+0xa30/0xa30 [ 177.283634] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 177.289767] ? sockfd_lookup_light+0xc5/0x160 [ 177.294263] __sys_sendmsg+0x11d/0x290 [ 177.298142] ? __ia32_sys_shutdown+0x80/0x80 [ 177.302546] ? __sb_end_write+0xac/0xe0 [ 177.306525] ? fput+0x130/0x1a0 [ 177.309791] ? ksys_write+0x1ae/0x260 [ 177.313585] ? syscall_slow_exit_work+0x500/0x500 [ 177.318419] __x64_sys_sendmsg+0x78/0xb0 [ 177.322468] do_syscall_64+0x1b9/0x820 [ 177.326428] ? finish_task_switch+0x1d3/0x870 [ 177.330913] ? syscall_return_slowpath+0x5e0/0x5e0 [ 177.335918] ? syscall_return_slowpath+0x31d/0x5e0 [ 177.340843] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 177.345847] ? prepare_exit_to_usermode+0x291/0x3b0 [ 177.350848] ? perf_trace_sys_enter+0xb10/0xb10 [ 177.355511] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 177.360350] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 177.365524] RIP: 0033:0x455e29 [ 177.368710] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 177.387941] RSP: 002b:00007fdc04eeac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.395638] RAX: ffffffffffffffda RBX: 00007fdc04eeb6d4 RCX: 0000000000455e29 [ 177.402894] RDX: 0000000000000000 RSI: 0000000020011fc8 RDI: 0000000000000014 11:39:56 executing program 6 (fault-call:3 fault-nth:5): r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:56 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0xc028660f, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) [ 177.410150] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 177.417405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 177.424662] R13: 00000000004c1165 R14: 00000000004d15d0 R15: 0000000000000004 11:39:56 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x32e}], 0x1) [ 177.483344] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 177.494190] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. [ 177.512912] FAULT_INJECTION: forcing a failure. [ 177.512912] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 177.524754] CPU: 1 PID: 10238 Comm: syz-executor6 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 177.533140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.542477] Call Trace: [ 177.545058] dump_stack+0x1c9/0x2b4 [ 177.548681] ? dump_stack_print_info.cold.2+0x52/0x52 [ 177.553863] should_fail.cold.4+0xa/0x11 [ 177.557912] ? do_raw_spin_lock+0xc1/0x200 [ 177.562136] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 177.567226] ? lock_acquire+0x1e4/0x540 [ 177.571207] ? nfnetlink_rcv_msg+0xa85/0x1070 [ 177.575690] ? llist_add_batch+0x106/0x170 [ 177.579927] ? perf_trace_lock+0xde/0x920 [ 177.584067] ? lock_release+0xa30/0xa30 [ 177.588033] ? trace_hardirqs_on+0x10/0x10 [ 177.592270] ? zap_class+0x740/0x740 [ 177.595979] ? kasan_check_write+0x14/0x20 [ 177.600214] ? __mutex_lock+0x6c4/0x1680 [ 177.604274] ? __down_trylock_console_sem+0x155/0x200 [ 177.609464] ? nfnetlink_rcv_msg+0xa85/0x1070 [ 177.613949] ? perf_trace_lock+0xde/0x920 [ 177.618084] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 177.622923] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 177.628447] ? should_fail+0x246/0xd86 [ 177.632321] ? zap_class+0x740/0x740 [ 177.636027] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 177.641122] __alloc_pages_nodemask+0x36e/0xdb0 [ 177.645784] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 177.650789] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 177.655390] ? lock_acquire+0x1e4/0x540 [ 177.659358] ? fs_reclaim_acquire+0x20/0x20 [ 177.663668] ? lock_downgrade+0x8f0/0x8f0 [ 177.667814] ? lock_release+0xa30/0xa30 [ 177.671785] ? check_same_owner+0x340/0x340 [ 177.676096] cache_grow_begin+0x91/0x710 [ 177.680158] kmem_cache_alloc_node+0x6a0/0x780 [ 177.684726] ? __asan_poison_stack_memory+0x37/0x40 [ 177.689741] ? nfnetlink_rcv_msg+0x67c/0x1070 [ 177.694229] __alloc_skb+0x119/0x790 [ 177.697941] ? skb_scrub_packet+0x490/0x490 [ 177.702249] ? nfnetlink_bind+0x3b0/0x3b0 [ 177.706398] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 177.711938] ? netlink_unicast+0x398/0x760 [ 177.716426] ? netlink_attachskb+0x9a0/0x9a0 [ 177.720924] netlink_ack+0x2df/0xbe0 [ 177.724636] ? netlink_sendmsg+0xfc0/0xfc0 [ 177.728863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 177.734478] netlink_rcv_skb+0x35d/0x440 [ 177.738535] ? nfnetlink_bind+0x3b0/0x3b0 [ 177.742679] ? netlink_ack+0xbe0/0xbe0 [ 177.746556] ? __netlink_ns_capable+0x100/0x130 [ 177.751221] nfnetlink_rcv+0x1c0/0x4d0 [ 177.755273] ? nfnetlink_rcv_batch+0x1910/0x1910 [ 177.760023] ? kasan_check_write+0x14/0x20 [ 177.764247] netlink_unicast+0x5a0/0x760 [ 177.768655] ? netlink_attachskb+0x9a0/0x9a0 [ 177.773053] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 177.778585] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 177.783601] netlink_sendmsg+0xa18/0xfc0 [ 177.787664] ? netlink_unicast+0x760/0x760 [ 177.791891] ? move_addr_to_kernel.part.20+0x100/0x100 [ 177.797173] ? security_socket_sendmsg+0x94/0xc0 [ 177.801931] ? netlink_unicast+0x760/0x760 [ 177.806238] sock_sendmsg+0xd5/0x120 [ 177.809952] ___sys_sendmsg+0x7fd/0x930 [ 177.813919] ? copy_msghdr_from_user+0x580/0x580 [ 177.818660] ? __f_unlock_pos+0x19/0x20 [ 177.822630] ? lock_downgrade+0x8f0/0x8f0 [ 177.826775] ? proc_fail_nth_write+0x9e/0x210 [ 177.831262] ? __fget_light+0x2f7/0x440 [ 177.835222] ? fget_raw+0x20/0x20 [ 177.839186] ? kasan_check_write+0x14/0x20 [ 177.843411] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 177.848325] ? fsnotify+0xbac/0x14e0 [ 177.852035] ? vfs_write+0x2f3/0x560 [ 177.855735] ? wait_for_completion+0x8d0/0x8d0 [ 177.860300] ? lock_release+0xa30/0xa30 [ 177.864274] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 177.869819] ? sockfd_lookup_light+0xc5/0x160 [ 177.874312] __sys_sendmsg+0x11d/0x290 [ 177.878206] ? __ia32_sys_shutdown+0x80/0x80 [ 177.882611] ? __sb_end_write+0xac/0xe0 [ 177.886575] ? fput+0x130/0x1a0 [ 177.889853] ? ksys_write+0x1ae/0x260 [ 177.893648] ? syscall_slow_exit_work+0x500/0x500 [ 177.901155] __x64_sys_sendmsg+0x78/0xb0 [ 177.905216] do_syscall_64+0x1b9/0x820 [ 177.909206] ? finish_task_switch+0x1d3/0x870 [ 177.913703] ? syscall_return_slowpath+0x5e0/0x5e0 [ 177.918632] ? syscall_return_slowpath+0x31d/0x5e0 [ 177.923566] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 177.928571] ? prepare_exit_to_usermode+0x291/0x3b0 [ 177.933575] ? perf_trace_sys_enter+0xb10/0xb10 [ 177.938246] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 177.943082] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 177.948257] RIP: 0033:0x455e29 [ 177.951427] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 177.970662] RSP: 002b:00007fdc04eeac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.978377] RAX: ffffffffffffffda RBX: 00007fdc04eeb6d4 RCX: 0000000000455e29 [ 177.985636] RDX: 0000000000000000 RSI: 0000000020011fc8 RDI: 0000000000000014 [ 177.992892] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 178.000153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 178.007408] R13: 00000000004c1165 R14: 00000000004d15d0 R15: 0000000000000005 11:39:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:57 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 11:39:57 executing program 6 (fault-call:3 fault-nth:6): r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1000007ffe) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x200100, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x800}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000200)={r3, 0x80000001}, &(0x7f0000000240)=0x8) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r5 = accept4(r1, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000001580)=0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000001680), &(0x7f00000016c0)=0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000015c0)={0x0, 0x0}, &(0x7f0000001600)=0xc) r8 = getegid() capget(&(0x7f0000000440)={0x19980330, r6}, &(0x7f0000001640)={0x20, 0x9, 0x5b4, 0x3f, 0x4, 0xffff}) sendmmsg$unix(r5, &(0x7f0000001700)=[{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000000340)="dfb2f15eae26914beee3781d0cefcede16c9008457681a469ea19edeb1feb98ad7bf10bb887c2847911c7792a4185072bdfb452119bacacfbbb6a7b71b340298f990f17ed159064abc764a43a81ee335b16eac8750b61b0e9137584b08676155d173fc4bc999837fae1d48b302e5c0411744e75b66222f46ce65dfab34f7b98404f68288b3ce5cd7bdea7257adb9245371800837952404b8628e6053177ddb08ed33002960c8375fea1dec23f236a2e6867da0fb47a827592492960985be5965e254d2b682aad719c277970990d3d56a3465791f909092119b", 0xd9}, {&(0x7f0000000440)}, {&(0x7f0000000480)="fcb276d7108208358de7e607e69fffda62981a31b3", 0x15}, {&(0x7f00000004c0)="db0712", 0x3}, {&(0x7f0000000500)="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", 0x1000}], 0x5, &(0x7f0000001740)=[@rights={0x28, 0x1, 0x1, [r4, r1, r1, r1, r5]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x18, 0x1, 0x1, [r5, r4]}, @rights={0x30, 0x1, 0x1, [r5, r0, r5, r1, r4, r2, r5]}, @rights={0x20, 0x1, 0x1, [r4, r2, r5]}], 0xb0, 0x4000810}], 0x1, 0x0) recvfrom$inet(r4, &(0x7f00000000c0)=""/50, 0x32, 0x2020, 0x0, 0x0) 11:39:57 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 11:39:57 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0xb4}], 0x1) 11:39:57 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086607, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) [ 178.135758] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 178.166678] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:57 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x70}], 0x1) 11:39:57 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 178.185854] EXT4-fs warning (device sda1): ext4_group_extend:1785: will only finish group (524288 blocks, 256 new) [ 178.210240] EXT4-fs warning (device sda1): ext4_group_extend:1790: can't read last block, resize aborted [ 178.231520] dccp_close: ABORT with 4337 bytes unread 11:39:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1000007ffe) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x200100, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x800}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000200)={r3, 0x80000001}, &(0x7f0000000240)=0x8) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r5 = accept4(r1, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000001580)=0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000001680), &(0x7f00000016c0)=0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000015c0)={0x0, 0x0}, &(0x7f0000001600)=0xc) r8 = getegid() capget(&(0x7f0000000440)={0x19980330, r6}, &(0x7f0000001640)={0x20, 0x9, 0x5b4, 0x3f, 0x4, 0xffff}) sendmmsg$unix(r5, &(0x7f0000001700)=[{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000000340)="dfb2f15eae26914beee3781d0cefcede16c9008457681a469ea19edeb1feb98ad7bf10bb887c2847911c7792a4185072bdfb452119bacacfbbb6a7b71b340298f990f17ed159064abc764a43a81ee335b16eac8750b61b0e9137584b08676155d173fc4bc999837fae1d48b302e5c0411744e75b66222f46ce65dfab34f7b98404f68288b3ce5cd7bdea7257adb9245371800837952404b8628e6053177ddb08ed33002960c8375fea1dec23f236a2e6867da0fb47a827592492960985be5965e254d2b682aad719c277970990d3d56a3465791f909092119b", 0xd9}, {&(0x7f0000000440)}, {&(0x7f0000000480)="fcb276d7108208358de7e607e69fffda62981a31b3", 0x15}, {&(0x7f00000004c0)="db0712", 0x3}, {&(0x7f0000000500)="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", 0x1000}], 0x5, &(0x7f0000001740)=[@rights={0x28, 0x1, 0x1, [r4, r1, r1, r1, r5]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x18, 0x1, 0x1, [r5, r4]}, @rights={0x30, 0x1, 0x1, [r5, r0, r5, r1, r4, r2, r5]}, @rights={0x20, 0x1, 0x1, [r4, r2, r5]}], 0xb0, 0x4000810}], 0x1, 0x0) recvfrom$inet(r4, &(0x7f00000000c0)=""/50, 0x32, 0x2020, 0x0, 0x0) 11:39:57 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x34f}], 0x1) [ 178.259287] EXT4-fs warning (device sda1): ext4_group_extend:1785: will only finish group (524288 blocks, 256 new) [ 178.271939] EXT4-fs warning (device sda1): ext4_group_extend:1790: can't read last block, resize aborted 11:39:57 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x20b}], 0x1) 11:39:57 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x800c6613, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:57 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x7211, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 178.313585] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 178.349691] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:57 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x235}], 0x1) [ 178.415570] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 178.427143] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. [ 178.441312] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 178.457587] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="036fb904bae280d95d40135c9b0a4329cdd312c218f117e2bea31ccb12d2769a6e15f7255d670926e71d15d86cf95dc591671716dbbd4a57a9d25783d766b76aa0253f3a048ce32f649100b1fb7a8a640320f7ad70ef489eebfe625deb1f746b2d57ad6ffcebf766574249e2f1ce8d9a947cfdfabc17f382cc056570ad6c96658af7af013bd7e96ec9d401eb7a1825cee6adac1128f3b03f1809b9ea287051f64116510c0bbd676d331453ca2362e41ae728b088b3916735d7b39f804fdf58d87a8f8755bd1c62d86cba7d8d55fb9771647ba7992201698942a1a37e1f5375f2f70cc2968e0ede024ffccb69b8f641427f6ec4bae9227b1670b5beb9c321c4e218372d286a60e831291ceb154cca1eb8ddf5b3282707abcd2a41b071b87f53bbed74dca0310fba1d13a3ccca0996af17c67b3f55636c410a36ba51a5485bc8c06b5c476a394c85335b48c1423583eeece32dd20c5620d3550161e019b5fd24f3e8fa31894b1fe616f6ab0dbb85bea66bb100d9f20264741ed43713335bcdef5cb08e42", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:58 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0xc0185879, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:58 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x46f}], 0x1) 11:39:58 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x6000000000000000, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:58 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 11:39:58 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) 11:39:58 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x244}], 0x1) [ 179.034313] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 179.042826] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:58 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40106614, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:58 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0xf00000000000000, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 179.130807] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 179.141744] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:39:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:58 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x21c}], 0x1) 11:39:58 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x401c5820, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:58 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x3000000, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1000007ffe) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x200100, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x800}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000200)={r3, 0x80000001}, &(0x7f0000000240)=0x8) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r5 = accept4(r1, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000001580)=0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000001680), &(0x7f00000016c0)=0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000015c0)={0x0, 0x0}, &(0x7f0000001600)=0xc) r8 = getegid() capget(&(0x7f0000000440)={0x19980330, r6}, &(0x7f0000001640)={0x20, 0x9, 0x5b4, 0x3f, 0x4, 0xffff}) sendmmsg$unix(r5, &(0x7f0000001700)=[{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000000340)="dfb2f15eae26914beee3781d0cefcede16c9008457681a469ea19edeb1feb98ad7bf10bb887c2847911c7792a4185072bdfb452119bacacfbbb6a7b71b340298f990f17ed159064abc764a43a81ee335b16eac8750b61b0e9137584b08676155d173fc4bc999837fae1d48b302e5c0411744e75b66222f46ce65dfab34f7b98404f68288b3ce5cd7bdea7257adb9245371800837952404b8628e6053177ddb08ed33002960c8375fea1dec23f236a2e6867da0fb47a827592492960985be5965e254d2b682aad719c277970990d3d56a3465791f909092119b", 0xd9}, {&(0x7f0000000440)}, {&(0x7f0000000480)="fcb276d7108208358de7e607e69fffda62981a31b3", 0x15}, {&(0x7f00000004c0)="db0712", 0x3}, {&(0x7f0000000500)="bc8bdfd71f11c2e78b1191753bfef4b4c03023e98630cddb5b9dc37fa53cff641ef1d2b9661347739bb54aa09c54fd87bd490d8015edef48e2d6cf707bd10a5ed184e57d6edda7ca45e6b857a9e12cbadf01cc1256f4b82bc8545fae4df2c480d4391abc852d79c9b493233f64f02218f66cf5d42a8e05ddafbaaff9675f9c90548c6a0f241f0b101e2da2e9f7c14bb95820592ad0bd4e7eda2d882861001270298f34481bae08a905486bfb69bf5e58561b85095eae768c8659550c82d53aca5fe4b95e47b4515cff662ea67469108405f89160344755f67e1eb344933a2d0b99fddda816494a8df0047a6117bf4da087e9b8360b0d1335387e21a14b910179fe5e8e88ed6b3ceafe28c1942a02271ec60c9597d0b651451457ef9d9da9c0f78e68abceeaf744363d221dd6d3a1240430dab23fc7632502c9756d930c2bbb5ceef03951c79749f897334906cfa54919567d0544b3072daef881bf710d092826a470b775182fd36b1c2702863f99e1a7f8f2450a8a644342ca38eb8c5aaa8fc4b6d41ef48eb565c5ed6b432c22aff0b808e731836097dd06553f465db4c77d01600f3b8e2c69b6de6f59ffe12fabbc89ba6c37522b506077568d992116775096b1a223ec6bb47fea88d222ef8f0183571312e79e1f89cb96445acd51d5bb377563b12c8819b84c4b7807d181a16af7187ef1aa96cc69baca96289a9f66cf22db00db01351113fb463661deead9aa7c1e662251c52bd4f2b98afa706abc8327bab4d09254f13599a617cada9a75b66b388f97f97fa3542ba9b05cb3ae69e53d2a514af0aef23d3a3585d1abfa7bf332a1fcedcb9be9e1c8fded9a0e5019ee5705a53554245575eeb8bf89f7fa7002bee857c75a3ea6e50b2e09dfa6a7c33ffdff99caabac1dd2d7dff814d887e157324c0dc45534e17dfd489cbddbbffd2d0dc23cee649f61076123ec0e97f03fe0815c032c219182e5947f33cf074dd3f32c91c2d528bd80a419140a79ccfe1239904602a6774e7b70912fa438cc8a4f2b92d8e37e220bbe2a99e9c3e744c41220758f96bddbfd4567362779002f3281b3da21a7b239c644d512c0130123045ec42878f685e55fe487a0819f8c6d60bf1375db031f8098797c31f120b8a0e5d3cc072cb24530c69b462b18c5ca0f6dd4a3c204356c3f0fc8ede21cae2abecb6db685c4130a81fbbb057273b3a673f78b7d6c30ff8b76b90726ccc725af2f3852400c1e123acd25dba7bb0310af2794a331f94c5102964535ea1c495127b67a49e7432dda4b0a730f42d5a05565a8e5b29cb4203d46151ccb2b75957be6c3ab644746643f413218a68eb65aa4ac7fa5f9670726cdbaa239c15651b1a6355547e6b49b258408dfb321c4e7e44cf50626a9a1fe461b219a0504e0367f9be864ee393fe49bbf150282a39c31ef290a44f88b9022d59ed14c0866fc46a68178e25ede3e3c958ddf056516a54c684dad233a7caf5ada1b1a72501464712953c27bfd62436a88edeabe9f214512754bed0a75a00b426bdedfce497ee792a41f974cb0d8ccbc40f5e0030c7882b8784549c9259a9091859f153f920fb74ca9d491914ca1079cd3525050a28df9df56c19619ebbb79fac1eea48ebe5a754dd2cdeb499c4b0f6989e44b82399a6194cca605d51f5f86129478cafafdb049785a72016024d8e43db00e09e2fefe9428632f8936dc99bc4cec9a9466878e954775e49ba6f0a7b8505eee27f9481fcd855a914ddd1886e4b435f02fb4fc85f8a4e0f8257de77edbee0b0a70557c820129d23d77a7621b4702208923b5638a05c01efdc1fb83d90dec2602c063ceeefb7c797588c6b6520ad0ff6ab59c850a30b957e219ab35740cf65d819269edc1a69416621f4cca29f51b4e0710f67dcabb2fd65c90b21d96169ad829b9dc13b1b50f0ba44fcace64b3ed63f32fa648e18b43cb79684d28e9c308880b8574241aaf38eb3542f2506017e39ff3d2e8ca1ebfea000f617bedb7c3a6ad071e6b2a05868d139ddd591e400e139ef5245a4a267c7d43f664d043d6e44a259ff9c5b50323bc2b00e5f8eca145153c3b85c2e924ca5b4e135fc1891da6da5f2668b9422e499857250b304a21a104a161846d2e333b16d78147c727ffca118e80fba3c33f5a99f945a10a2f8332fc2c521f8d20a7f897a4b801220ba962ac4262bb3c5cf1406065ca7d66f5ebe034b9e0a4f925253fac22afcbd0ac6aed3054084968bd4af214064de84055d77252117f1c976dcef7252ffec70e860a0d90db630992991afbaa58e1a1883dadb9eb39aa76c24310f85b908486ada80ca1487a43f894bced2ef490799ca3c9d7449e23a27ed589888cd98caeb03f5494cb9fd089b1720a0f303436ee19d71cf8f92f848cd568e912982aadaae98d31eafc4f097ef930d3cddff4c38cc08a6bd3686aea3ade8cd56c4fcc91bd91329af43e19678d8c2750e204211ce42c4a7d031868c803b52714b77c1c66426ea87c598a2be9ede3be0790c808bddc566726ad115f8a597af8530db8b40bfba5c6e314c0e20a35351e8bb5cf5cc62defddbcc8f64f46d6c943caf138b64401716d0ead3b3e22e1daed19f2aa993e708de356901f222084bc46edb6eed20d2bcad0be31c67e5d82d4981a6ff7ca62a6a6292ace0d2e19fe186c1d9fda1aa81adc24614a99dfeef90d44b13e8c71d1194a3c00b3dca0b330df7e9feda685d7aa25d218d5cda21fb60b6c962f1ca33bacfb7b6949b019a6e17f2f3cc53e0791c6a0366d3292d2593e69e91a9e21a4cffc74b8f2e5d86042382541115f10ab6e2cdae8732fdcf0766faf02a785a53b01d3afe292b1d7dd0c3a7656450fcd05307e5f190241aac56fe76ee02d9b458fb9439c8de88a6d29200d472de5840e0bff22ad993e0bf837fe841e30fb76cae3b5f0f392682929fd1e8ff81e4356101d6f26ef79fb62a25676ae900b72138a90db4f31bb8eafb2dd9fa74e09205509811b8637b4e321a2aea31b278086484fe718ae36fa53f12df2d17d0ff53f13069c8364c9b1d38d7a4f90d53a745e5dff3fe42580d10f427e53c093f33269f1ebaf209de9f7a7ede331a8fd999dc89101add3c0ea7aa98a28de213b4e783a8e544ba102bb828676d98b7db0741949387097e8324edde4271ecc7ccf01acf912fab22856aa1cc4932e53a33bcde22e4053a0240acfa3bfb8cdff92f445388b345e32eab21304775d51a867bdad8066764403f34a557c11fb702f52454f58f2c5c6f239a3d1cd78e4d977a81a3d1afbc479d197bfac196ca675e272dd10f49d4b435ca147238e86a642918aaab7480148772d019c706d7d13cb6b5a2bd6a4c3ee2ff1d34af8ae1519da9bca83655699e85ec65e71ed5e61f5802c071d137a8e3efc5ae2be75190e14d33728069c9aaa0e6fcdca73428579cadcc1265a1805669714434055938f7f4a80a1359a800d25148a291fae814088c70f04b565438753b6640ed89d90a9ab70098660f6d369e73258b7f2472ce55093a5f38a961c91b9245218b1c556b0287e070cc58914b2eb8683cccb7392aad0a134e18383b96dcfd5c62b4b4adce7798d5becb69e60dc67a7d799dee52e7d4e2777f889e7edea46a57ed5c99481c3aea4ceca6dbb2f69f7146995efae5bc3b350451cafcd5b4f7a0b6fe7fd71a820484996eb5222e0b879428645305129b53f5d844ecc0001fc58ce4da7ac61b672ae28d93b52c90c0340087ee9346fd7e1398242fba811b04adba8f45de80b0b2c69592d7eb0264e0ff15822b14bd650dd433812f2c72025dff0bb2cdff3b9ed3de81c205270b7658b18f127f0937211223f3128204884a4a1632e95a5af576265612a75b220dce6cacfa29e7cbd0f97e49ad863da036feb137cedcfdc1bbbf90073cbe336c9c50b7befb963373e329666f2a6d1c79fb8bc7ea3d635a46ab46b3a97b4d2ddde1c2082ffd18299eb35c48672a26b7c2804169b6abcf3799c9967b4f328b3f4a9fd013623b63c6607187265ebcc704a996f68297bf2c692eb99cb2057e1a3e8577daf898fcdac94f1cd1568d9164829e0985b6becd77470f74355a1139105eb0c7a8167739cd241f201ddc86e1f572b81a221ffc806fbb88c053d50c613f9ea15e62cac0f54798c1d952578d2df3c9f5cc11aeb5a34b5c3f86e64d68385ca9d9c7e69262767e92e7b63276a51b3877a7e465b287a48e2fb3a8b21263b1accf2a3aedb3d8ac1f5f3179db5c35ae1577dd034577408ccfd813a3328a6f96e108be09f0a9621ebbb994f5d4073ca508c0a90e2ca711203fca48dd1c215b07348076220c6e1922e005552ebf4f301a7b9884222a3733963e05a377bdf70f77c28cc72fb6dfecec374e6c1c97fb848981b3e8bc58eba5b76cfee2b5ec99ae3f2d836d3ae2253afffbf92067e449bc18bc3276b11ea7f5e55f9f7deceb58ff53402fec74074c312c371535625c0a3c98b8a8fd3f964c70cf1719bd573c58c6d3ce9c5e7b00b1913319beb66e8c9f0a00b2fa9b87135a6b77f3b77fdc5b56dc169cb8fc23c79932ee179e5142224a43407d3969d9d7bc1f5750f959032d6d6932aeeda448b499b31f832166b126c5aa97e16750454f9b6e57e1edeff22c91e1d876008a41f4348cd2a7d48588b106bde0b60d8ac057ffb524ecbae533c9b2890eba2fcc1f56de3633af390179ef30147d893918b06c2291028d4afacb450551e775ad96428ec7316d8e09d69ce607a495a562c3c5e0fe9ec9d9f90a1bbc9f2832bcfe40396417d73bead0d21c2c4bb41b5ba78ef902cc52ae5a4294671b9dc509468a2448c93ea50e0efe42da355273161b02b03dedcdf7f063c0eecbedab4cb7c7f338cd430877d495879b447d9b158dd87833450da870bdac48785310820d244f3872768fac57464132d44132e8e830a92ab271da7656ba35271286ac337363af3df111f05ef5dc7b701966dfa45f5ea566f7c658a12a12db1bf1ca962336ea3692c5b3000080a5f0b3b74249a9cfd5927bcc9be0a9e7c82ee76b7bc6294f1a8a8fd56152ca7633b7c47127aa7ecdc186621421d1ee72c45352e1c38c52f1b13cb373f67444cea061beb4d6178ab3776f52a0dbb9cf53f13591bd0927559e85ae637cb46f530d5a736efeee22f94420f365fc6ce07538170633adfe3d8752f89bd1d99b572bff42a3af7153b65bb83091caac5e800cc4d303b26600d134da45a2d232770ddaaa2f4ecfed76c76224de7ba0bf91a8f8bfd4c3884d77de2bca331135b3156a48a87cb6cca05c9cdcaab966c5f9812e7591b6d5bf2fcf9a223c286085aec9be0ba29ddf6a997e90d8dc2c0c9c6d975e612e1ce638c745cfa6782dfaf3e20887f9e443d1817a7e69a033e9d4d219d91d7b88846d6080129925b05c9e8e9f843523980f6670399db61969cc43f469bd2d7221c72d00c79e8503a17cbf2aaac8cb950e05e5ca14089926ead3188cf8c391d2acb09e51b0e17809532987e994951046a20bd5cb1a6e1fe53654932933d4b41477fa156892b890bbf7fe50cf75434b16b8d74017ad9d3e41f4ec31a48235bde83e7c9dae6ab66908433dde281d3b25b16a52ecea5f5c0875da7fa866982365aca4842848eb9a05ffa4e1cccbea13a98034aab5a59479b3823725eaa03eb5e1cce6f2bf4b33cbfa51d5f1438b0eb2cfc37390a5289955221d48473b10c39c87a60c066ebe367719ed90a42f4559b0afd635b394717d44d0d52450963e38efb0f8a7908c49d49b0066c483125748a97564c1c9b731a1c2fb8156598741007", 0x1000}], 0x5, &(0x7f0000001740)=[@rights={0x28, 0x1, 0x1, [r4, r1, r1, r1, r5]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x18, 0x1, 0x1, [r5, r4]}, @rights={0x30, 0x1, 0x1, [r5, r0, r5, r1, r4, r2, r5]}, @rights={0x20, 0x1, 0x1, [r4, r2, r5]}], 0xb0, 0x4000810}], 0x1, 0x0) recvfrom$inet(r4, &(0x7f00000000c0)=""/50, 0x32, 0x2020, 0x0, 0x0) 11:39:58 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x68000000, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:58 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1b4}], 0x1) 11:39:59 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0xf0ffff, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:59 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x6609, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:59 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x8a}], 0x1) 11:39:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="036fb904bae280d95d40135c9b0a4329cdd312c218f117e2bea31ccb12d2769a6e15f7255d670926e71d15d86cf95dc591671716dbbd4a57a9d25783d766b76aa0253f3a048ce32f649100b1fb7a8a640320f7ad70ef489eebfe625deb1f746b2d57ad6ffcebf766574249e2f1ce8d9a947cfdfabc17f382cc056570ad6c96658af7af013bd7e96ec9d401eb7a1825cee6adac1128f3b03f1809b9ea287051f64116510c0bbd676d331453ca2362e41ae728b088b3916735d7b39f804fdf58d87a8f8755bd1c62d86cba7d8d55fb9771647ba7992201698942a1a37e1f5375f2f70cc2968e0ede024ffccb69b8f641427f6ec4bae9227b1670b5beb9c321c4e218372d286a60e831291ceb154cca1eb8ddf5b3282707abcd2a41b071b87f53bbed74dca0310fba1d13a3ccca0996af17c67b3f55636c410a36ba51a5485bc8c06b5c476a394c85335b48c1423583eeece32dd20c5620d3550161e019b5fd24f3e8fa31894b1fe616f6ab0dbb85bea66bb100d9f20264741ed43713335bcdef5cb08e42", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:39:59 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 11:39:59 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) 11:39:59 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x2b1}], 0x1) 11:39:59 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x80087601, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:59 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x700000000000000, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0x0, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:39:59 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x24f4030000000000, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:59 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x260}], 0x1) 11:39:59 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x80086603, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1000007ffe) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x200100, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x800}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000200)={r3, 0x80000001}, &(0x7f0000000240)=0x8) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r5 = accept4(r1, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000001580)=0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000001680), &(0x7f00000016c0)=0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000015c0)={0x0, 0x0}, &(0x7f0000001600)=0xc) r8 = getegid() capget(&(0x7f0000000440)={0x19980330, r6}, &(0x7f0000001640)={0x20, 0x9, 0x5b4, 0x3f, 0x4, 0xffff}) sendmmsg$unix(r5, &(0x7f0000001700)=[{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000000340)="dfb2f15eae26914beee3781d0cefcede16c9008457681a469ea19edeb1feb98ad7bf10bb887c2847911c7792a4185072bdfb452119bacacfbbb6a7b71b340298f990f17ed159064abc764a43a81ee335b16eac8750b61b0e9137584b08676155d173fc4bc999837fae1d48b302e5c0411744e75b66222f46ce65dfab34f7b98404f68288b3ce5cd7bdea7257adb9245371800837952404b8628e6053177ddb08ed33002960c8375fea1dec23f236a2e6867da0fb47a827592492960985be5965e254d2b682aad719c277970990d3d56a3465791f909092119b", 0xd9}, {&(0x7f0000000440)}, {&(0x7f0000000480)="fcb276d7108208358de7e607e69fffda62981a31b3", 0x15}, {&(0x7f00000004c0)="db0712", 0x3}, {&(0x7f0000000500)="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", 0x1000}], 0x5, &(0x7f0000001740)=[@rights={0x28, 0x1, 0x1, [r4, r1, r1, r1, r5]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x18, 0x1, 0x1, [r5, r4]}, @rights={0x30, 0x1, 0x1, [r5, r0, r5, r1, r4, r2, r5]}, @rights={0x20, 0x1, 0x1, [r4, r2, r5]}], 0xb0, 0x4000810}], 0x1, 0x0) recvfrom$inet(r4, &(0x7f00000000c0)=""/50, 0x32, 0x2020, 0x0, 0x0) 11:39:59 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0xfffff000, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:59 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x2b7}], 0x1) 11:39:59 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086618, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:39:59 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x6000000, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:39:59 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x364}], 0x1) 11:40:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:40:00 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x5451, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:00 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x16}], 0x1) 11:40:00 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x78f40300, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:40:00 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:40:00 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) [ 180.999926] validate_nla: 9 callbacks suppressed [ 180.999934] netlink: 'syz-executor6': attribute type 1 has an invalid length. 11:40:00 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0x0, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:40:00 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x5452, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:00 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x10d}], 0x1) 11:40:00 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x9effffff00000000, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:40:00 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x800c6613, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:00 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x801c581f, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:00 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1c5}], 0x1) [ 181.374775] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 181.382506] nla_parse: 10 callbacks suppressed [ 181.382515] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. [ 181.412455] netlink: 'syz-executor6': attribute type 1 has an invalid length. 11:40:00 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x800c6613, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:00 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x1e02000000000000, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 181.429330] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:40:00 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0xdd}], 0x1) [ 181.483690] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 181.494487] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:40:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="036fb904bae280d95d40135c9b0a4329cdd312c218f117e2bea31ccb12d2769a6e15f7255d670926e71d15d86cf95dc591671716dbbd4a57a9d25783d766b76aa0253f3a048ce32f649100b1fb7a8a640320f7ad70ef489eebfe625deb1f746b2d57ad6ffcebf766574249e2f1ce8d9a947cfdfabc17f382cc056570ad6c96658af7af013bd7e96ec9d401eb7a1825cee6adac1128f3b03f1809b9ea287051f64116510c0bbd676d331453ca2362e41ae728b088b3916735d7b39f804fdf58d87a8f8755bd1c62d86cba7d8d55fb9771647ba7992201698942a1a37e1f5375f2f70cc2968e0ede024ffccb69b8f641427f6ec4bae9227b1670b5beb9c321c4e218372d286a60e831291ceb154cca1eb8ddf5b3282707abcd2a41b071b87f53bbed74dca0310fba1d13a3ccca0996af17c67b3f55636c410a36ba51a5485bc8c06b5c476a394c85335b48c1423583eeece32dd20c5620d3550161e019b5fd24f3e8fa31894b1fe616f6ab0dbb85bea66bb100d9f20264741ed43713335bcdef5cb08e42", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:40:01 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x541b, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:01 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x24f40300, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:40:01 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x3fd}], 0x1) 11:40:01 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x800c6613, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) [ 181.883273] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 181.892742] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:40:01 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r1) close(r0) 11:40:01 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086607, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:01 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:40:01 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x4020940d, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:01 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x21e, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:40:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0x0, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:40:01 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0xc5}], 0x1) 11:40:01 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x2e9}], 0x1) [ 182.412083] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 182.420604] EXT4-fs warning (device sda1): ext4_group_extend:1785: will only finish group (524288 blocks, 256 new) [ 182.425425] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. [ 182.441170] EXT4-fs warning (device sda1): ext4_group_extend:1790: can't read last block, resize aborted [ 182.454387] netlink: 'syz-executor6': attribute type 1 has an invalid length. 11:40:01 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x7111000000000000, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 182.461976] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:40:01 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) sched_getattr(r0, &(0x7f0000000080), 0x30, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x18}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 11:40:01 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x36a}], 0x1) [ 182.529840] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 182.542520] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:40:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="036fb904bae280d95d40135c9b0a4329cdd312c218f117e2bea31ccb12d2769a6e15f7255d670926e71d15d86cf95dc591671716dbbd4a57a9d25783d766b76aa0253f3a048ce32f649100b1fb7a8a640320f7ad70ef489eebfe625deb1f746b2d57ad6ffcebf766574249e2f1ce8d9a947cfdfabc17f382cc056570ad6c96658af7af013bd7e96ec9d401eb7a1825cee6adac1128f3b03f1809b9ea287051f64116510c0bbd676d331453ca2362e41ae728b088b3916735d7b39f804fdf58d87a8f8755bd1c62d86cba7d8d55fb9771647ba7992201698942a1a37e1f5375f2f70cc2968e0ede024ffccb69b8f641427f6ec4bae9227b1670b5beb9c321c4e218372d286a60e831291ceb154cca1eb8ddf5b3282707abcd2a41b071b87f53bbed74dca0310fba1d13a3ccca0996af17c67b3f55636c410a36ba51a5485bc8c06b5c476a394c85335b48c1423583eeece32dd20c5620d3550161e019b5fd24f3e8fa31894b1fe616f6ab0dbb85bea66bb100d9f20264741ed43713335bcdef5cb08e42", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:40:01 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x8004587d, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:01 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x500000000000000, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:40:01 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x2fd}], 0x1) 11:40:01 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x4020940d, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:02 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r1) close(r0) 11:40:02 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x2, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) [ 182.821592] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 182.832322] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:40:02 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x466}], 0x1) 11:40:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = memfd_create(&(0x7f0000000080)='selinux:GPL\x00', 0x1) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000100)) syz_open_pts(r0, 0x40000) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5412, &(0x7f0000000000)={0x3}) 11:40:02 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x7400000000000000, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 183.258584] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 183.266644] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. [ 183.283680] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:40:02 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:40:02 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:40:02 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x6612, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:02 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x2, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:02 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x3e}], 0x1) 11:40:02 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x7a00, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:40:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:40:02 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x28d}], 0x1) 11:40:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000270ff2)='net/fib_trie\x00') recvmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)=""/240, 0x8e}], 0x1, 0x0, 0x0, 0x1}, 0x101) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x7c, r3, 0x10, 0x70bd28, 0x25dfdbfd, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x476}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6b5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) r4 = accept4$alg(r0, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000400)={'ah\x00'}, &(0x7f0000000440)=0x1e) sendfile(r4, r1, &(0x7f0000a2effc), 0x3fc) 11:40:02 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0xfffffffffffff000, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:40:02 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0xc0c0583b, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:02 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r1) close(r0) 11:40:02 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x5a}], 0x1) 11:40:02 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x6612, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:02 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x74, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:40:02 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086608, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:40:03 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x15f}], 0x1) 11:40:03 executing program 4: mincore(&(0x7f00006ca000/0x3000)=nil, 0xffffffffffffff3f, &(0x7f0000c91000)=""/34) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x5, 0x5}) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x5, 0x200000) 11:40:03 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x6800, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:40:03 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086613, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:40:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="036fb904bae280d95d40135c9b0a4329cdd312c218f117e2bea31ccb12d2769a6e15f7255d670926e71d15d86cf95dc591671716dbbd4a57a9d25783d766b76aa0253f3a048ce32f649100b1fb7a8a640320f7ad70ef489eebfe625deb1f746b2d57ad6ffcebf766574249e2f1ce8d9a947cfdfabc17f382cc056570ad6c96658af7af013bd7e96ec9d401eb7a1825cee6adac1128f3b03f1809b9ea287051f64116510c0bbd676d331453ca2362e41ae728b088b3916735d7b39f804fdf58d87a8f8755bd1c62d86cba7d8d55fb9771647ba7992201698942a1a37e1f5375f2f70cc2968e0ede024ffccb69b8f641427f6ec4bae9227b1670b5beb9c321c4e218372d286a60e831291ceb154cca1eb8ddf5b3282707abcd2a41b071b87f53bbed74dca0310fba1d13a3ccca0996af17c67b3f55636c410a36ba51a5485bc8c06b5c476a394c85335b48c1423583eeece32dd20c5620d3550161e019b5fd24f3e8fa31894b1fe616f6ab0dbb85bea66bb100d9f20264741ed43713335bcdef5cb08e42", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:40:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAF(r2, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10}) 11:40:03 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0xc0045878, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:03 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x2000, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:40:03 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1004}], 0x1) 11:40:03 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 11:40:03 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x400000000000000, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:40:03 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40286608, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8020000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 11:40:03 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0xf62) [ 184.840852] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize [ 184.897587] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize 11:40:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:40:04 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x2000000000000000, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:40:04 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0xce1) 11:40:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40, 0x0) write$tun(r1, &(0x7f0000000180)={@void, @void, @arp=@generic={0x101, 0x6003, 0x6, 0x9, 0xa, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}, "2927481b3887b6e36f", @link_local={0x1, 0x80, 0xc2}, "88c4b00edc4b653537d1c721ba88b83b"}}, 0x2d) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1004, 0x1) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000080)="0000000201000000000000010400000000000000", 0x14, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280), &(0x7f0000000240)) 11:40:04 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0xc0189436, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:40:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:40:04 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x6800000000000000, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:40:04 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0xe38) 11:40:04 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40286608, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:04 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x4030582a, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:04 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 11:40:04 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x4, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:40:04 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0xe60) 11:40:04 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 11:40:04 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x80086601, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) [ 185.699759] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize 11:40:05 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0xd19) 11:40:05 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40286608, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:05 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 11:40:05 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x7a, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:40:05 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x6611, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:05 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) [ 186.476175] validate_nla: 12 callbacks suppressed [ 186.476183] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 186.500654] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize [ 186.504811] nla_parse: 11 callbacks suppressed [ 186.504820] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:40:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:40:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:40:05 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0xd6a) 11:40:05 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 11:40:05 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:05 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x1170, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:40:05 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40286608, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:05 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 11:40:05 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0xe7f) [ 186.674131] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 186.693993] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. [ 186.698382] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize 11:40:05 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 11:40:05 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086603, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:05 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40286608, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:05 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x5, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:40:05 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x2) 11:40:06 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) [ 186.817776] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize [ 186.892470] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 186.935264] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. [ 186.951179] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 186.961153] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:40:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:40:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:40:06 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) ioctl$fiemap(0xffffffffffffffff, 0x40286608, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:06 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0xf43) 11:40:06 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x40086604, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:06 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 11:40:06 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0xffffff7f00000000, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:40:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:40:06 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 11:40:06 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) ioctl$fiemap(0xffffffffffffffff, 0x40286608, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:06 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0xf9e) [ 187.684665] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 187.703792] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:40:06 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 11:40:06 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x5450, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:06 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) ioctl$fiemap(0xffffffffffffffff, 0x40286608, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:06 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x6c00000000000000, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:40:06 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40286608, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) [ 187.818129] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 187.838204] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. [ 187.886339] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize 11:40:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 11:40:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/138, 0x8a}}], 0x1, 0x0, &(0x7f0000001180)) sendto(r3, &(0x7f0000000500)="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", 0x183, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) 11:40:07 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x8) 11:40:07 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0x660c, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:07 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(0xffffffffffffffff) 11:40:07 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x72110000, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:40:07 executing program 4: r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40286608, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) 11:40:07 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(0xffffffffffffffff) [ 188.626348] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize [ 188.631210] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 188.643282] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 11:40:07 executing program 6: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x48000000, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:40:07 executing program 4: r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(0xffffffffffffffff, 0x40286608, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:07 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x5) 11:40:07 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xffffffffffffffc1}) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) ioctl$fiemap(r0, 0xc0045877, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:07 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(0xffffffffffffffff) [ 188.755434] netlink: 'syz-executor6': attribute type 1 has an invalid length. 11:40:07 executing program 4: r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(0xffffffffffffffff, 0x40286608, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[]]) 11:40:07 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0xbf7) [ 188.799415] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. [ 431.071234] INFO: task khugepaged:903 blocked for more than 140 seconds. [ 431.078227] Not tainted 4.18.0-rc3-next-20180709+ #2 [ 431.083863] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.091851] khugepaged D21376 903 2 0x80000000 [ 431.097496] Call Trace: [ 431.100165] __schedule+0x87c/0x1ed0 [ 431.103952] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 431.108848] ? __sched_text_start+0x8/0x8 [ 431.113026] ? trace_hardirqs_on+0x10/0x10 [ 431.117277] ? trace_hardirqs_on+0x10/0x10 [ 431.121555] ? __account_cfs_rq_runtime+0x770/0x770 [ 431.126577] schedule+0xfb/0x450 [ 431.129976] ? lock_downgrade+0x8f0/0x8f0 [ 431.134131] ? __schedule+0x1ed0/0x1ed0 [ 431.138176] ? kasan_check_read+0x11/0x20 [ 431.142370] ? do_raw_spin_unlock+0xa7/0x2f0 [ 431.146787] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 431.151371] ? kasan_check_write+0x14/0x20 [ 431.155627] ? do_raw_spin_lock+0xc1/0x200 [ 431.159893] __rwsem_down_write_failed_common+0x95d/0x1630 [ 431.165543] ? rwsem_spin_on_owner+0xa40/0xa40 [ 431.170137] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 431.175005] ? trace_hardirqs_on+0x10/0x10 [ 431.179320] ? should_fail+0x246/0xd86 [ 431.183234] ? trace_hardirqs_on+0x10/0x10 [ 431.187535] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.193130] ? __collapse_huge_page_swapin+0x85e/0x1670 [ 431.198531] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 431.203408] ? collapse_shmem+0x4810/0x4810 [ 431.207757] ? perf_trace_lock+0x920/0x920 [ 431.212025] ? zap_class+0x740/0x740 [ 431.215752] ? get_mem_cgroup_from_mm+0x209/0x440 [ 431.220619] ? get_mem_cgroup_from_page+0x190/0x190 [ 431.225653] ? collapse_huge_page+0x1ed/0x2140 [ 431.230253] ? lock_acquire+0x1e4/0x540 [ 431.234244] ? collapse_huge_page+0x2b9/0x2140 [ 431.238840] ? lock_release+0xa30/0xa30 [ 431.242832] rwsem_down_write_failed+0xe/0x10 [ 431.247335] ? rwsem_down_write_failed+0xe/0x10 [ 431.252013] call_rwsem_down_write_failed+0x17/0x30 [ 431.257055] down_write+0xaa/0x130 [ 431.260616] ? collapse_huge_page+0x2b9/0x2140 [ 431.265206] ? down_read+0x1d0/0x1d0 [ 431.268933] collapse_huge_page+0x2b9/0x2140 [ 431.273353] ? zap_class+0x740/0x740 [ 431.277068] ? perf_trace_lock+0x920/0x920 [ 431.281320] ? __collapse_huge_page_swapin+0x1670/0x1670 [ 431.286791] ? lock_acquire+0x1e4/0x540 [ 431.290769] ? khugepaged_scan_mm_slot+0x2c4/0x3200 [ 431.295807] ? lock_release+0xa30/0xa30 [ 431.299804] ? lock_acquire+0x1e4/0x540 [ 431.303809] ? khugepaged_scan_mm_slot+0x2072/0x3200 [ 431.308918] ? lock_downgrade+0x8f0/0x8f0 [ 431.313099] ? kasan_check_read+0x11/0x20 [ 431.317254] ? do_raw_spin_unlock+0xa7/0x2f0 [ 431.321687] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 431.326343] ? __pte_alloc_kernel+0x2e0/0x2e0 [ 431.330867] ? kasan_check_write+0x14/0x20 [ 431.335133] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.340700] ? khugepaged_find_target_node+0x19a/0x1e0 [ 431.345994] khugepaged_scan_mm_slot+0x2096/0x3200 [ 431.350970] ? collapse_huge_page+0x2140/0x2140 [ 431.355669] ? kasan_check_read+0x11/0x20 [ 431.359852] ? do_raw_spin_unlock+0xa7/0x2f0 [ 431.364285] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 431.368887] ? lock_acquire+0x1e4/0x540 [ 431.372874] ? lock_downgrade+0x8f0/0x8f0 [ 431.377048] ? kasan_check_read+0x11/0x20 [ 431.381208] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 431.385818] ? kasan_check_write+0x14/0x20 [ 431.390265] ? do_raw_spin_lock+0xc1/0x200 [ 431.394603] ? trace_hardirqs_on+0x10/0x10 [ 431.398869] ? finish_wait+0x25d/0x430 [ 431.402770] ? remove_wait_queue+0x360/0x360 [ 431.407263] ? check_same_owner+0x340/0x340 [ 431.411651] ? rcu_note_context_switch+0x730/0x730 [ 431.416648] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 431.421519] ? khugepaged_wait_work+0x170/0x980 [ 431.426234] ? perf_trace_lock+0x920/0x920 [ 431.430515] ? kasan_check_read+0x11/0x20 [ 431.434704] ? do_raw_spin_unlock+0xa7/0x2f0 [ 431.439420] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 431.444057] ? finish_wait+0x430/0x430 [ 431.448049] ? free_compound_page+0x5c/0x70 [ 431.452413] ? free_transhuge_page+0x2ec/0x460 [ 431.457040] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 431.462587] ? lock_acquire+0x1e4/0x540 [ 431.466623] ? lock_downgrade+0x8f0/0x8f0 [ 431.470795] ? lock_release+0xa30/0xa30 [ 431.474787] ? check_same_owner+0x340/0x340 [ 431.479112] ? do_raw_spin_unlock+0xa7/0x2f0 [ 431.483524] ? kasan_check_write+0x14/0x20 [ 431.487759] ? do_raw_spin_lock+0xc1/0x200 [ 431.492025] khugepaged+0x9aa/0xce0 [ 431.495659] ? khugepaged_scan_mm_slot+0x3200/0x3200 [ 431.500782] ? find_held_lock+0x36/0x1c0 [ 431.504855] ? find_held_lock+0x36/0x1c0 [ 431.508954] ? kasan_check_read+0x11/0x20 [ 431.513124] ? do_raw_spin_unlock+0xa7/0x2f0 [ 431.517559] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 431.522740] ? __kthread_parkme+0x58/0x1b0 [ 431.526993] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 431.532034] ? trace_hardirqs_on+0xd/0x10 [ 431.536202] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.541759] ? __kthread_parkme+0x106/0x1b0 [ 431.546097] kthread+0x345/0x410 [ 431.549474] ? khugepaged_scan_mm_slot+0x3200/0x3200 [ 431.554573] ? kthread_bind+0x40/0x40 [ 431.558389] ret_from_fork+0x3a/0x50 [ 431.562156] INFO: task rs:main Q:Reg:4335 blocked for more than 140 seconds. [ 431.569404] Not tainted 4.18.0-rc3-next-20180709+ #2 [ 431.575083] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.583087] rs:main Q:Reg D23544 4335 1 0x00000000 [ 431.588757] Call Trace: [ 431.591377] __schedule+0x87c/0x1ed0 [ 431.595129] ? __sched_text_start+0x8/0x8 [ 431.600795] ? lock_acquire+0x1e4/0x540 [ 431.604843] ? __fdget_pos+0x1bb/0x200 [ 431.608779] ? lock_release+0xa30/0xa30 [ 431.612781] schedule+0xfb/0x450 [ 431.616179] ? lock_downgrade+0x8f0/0x8f0 [ 431.620339] ? __schedule+0x1ed0/0x1ed0 [ 431.624334] ? kasan_check_read+0x11/0x20 [ 431.628501] ? do_raw_spin_unlock+0xa7/0x2f0 [ 431.632917] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 431.637521] ? kasan_check_write+0x14/0x20 [ 431.641769] ? do_raw_spin_lock+0xc1/0x200 [ 431.646012] rwsem_down_read_failed+0x362/0x600 [ 431.650712] ? rwsem_down_write_failed_killable+0x10/0x10 [ 431.656267] ? lock_acquire+0x1e4/0x540 [ 431.660330] ? rcuwait_wake_up+0x1a3/0x2f0 [ 431.664591] ? lock_downgrade+0x8f0/0x8f0 [ 431.668765] ? lock_release+0xa30/0xa30 [ 431.672753] ? __schedule+0x884/0x1ed0 [ 431.676668] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.682228] ? rcuwait_wake_up+0x1cc/0x2f0 [ 431.686478] call_rwsem_down_read_failed+0x18/0x30 [ 431.691436] __percpu_down_read+0x16e/0x210 [ 431.695774] ? percpu_free_rwsem+0xa0/0xa0 [ 431.700096] __sb_start_write+0x2d7/0x300 [ 431.704269] vfs_write+0x42a/0x560 [ 431.707836] ksys_write+0x101/0x260 [ 431.711503] ? __ia32_sys_read+0xb0/0xb0 [ 431.715637] ? syscall_slow_exit_work+0x500/0x500 [ 431.720511] ? ksys_ioctl+0x81/0xd0 [ 431.724178] __x64_sys_write+0x73/0xb0 [ 431.728089] do_syscall_64+0x1b9/0x820 [ 431.731985] ? syscall_slow_exit_work+0x500/0x500 [ 431.736845] ? syscall_return_slowpath+0x5e0/0x5e0 [ 431.741789] ? syscall_return_slowpath+0x31d/0x5e0 [ 431.746729] ? prepare_exit_to_usermode+0x291/0x3b0 [ 431.751761] ? perf_trace_sys_enter+0xb10/0xb10 [ 431.756435] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.761293] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.766510] RIP: 0033:0x7f76f944b19d [ 431.770251] Code: Bad RIP value. [ 431.773640] RSP: 002b:00007f76f79ec000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 431.781398] RAX: ffffffffffffffda RBX: 0000000000000081 RCX: 00007f76f944b19d [ 431.788692] RDX: 0000000000000081 RSI: 0000000001527a90 RDI: 0000000000000005 [ 431.795987] RBP: 0000000001527a90 R08: 0000000001527a90 R09: 206e692073657475 [ 431.803284] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 431.810630] R13: 00007f76f79ec480 R14: 0000000000000001 R15: 0000000001527890 [ 431.817988] INFO: task syz-fuzzer:4453 blocked for more than 140 seconds. [ 431.824980] Not tainted 4.18.0-rc3-next-20180709+ #2 [ 431.830649] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.838705] syz-fuzzer D19984 4453 4448 0x00000000 [ 431.844416] Call Trace: [ 431.847065] __schedule+0x87c/0x1ed0 [ 431.850836] ? __sched_text_start+0x8/0x8 [ 431.855034] ? trace_hardirqs_on+0x10/0x10 [ 431.859303] ? select_task_rq_fair+0x73b/0x32a0 [ 431.863987] ? lock_downgrade+0x8f0/0x8f0 [ 431.868154] ? account_entity_enqueue+0x3ec/0x700 [ 431.873022] ? __enqueue_entity+0x10d/0x1f0 [ 431.877357] ? perf_trace_lock+0xde/0x920 [ 431.881539] schedule+0xfb/0x450 [ 431.884926] ? lock_downgrade+0x8f0/0x8f0 [ 431.889099] ? __schedule+0x1ed0/0x1ed0 [ 431.893121] ? kasan_check_read+0x11/0x20 [ 431.897283] ? do_raw_spin_unlock+0xa7/0x2f0 [ 431.901724] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 431.906322] ? kasan_check_write+0x14/0x20 [ 431.910578] ? do_raw_spin_lock+0xc1/0x200 [ 431.914841] rwsem_down_read_failed+0x362/0x600 [ 431.919532] ? rwsem_down_write_failed_killable+0x10/0x10 [ 431.925091] ? lock_acquire+0x1e4/0x540 [ 431.929079] ? rcuwait_wake_up+0x1a3/0x2f0 [ 431.933339] ? lock_downgrade+0x8f0/0x8f0 [ 431.937512] ? lock_release+0xa30/0xa30 [ 431.941542] call_rwsem_down_read_failed+0x18/0x30 [ 431.946498] __percpu_down_read+0x16e/0x210 [ 431.950850] ? percpu_free_rwsem+0xa0/0xa0 [ 431.955103] __sb_start_write+0x2d7/0x300 [ 431.959347] ext4_page_mkwrite+0x1d0/0x1430 [ 431.963724] ? ext4_change_inode_journal_flag+0x3e0/0x3e0 [ 431.969293] ? do_wp_page+0xf70/0x19b0 [ 431.973196] do_page_mkwrite+0x14e/0x520 [ 431.977271] ? print_bad_pte+0x5f0/0x5f0 [ 431.981349] ? do_raw_spin_unlock+0xa7/0x2f0 [ 431.985774] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 431.990374] ? __pte_alloc_kernel+0x2e0/0x2e0 [ 431.994897] ? perf_trace_lock+0x920/0x920 [ 431.999143] do_wp_page+0xf78/0x19b0 [ 432.002881] ? finish_mkwrite_fault+0x610/0x610 [ 432.007574] ? trace_hardirqs_on+0x10/0x10 [ 432.011823] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 432.016856] ? lock_acquire+0x1e4/0x540 [ 432.020839] ? __handle_mm_fault+0x1cef/0x4480 [ 432.025525] ? lock_release+0xa30/0xa30 [ 432.029508] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 432.034379] ? pmd_val+0x88/0x100 [ 432.037841] ? add_mm_counter_fast+0xd0/0xd0 [ 432.042275] ? kasan_check_write+0x14/0x20 [ 432.046525] ? do_raw_spin_lock+0xc1/0x200 [ 432.050887] __handle_mm_fault+0x2aab/0x4480 [ 432.055321] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 432.060184] ? lock_acquire+0x1e4/0x540 [ 432.064184] ? handle_mm_fault+0x417/0xc80 [ 432.068425] ? lock_downgrade+0x8f0/0x8f0 [ 432.072592] ? lock_release+0xa30/0xa30 [ 432.076581] ? mem_cgroup_from_task+0xcb/0x1f0 [ 432.081179] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 432.086011] handle_mm_fault+0x53e/0xc80 [ 432.090105] ? __handle_mm_fault+0x4480/0x4480 [ 432.094762] ? find_vma+0x34/0x190 [ 432.098363] __do_page_fault+0x620/0xe50 [ 432.102451] ? mm_fault_error+0x380/0x380 [ 432.106613] ? __ia32_sys_read+0xb0/0xb0 [ 432.110687] do_page_fault+0xf6/0x8c0 [ 432.114499] ? vmalloc_sync_all+0x30/0x30 [ 432.118661] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.124208] ? do_syscall_64+0x497/0x820 [ 432.128276] ? syscall_slow_exit_work+0x500/0x500 [ 432.133128] ? syscall_return_slowpath+0x5e0/0x5e0 [ 432.138069] ? syscall_return_slowpath+0x31d/0x5e0 [ 432.143038] ? prepare_exit_to_usermode+0x291/0x3b0 [ 432.148065] ? page_fault+0x8/0x30 [ 432.151614] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.156490] ? page_fault+0x8/0x30 [ 432.160061] page_fault+0x1e/0x30 [ 432.163528] RIP: 0033:0x70b5e1 [ 432.166740] Code: 48 89 6c 24 10 48 8d 6c 24 10 48 8b 44 24 20 48 8b 48 08 48 8b 50 10 48 8d 58 08 48 83 fa 08 0f 8c 1e 01 00 00 48 8b 54 24 28 <88> 11 48 8b 48 08 48 8b 70 10 48 83 fe 01 0f 86 44 01 00 00 48 89 [ 432.186081] RSP: 002b:000000c4295b0b08 EFLAGS: 00010212 [ 432.191470] RAX: 000000c4295b1140 RBX: 000000c4295b1148 RCX: 00007f3797c2e000 [ 432.198779] RDX: fffffffffffffffe RSI: 000000000209b5d8 RDI: 000000c4295b0b18 [ 432.206083] RBP: 000000c4295b0b18 R08: 0000000000000000 R09: 0000000000000000 [ 432.213380] R10: 000000000095bf8a R11: 0000000000000004 R12: 0000000000000000 [ 432.220671] R13: 0000000000000020 R14: 0000000000000013 R15: 000000c4295b12b0 [ 432.227976] INFO: task syz-fuzzer:4455 blocked for more than 140 seconds. [ 432.234901] Not tainted 4.18.0-rc3-next-20180709+ #2 [ 432.240542] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.248520] syz-fuzzer D19312 4455 4448 0x00000000 [ 432.254682] Call Trace: [ 432.257295] __schedule+0x87c/0x1ed0 [ 432.261036] ? __sched_text_start+0x8/0x8 [ 432.265421] ? trace_hardirqs_on+0x10/0x10 [ 432.269684] ? select_task_rq_fair+0x73b/0x32a0 [ 432.274372] ? lock_downgrade+0x8f0/0x8f0 [ 432.278543] ? account_entity_enqueue+0x3ec/0x700 [ 432.283388] ? __enqueue_entity+0x10d/0x1f0 [ 432.287724] ? perf_trace_lock+0xde/0x920 [ 432.291880] schedule+0xfb/0x450 [ 432.295252] ? lock_downgrade+0x8f0/0x8f0 [ 432.299420] ? __schedule+0x1ed0/0x1ed0 [ 432.303403] ? kasan_check_read+0x11/0x20 [ 432.307567] ? do_raw_spin_unlock+0xa7/0x2f0 [ 432.311986] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 432.316597] ? kasan_check_write+0x14/0x20 [ 432.320877] ? do_raw_spin_lock+0xc1/0x200 [ 432.325160] rwsem_down_read_failed+0x362/0x600 [ 432.329850] ? rwsem_down_write_failed_killable+0x10/0x10 [ 432.335402] ? lock_acquire+0x1e4/0x540 [ 432.339406] ? rcuwait_wake_up+0x1a3/0x2f0 [ 432.343655] ? lock_downgrade+0x8f0/0x8f0 [ 432.347827] ? lock_release+0xa30/0xa30 [ 432.351816] ? lock_downgrade+0x8f0/0x8f0 [ 432.355983] call_rwsem_down_read_failed+0x18/0x30 [ 432.360932] __percpu_down_read+0x16e/0x210 [ 432.365292] ? percpu_free_rwsem+0xa0/0xa0 [ 432.369560] __sb_start_write+0x2d7/0x300 [ 432.373722] ext4_page_mkwrite+0x1d0/0x1430 [ 432.378059] ? ext4_change_inode_journal_flag+0x3e0/0x3e0 [ 432.383616] ? do_wp_page+0xf70/0x19b0 [ 432.387538] do_page_mkwrite+0x14e/0x520 [ 432.391621] ? print_bad_pte+0x5f0/0x5f0 [ 432.395692] ? do_raw_spin_unlock+0xa7/0x2f0 [ 432.400122] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 432.404713] ? __pte_alloc_kernel+0x2e0/0x2e0 [ 432.409230] ? perf_trace_lock+0x920/0x920 [ 432.413497] do_wp_page+0xf78/0x19b0 [ 432.417226] ? finish_mkwrite_fault+0x610/0x610 [ 432.421920] ? trace_hardirqs_on+0x10/0x10 [ 432.426172] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 432.431233] ? lock_acquire+0x1e4/0x540 [ 432.435237] ? __handle_mm_fault+0x1cef/0x4480 [ 432.439837] ? lock_release+0xa30/0xa30 [ 432.443821] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 432.448692] ? pmd_val+0x88/0x100 [ 432.452157] ? add_mm_counter_fast+0xd0/0xd0 [ 432.456842] ? kasan_check_write+0x14/0x20 [ 432.461111] ? do_raw_spin_lock+0xc1/0x200 [ 432.465375] __handle_mm_fault+0x2aab/0x4480 [ 432.469825] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 432.474703] ? lock_acquire+0x1e4/0x540 [ 432.478705] ? handle_mm_fault+0x417/0xc80 [ 432.482960] ? lock_downgrade+0x8f0/0x8f0 [ 432.487122] ? lock_release+0xa30/0xa30 [ 432.491902] ? mem_cgroup_from_task+0xcb/0x1f0 [ 432.496519] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 432.501304] handle_mm_fault+0x53e/0xc80 [ 432.505383] ? __handle_mm_fault+0x4480/0x4480 [ 432.509992] ? find_vma+0x34/0x190 [ 432.513564] __do_page_fault+0x620/0xe50 [ 432.517733] ? mm_fault_error+0x380/0x380 [ 432.521904] ? __ia32_sys_read+0xb0/0xb0 [ 432.525978] do_page_fault+0xf6/0x8c0 [ 432.529808] ? vmalloc_sync_all+0x30/0x30 [ 432.533972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.539526] ? do_syscall_64+0x497/0x820 [ 432.543611] ? syscall_slow_exit_work+0x500/0x500 [ 432.548473] ? syscall_return_slowpath+0x5e0/0x5e0 [ 432.553437] ? syscall_return_slowpath+0x31d/0x5e0 [ 432.558390] ? prepare_exit_to_usermode+0x291/0x3b0 [ 432.563436] ? page_fault+0x8/0x30 [ 432.566987] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.571861] ? page_fault+0x8/0x30 [ 432.575404] page_fault+0x1e/0x30 [ 432.578859] RIP: 0033:0x70b5e1 [ 432.582063] Code: 48 89 6c 24 10 48 8d 6c 24 10 48 8b 44 24 20 48 8b 48 08 48 8b 50 10 48 8d 58 08 48 83 fa 08 0f 8c 1e 01 00 00 48 8b 54 24 28 <88> 11 48 8b 48 08 48 8b 70 10 48 83 fe 01 0f 86 44 01 00 00 48 89 [ 432.601304] RSP: 002b:000000c4200370a0 EFLAGS: 00010212 [ 432.606693] RAX: 000000c4200373e0 RBX: 000000c4200373e8 RCX: 00007f379c42e000 [ 432.613992] RDX: 0000000000000502 RSI: 0000000000000000 RDI: 0000000000000390 [ 432.621284] RBP: 000000c4200370b0 R08: 0000000000000000 R09: 0000000000000000 [ 432.628569] R10: 000000000095bf8a R11: 0000000000000004 R12: 0000000000000000 [ 432.635856] R13: 0000000000000020 R14: 0000000000000013 R15: 000000c420037550 [ 432.643167] INFO: task syz-executor0:4472 blocked for more than 140 seconds. [ 432.650358] Not tainted 4.18.0-rc3-next-20180709+ #2 [ 432.655999] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.663990] syz-executor0 D22032 4472 4467 0x00000000 [ 432.669658] Call Trace: [ 432.672267] __schedule+0x87c/0x1ed0 [ 432.675992] ? kasan_check_read+0x11/0x20 [ 432.680501] ? __sched_text_start+0x8/0x8 [ 432.684661] ? perf_trace_lock+0xde/0x920 [ 432.688814] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 432.693664] ? perf_trace_lock+0xde/0x920 [ 432.697834] ? path_parentat.isra.43+0x20/0x160 [ 432.702508] ? zap_class+0x740/0x740 [ 432.706236] schedule+0xfb/0x450 [ 432.709602] ? lock_downgrade+0x8f0/0x8f0 [ 432.713757] ? __schedule+0x1ed0/0x1ed0 [ 432.717736] ? kasan_check_read+0x11/0x20 [ 432.721885] ? do_raw_spin_unlock+0xa7/0x2f0 [ 432.726309] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 432.730905] ? kasan_check_write+0x14/0x20 [ 432.735140] ? do_raw_spin_lock+0xc1/0x200 [ 432.739389] rwsem_down_read_failed+0x362/0x600 [ 432.744071] ? rwsem_down_write_failed_killable+0x10/0x10 [ 432.749623] ? lock_acquire+0x1e4/0x540 [ 432.753606] ? rcuwait_wake_up+0x1a3/0x2f0 [ 432.757852] ? lock_downgrade+0x8f0/0x8f0 [ 432.762009] ? lock_release+0xa30/0xa30 [ 432.766010] ? mntput+0x74/0xa0 [ 432.769320] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.774872] ? rcuwait_wake_up+0x1cc/0x2f0 [ 432.779109] call_rwsem_down_read_failed+0x18/0x30 [ 432.784052] __percpu_down_read+0x16e/0x210 [ 432.788373] ? percpu_free_rwsem+0xa0/0xa0 [ 432.792615] __sb_start_write+0x2d7/0x300 [ 432.796769] mnt_want_write+0x3f/0xc0 [ 432.800572] do_unlinkat+0x2b7/0xa30 [ 432.804290] ? do_raw_spin_unlock+0xa7/0x2f0 [ 432.808700] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 432.813286] ? __ia32_sys_rmdir+0x40/0x40 [ 432.817444] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.822990] ? strncpy_from_user+0x3be/0x510 [ 432.827503] ? mpi_free.cold.1+0x19/0x19 [ 432.831572] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.837129] ? getname_flags+0x26e/0x5a0 [ 432.841194] __x64_sys_unlink+0x42/0x50 [ 432.845185] do_syscall_64+0x1b9/0x820 [ 432.849077] ? syscall_slow_exit_work+0x500/0x500 [ 432.853948] ? syscall_return_slowpath+0x5e0/0x5e0 [ 432.858905] ? syscall_return_slowpath+0x31d/0x5e0 [ 432.863851] ? prepare_exit_to_usermode+0x291/0x3b0 [ 432.868885] ? perf_trace_sys_enter+0xb10/0xb10 [ 432.873567] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.878445] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.883662] RIP: 0033:0x455b77 [ 432.886873] Code: c0 48 89 44 24 30 48 8b 2c 24 48 83 c4 08 c3 89 74 24 28 48 83 c0 02 48 89 44 24 30 48 8b 2c 24 48 83 c4 08 c3 8d 7e 20 40 80 10 73 64 48 83 fa 02 7e c2 0f b6 54 0b 01 8d 7a 80 40 80 ff 3f [ 432.906331] RSP: 002b:00007fff6a671588 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 432.914058] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000455b77 [ 432.921355] RDX: 00007fff6a671590 RSI: 00007fff6a671620 RDI: 00007fff6a671620 [ 432.928656] RBP: 00007fff6a673330 R08: 0000000000000000 R09: 000000000000000c [ 432.935946] R10: 0000000000000006 R11: 0000000000000206 R12: 0000000000f25940 [ 432.943228] R13: 0000000000000000 R14: 00007fff6a672d00 R15: 0000000000702140 [ 432.950548] INFO: task syz-executor4:4480 blocked for more than 140 seconds. [ 432.957762] Not tainted 4.18.0-rc3-next-20180709+ #2 [ 432.963408] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.971416] syz-executor4 D21352 4480 4471 0x00000000 [ 432.977089] Call Trace: [ 432.979694] __schedule+0x87c/0x1ed0 [ 432.983429] ? kasan_check_read+0x11/0x20 [ 432.987617] ? __sched_text_start+0x8/0x8 [ 432.991795] ? perf_trace_lock+0xde/0x920 [ 432.995952] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 433.000810] ? perf_trace_lock+0xde/0x920 [ 433.004971] ? path_parentat.isra.43+0x20/0x160 [ 433.009661] ? zap_class+0x740/0x740 [ 433.013388] schedule+0xfb/0x450 [ 433.016787] ? lock_downgrade+0x8f0/0x8f0 [ 433.020945] ? __schedule+0x1ed0/0x1ed0 [ 433.024932] ? kasan_check_read+0x11/0x20 [ 433.029095] ? do_raw_spin_unlock+0xa7/0x2f0 [ 433.033507] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 433.038115] ? kasan_check_write+0x14/0x20 [ 433.042361] ? do_raw_spin_lock+0xc1/0x200 [ 433.046607] rwsem_down_read_failed+0x362/0x600 [ 433.051287] ? rwsem_down_write_failed_killable+0x10/0x10 [ 433.056833] ? lock_acquire+0x1e4/0x540 [ 433.060820] ? rcuwait_wake_up+0x1a3/0x2f0 [ 433.065058] ? lock_downgrade+0x8f0/0x8f0 [ 433.069226] ? lock_release+0xa30/0xa30 [ 433.073204] ? mntput+0x74/0xa0 [ 433.076489] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.082037] ? rcuwait_wake_up+0x1cc/0x2f0 [ 433.086289] call_rwsem_down_read_failed+0x18/0x30 [ 433.091240] __percpu_down_read+0x16e/0x210 [ 433.095574] ? percpu_free_rwsem+0xa0/0xa0 [ 433.099827] __sb_start_write+0x2d7/0x300 [ 433.104160] mnt_want_write+0x3f/0xc0 [ 433.107967] do_unlinkat+0x2b7/0xa30 [ 433.111696] ? do_raw_spin_unlock+0xa7/0x2f0 [ 433.116112] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 433.120710] ? __ia32_sys_rmdir+0x40/0x40 [ 433.124869] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 433.130425] ? strncpy_from_user+0x3be/0x510 [ 433.134836] ? mpi_free.cold.1+0x19/0x19 [ 433.138913] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.144458] ? getname_flags+0x26e/0x5a0 [ 433.148541] __x64_sys_unlink+0x42/0x50 [ 433.152527] do_syscall_64+0x1b9/0x820 [ 433.156428] ? syscall_slow_exit_work+0x500/0x500 [ 433.161297] ? syscall_return_slowpath+0x5e0/0x5e0 [ 433.166247] ? syscall_return_slowpath+0x31d/0x5e0 [ 433.171200] ? prepare_exit_to_usermode+0x291/0x3b0 [ 433.176759] ? perf_trace_sys_enter+0xb10/0xb10 [ 433.181553] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 433.186436] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.191646] RIP: 0033:0x455b77 [ 433.194842] Code: c0 48 89 44 24 30 48 8b 2c 24 48 83 c4 08 c3 89 74 24 28 48 83 c0 02 48 89 44 24 30 48 8b 2c 24 48 83 c4 08 c3 8d 7e 20 40 80 10 73 64 48 83 fa 02 7e c2 0f b6 54 0b 01 8d 7a 80 40 80 ff 3f [ 433.214105] RSP: 002b:00007fff6028a6d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 433.221844] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000455b77 [ 433.229131] RDX: 00007fff6028a6e0 RSI: 00007fff6028a770 RDI: 00007fff6028a770 [ 433.236435] RBP: 00007fff6028c480 R08: 0000000000000000 R09: 000000000000000c [ 433.243742] R10: 0000000000000006 R11: 0000000000000206 R12: 0000000000c4f940 [ 433.251043] R13: 0000000000000000 R14: 00007fff6028be50 R15: 0000000000702140 [ 433.258342] INFO: task syz-executor3:4481 blocked for more than 140 seconds. [ 433.265539] Not tainted 4.18.0-rc3-next-20180709+ #2 [ 433.271263] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.279233] syz-executor3 D22032 4481 4473 0x00000000 [ 433.285072] Call Trace: [ 433.287681] __schedule+0x87c/0x1ed0 [ 433.291443] ? kasan_check_read+0x11/0x20 [ 433.295609] ? __sched_text_start+0x8/0x8 [ 433.299773] ? perf_trace_lock+0xde/0x920 [ 433.303943] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 433.308812] ? perf_trace_lock+0xde/0x920 [ 433.312982] ? path_parentat.isra.43+0x20/0x160 [ 433.317675] ? zap_class+0x740/0x740 [ 433.321418] schedule+0xfb/0x450 [ 433.324823] ? lock_downgrade+0x8f0/0x8f0 [ 433.328993] ? __schedule+0x1ed0/0x1ed0 [ 433.333007] ? kasan_check_read+0x11/0x20 [ 433.337178] ? do_raw_spin_unlock+0xa7/0x2f0 [ 433.341605] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 433.346198] ? kasan_check_write+0x14/0x20 [ 433.350441] ? do_raw_spin_lock+0xc1/0x200 [ 433.354691] rwsem_down_read_failed+0x362/0x600 [ 433.359373] ? rwsem_down_write_failed_killable+0x10/0x10 [ 433.364947] ? lock_acquire+0x1e4/0x540 [ 433.368936] ? rcuwait_wake_up+0x1a3/0x2f0 [ 433.373194] ? lock_downgrade+0x8f0/0x8f0 [ 433.377359] ? lock_release+0xa30/0xa30 [ 433.381349] ? mntput+0x74/0xa0 [ 433.384658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.390207] ? rcuwait_wake_up+0x1cc/0x2f0 [ 433.394475] call_rwsem_down_read_failed+0x18/0x30 [ 433.399434] __percpu_down_read+0x16e/0x210 [ 433.403774] ? percpu_free_rwsem+0xa0/0xa0 [ 433.408030] __sb_start_write+0x2d7/0x300 [ 433.412197] mnt_want_write+0x3f/0xc0 [ 433.416030] do_unlinkat+0x2b7/0xa30 [ 433.419760] ? do_raw_spin_unlock+0xa7/0x2f0 [ 433.424196] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 433.428793] ? __ia32_sys_rmdir+0x40/0x40 [ 433.432959] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 433.438511] ? strncpy_from_user+0x3be/0x510 [ 433.442952] ? mpi_free.cold.1+0x19/0x19 [ 433.447162] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.452715] ? getname_flags+0x26e/0x5a0 [ 433.456793] __x64_sys_unlink+0x42/0x50 [ 433.460785] do_syscall_64+0x1b9/0x820 [ 433.464703] ? syscall_slow_exit_work+0x500/0x500 [ 433.469553] ? syscall_return_slowpath+0x5e0/0x5e0 [ 433.474511] ? syscall_return_slowpath+0x31d/0x5e0 [ 433.479450] ? prepare_exit_to_usermode+0x291/0x3b0 [ 433.484495] ? perf_trace_sys_enter+0xb10/0xb10 [ 433.489178] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 433.494054] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.499257] RIP: 0033:0x455b77 [ 433.502454] Code: c0 48 89 44 24 30 48 8b 2c 24 48 83 c4 08 c3 89 74 24 28 48 83 c0 02 48 89 44 24 30 48 8b 2c 24 48 83 c4 08 c3 8d 7e 20 40 80 10 73 64 48 83 fa 02 7e c2 0f b6 54 0b 01 8d 7a 80 40 80 ff 3f [ 433.521834] RSP: 002b:00007ffd8c7cf398 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 433.529572] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000455b77 [ 433.536870] RDX: 00007ffd8c7cf3a0 RSI: 00007ffd8c7cf430 RDI: 00007ffd8c7cf430 [ 433.544155] RBP: 00007ffd8c7d1140 R08: 0000000000000000 R09: 000000000000000c [ 433.551446] R10: 0000000000000006 R11: 0000000000000202 R12: 0000000001be4940 [ 433.558751] R13: 0000000000000000 R14: 00007ffd8c7d0b10 R15: 0000000000702140 [ 433.566084] INFO: task syz-executor5:10991 blocked for more than 140 seconds. [ 433.573363] Not tainted 4.18.0-rc3-next-20180709+ #2 [ 433.579019] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.587040] syz-executor5 D25040 10991 4476 0x00000004 [ 433.592687] Call Trace: [ 433.595315] __schedule+0x87c/0x1ed0 [ 433.599047] ? __sched_text_start+0x8/0x8 [ 433.603207] ? trace_hardirqs_on+0x10/0x10 [ 433.607471] ? trace_hardirqs_on+0x10/0x10 [ 433.611713] ? trace_hardirqs_on+0x10/0x10 [ 433.615968] ? kasan_check_write+0x14/0x20 [ 433.620299] ? finish_task_switch+0x2ca/0x870 [ 433.624802] ? preempt_notifier_register+0x200/0x200 [ 433.629925] ? perf_trace_lock+0xde/0x920 [ 433.634079] ? perf_trace_lock+0xde/0x920 [ 433.638249] schedule+0xfb/0x450 [ 433.641636] ? lock_downgrade+0x8f0/0x8f0 [ 433.645827] ? __schedule+0x1ed0/0x1ed0 [ 433.649814] ? kasan_check_read+0x11/0x20 [ 433.653979] ? do_raw_spin_unlock+0xa7/0x2f0 [ 433.658415] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 433.663034] ? kasan_check_write+0x14/0x20 [ 433.667867] ? do_raw_spin_lock+0xc1/0x200 [ 433.672356] rwsem_down_read_failed+0x362/0x600 [ 433.677054] ? rwsem_down_write_failed_killable+0x10/0x10 [ 433.682610] ? lock_acquire+0x1e4/0x540 [ 433.686598] ? rcuwait_wake_up+0x1a3/0x2f0 [ 433.690848] ? lock_downgrade+0x8f0/0x8f0 [ 433.695015] ? lock_release+0xa30/0xa30 [ 433.699092] ? __free_object+0x173/0x340 [ 433.703342] ? kasan_check_read+0x11/0x20 [ 433.707512] call_rwsem_down_read_failed+0x18/0x30 [ 433.712457] __percpu_down_read+0x16e/0x210 [ 433.716798] ? percpu_free_rwsem+0xa0/0xa0 [ 433.721056] __sb_start_write+0x2d7/0x300 [ 433.725233] ext4_page_mkwrite+0x1d0/0x1430 [ 433.729576] ? ext4_change_inode_journal_flag+0x3e0/0x3e0 [ 433.735136] ? do_wp_page+0xf70/0x19b0 [ 433.739042] do_page_mkwrite+0x14e/0x520 [ 433.743113] ? print_bad_pte+0x5f0/0x5f0 [ 433.747202] ? do_raw_spin_unlock+0xa7/0x2f0 [ 433.751627] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 433.756236] ? __pte_alloc_kernel+0x2e0/0x2e0 [ 433.760746] ? perf_trace_lock+0x920/0x920 [ 433.764996] do_wp_page+0xf78/0x19b0 [ 433.768730] ? finish_mkwrite_fault+0x610/0x610 [ 433.773420] ? trace_hardirqs_on+0x10/0x10 [ 433.777681] ? lock_acquire+0x1e4/0x540 [ 433.781665] ? __handle_mm_fault+0x1cef/0x4480 [ 433.786271] ? lock_downgrade+0x8f0/0x8f0 [ 433.790448] ? lock_release+0xa30/0xa30 [ 433.794435] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 433.799292] ? pmd_val+0x88/0x100 [ 433.802758] ? add_mm_counter_fast+0xd0/0xd0 [ 433.807188] ? kasan_check_write+0x14/0x20 [ 433.811441] ? do_raw_spin_lock+0xc1/0x200 [ 433.816306] __handle_mm_fault+0x2aab/0x4480 [ 433.820736] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 433.825600] ? lock_acquire+0x1e4/0x540 [ 433.829600] ? handle_mm_fault+0x417/0xc80 [ 433.833853] ? lock_downgrade+0x8f0/0x8f0 [ 433.838016] ? lock_release+0xa30/0xa30 [ 433.842038] ? mem_cgroup_from_task+0xcb/0x1f0 [ 433.846632] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 433.851409] handle_mm_fault+0x53e/0xc80 [ 433.855494] ? __handle_mm_fault+0x4480/0x4480 [ 433.860111] ? find_vma+0x34/0x190 [ 433.863686] __do_page_fault+0x620/0xe50 [ 433.867766] ? mm_fault_error+0x380/0x380 [ 433.871940] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.877554] ? __x64_sys_clock_gettime+0x170/0x250 [ 433.882508] ? __ia32_sys_clock_settime+0x290/0x290 [ 433.887544] do_page_fault+0xf6/0x8c0 [ 433.891357] ? vmalloc_sync_all+0x30/0x30 [ 433.895519] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.901072] ? do_syscall_64+0x497/0x820 [ 433.905162] ? syscall_slow_exit_work+0x500/0x500 [ 433.910028] ? syscall_return_slowpath+0x5e0/0x5e0 [ 433.914979] ? syscall_return_slowpath+0x31d/0x5e0 [ 433.919935] ? prepare_exit_to_usermode+0x291/0x3b0 [ 433.924970] ? page_fault+0x8/0x30 [ 433.928522] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 433.933379] ? page_fault+0x8/0x30 [ 433.936935] page_fault+0x1e/0x30 [ 433.940400] RIP: 0033:0x4084b0 [ 433.943593] Code: 24 1f e9 d2 00 00 00 48 ff c2 48 83 fa 08 0f 83 ad 00 00 00 84 01 0f b6 1c 11 38 d8 75 e9 48 89 54 24 20 48 8b 5c 24 48 0f b6 <73> 50 48 0f af f2 0f b6 5b 51 48 89 cf 48 8d 74 3e 08 84 db 74 7c [ 433.962834] RSP: 002b:00007fff9a07b220 EFLAGS: 00010287 [ 433.968211] RAX: 0000001b33021078 RBX: 0000000000000000 RCX: 0000001b34020000 [ 433.975498] RDX: 0000001b3302107c RSI: 0000000000730d00 RDI: 0000000000000002 [ 433.982794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 433.990075] R10: 00007fff9a07b260 R11: 0000000000000246 R12: 0000000000000000 [ 433.997350] R13: 0000000000000002 R14: 000000000072bf48 R15: 000000000072bf48 [ 434.004645] INFO: task syz-executor7:11000 blocked for more than 140 seconds. [ 434.011928] Not tainted 4.18.0-rc3-next-20180709+ #2 [ 434.017552] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.025524] syz-executor7 D23496 11000 4470 0x00000004 [ 434.031171] Call Trace: [ 434.033790] __schedule+0x87c/0x1ed0 [ 434.037521] ? __sched_text_start+0x8/0x8 [ 434.041690] ? trace_hardirqs_on+0x10/0x10 [ 434.045938] ? trace_hardirqs_on+0x10/0x10 [ 434.050187] ? trace_hardirqs_on+0x10/0x10 [ 434.054434] ? kasan_check_write+0x14/0x20 [ 434.058680] ? finish_task_switch+0x2ca/0x870 [ 434.063192] ? preempt_notifier_register+0x200/0x200 [ 434.068316] ? perf_trace_lock+0xde/0x920 [ 434.072474] ? perf_trace_lock+0xde/0x920 [ 434.076642] schedule+0xfb/0x450 [ 434.080034] ? lock_downgrade+0x8f0/0x8f0 [ 434.084196] ? __schedule+0x1ed0/0x1ed0 [ 434.088193] ? kasan_check_read+0x11/0x20 [ 434.092370] ? do_raw_spin_unlock+0xa7/0x2f0 [ 434.096788] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 434.101384] ? kasan_check_write+0x14/0x20 [ 434.105626] ? do_raw_spin_lock+0xc1/0x200 [ 434.109876] rwsem_down_read_failed+0x362/0x600 [ 434.114556] ? rwsem_down_write_failed_killable+0x10/0x10 [ 434.120114] ? lock_acquire+0x1e4/0x540 [ 434.124103] ? rcuwait_wake_up+0x1a3/0x2f0 [ 434.128359] ? lock_downgrade+0x8f0/0x8f0 [ 434.132524] ? lock_release+0xa30/0xa30 [ 434.136509] ? __free_object+0x173/0x340 [ 434.140587] ? kasan_check_read+0x11/0x20 [ 434.144763] call_rwsem_down_read_failed+0x18/0x30 [ 434.149718] __percpu_down_read+0x16e/0x210 [ 434.154840] ? percpu_free_rwsem+0xa0/0xa0 [ 434.159100] __sb_start_write+0x2d7/0x300 [ 434.163269] ext4_page_mkwrite+0x1d0/0x1430 [ 434.167632] ? ext4_change_inode_journal_flag+0x3e0/0x3e0 [ 434.173196] ? do_wp_page+0xf70/0x19b0 [ 434.177099] do_page_mkwrite+0x14e/0x520 [ 434.181176] ? print_bad_pte+0x5f0/0x5f0 [ 434.185248] ? do_raw_spin_unlock+0xa7/0x2f0 [ 434.189672] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 434.194284] ? __pte_alloc_kernel+0x2e0/0x2e0 [ 434.198793] ? perf_trace_lock+0x920/0x920 [ 434.203057] do_wp_page+0xf78/0x19b0 [ 434.206788] ? finish_mkwrite_fault+0x610/0x610 [ 434.211477] ? trace_hardirqs_on+0x10/0x10 [ 434.215744] ? lock_acquire+0x1e4/0x540 [ 434.219742] ? __handle_mm_fault+0x1cef/0x4480 [ 434.224353] ? lock_release+0xa30/0xa30 [ 434.228343] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 434.233201] ? pmd_val+0x88/0x100 [ 434.236662] ? add_mm_counter_fast+0xd0/0xd0 [ 434.241088] ? kasan_check_write+0x14/0x20 [ 434.245336] ? do_raw_spin_lock+0xc1/0x200 [ 434.249587] __handle_mm_fault+0x2aab/0x4480 [ 434.254015] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 434.258896] ? lock_acquire+0x1e4/0x540 [ 434.262885] ? handle_mm_fault+0x417/0xc80 [ 434.267135] ? lock_downgrade+0x8f0/0x8f0 [ 434.271296] ? lock_release+0xa30/0xa30 [ 434.275285] ? mem_cgroup_from_task+0xcb/0x1f0 [ 434.279880] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 434.284655] handle_mm_fault+0x53e/0xc80 [ 434.288733] ? __handle_mm_fault+0x4480/0x4480 [ 434.293325] ? find_vma+0x34/0x190 [ 434.296879] __do_page_fault+0x620/0xe50 [ 434.300955] ? mm_fault_error+0x380/0x380 [ 434.305123] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.310671] ? __x64_sys_clock_gettime+0x170/0x250 [ 434.315612] ? __ia32_sys_clock_settime+0x290/0x290 [ 434.320646] do_page_fault+0xf6/0x8c0 [ 434.324459] ? vmalloc_sync_all+0x30/0x30 [ 434.328631] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.334187] ? do_syscall_64+0x497/0x820 [ 434.338260] ? syscall_slow_exit_work+0x500/0x500 [ 434.343124] ? syscall_return_slowpath+0x5e0/0x5e0 [ 434.348074] ? syscall_return_slowpath+0x31d/0x5e0 [ 434.353039] ? prepare_exit_to_usermode+0x291/0x3b0 [ 434.358077] ? page_fault+0x8/0x30 [ 434.361633] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 434.366517] ? page_fault+0x8/0x30 [ 434.370070] page_fault+0x1e/0x30 [ 434.373532] RIP: 0033:0x4084b0 [ 434.376725] Code: 24 1f e9 d2 00 00 00 48 ff c2 48 83 fa 08 0f 83 ad 00 00 00 84 01 0f b6 1c 11 38 d8 75 e9 48 89 54 24 20 48 8b 5c 24 48 0f b6 <73> 50 48 0f af f2 0f b6 5b 51 48 89 cf 48 8d 74 3e 08 84 db 74 7c [ 434.395988] RSP: 002b:00007ffcfce6bf30 EFLAGS: 00010287 [ 434.401379] RAX: 0000001b32e214d8 RBX: 0000000000000000 RCX: 0000001b33e20000 [ 434.408660] RDX: 0000001b32e214dc RSI: 0000000000730688 RDI: 0000000000000009 [ 434.415940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.423250] R10: 00007ffcfce6bf70 R11: 0000000000000246 R12: 0000000000000000 [ 434.430534] R13: 0000000000000002 R14: 000000000072bff0 R15: 000000000072bff0 [ 434.437837] INFO: task syz-executor1:11011 blocked for more than 140 seconds. [ 434.445136] Not tainted 4.18.0-rc3-next-20180709+ #2 [ 434.450783] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.458758] syz-executor1 D24880 11011 4486 0x00000004 [ 434.464408] Call Trace: [ 434.467048] __schedule+0x87c/0x1ed0 [ 434.470781] ? __sched_text_start+0x8/0x8 [ 434.474942] ? trace_hardirqs_on+0x10/0x10 [ 434.479198] ? trace_hardirqs_on+0x10/0x10 [ 434.483476] ? trace_hardirqs_on+0x10/0x10 [ 434.487738] ? finish_task_switch+0x1d3/0x870 [ 434.492254] ? finish_task_switch+0x18a/0x870 [ 434.496785] ? preempt_notifier_register+0x200/0x200 [ 434.501912] ? perf_trace_lock+0xde/0x920 [ 434.506080] ? perf_trace_lock+0xde/0x920 [ 434.510247] schedule+0xfb/0x450 [ 434.513625] ? lock_downgrade+0x8f0/0x8f0 [ 434.517788] ? __schedule+0x1ed0/0x1ed0 [ 434.521783] ? kasan_check_read+0x11/0x20 [ 434.525943] ? do_raw_spin_unlock+0xa7/0x2f0 [ 434.530379] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 434.534975] ? kasan_check_write+0x14/0x20 [ 434.539222] ? do_raw_spin_lock+0xc1/0x200 [ 434.543473] rwsem_down_read_failed+0x362/0x600 [ 434.548160] ? rwsem_down_write_failed_killable+0x10/0x10 [ 434.553732] ? lock_acquire+0x1e4/0x540 [ 434.557724] ? rcuwait_wake_up+0x1a3/0x2f0 [ 434.561972] ? lock_downgrade+0x8f0/0x8f0 [ 434.566946] ? lock_release+0xa30/0xa30 [ 434.570945] ? __free_object+0x173/0x340 [ 434.575044] ? kasan_check_read+0x11/0x20 [ 434.579221] call_rwsem_down_read_failed+0x18/0x30 [ 434.584180] __percpu_down_read+0x16e/0x210 [ 434.588513] ? percpu_free_rwsem+0xa0/0xa0 [ 434.592765] __sb_start_write+0x2d7/0x300 [ 434.596940] ext4_page_mkwrite+0x1d0/0x1430 [ 434.601275] ? ext4_change_inode_journal_flag+0x3e0/0x3e0 [ 434.606828] ? do_wp_page+0xf70/0x19b0 [ 434.610728] do_page_mkwrite+0x14e/0x520 [ 434.614802] ? print_bad_pte+0x5f0/0x5f0 [ 434.618877] ? do_raw_spin_unlock+0xa7/0x2f0 [ 434.623295] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 434.627890] ? __pte_alloc_kernel+0x2e0/0x2e0 [ 434.632394] ? perf_trace_lock+0x920/0x920 [ 434.636650] do_wp_page+0xf78/0x19b0 [ 434.640377] ? finish_mkwrite_fault+0x610/0x610 [ 434.645072] ? trace_hardirqs_on+0x10/0x10 [ 434.649323] ? lock_acquire+0x1e4/0x540 [ 434.653306] ? __handle_mm_fault+0x1cef/0x4480 [ 434.657896] ? lock_release+0xa30/0xa30 [ 434.661877] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 434.666745] ? pmd_val+0x88/0x100 [ 434.670213] ? add_mm_counter_fast+0xd0/0xd0 [ 434.674630] ? kasan_check_write+0x14/0x20 [ 434.678873] ? do_raw_spin_lock+0xc1/0x200 [ 434.683120] __handle_mm_fault+0x2aab/0x4480 [ 434.687541] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 434.692407] ? lock_acquire+0x1e4/0x540 [ 434.696391] ? handle_mm_fault+0x417/0xc80 [ 434.700645] ? lock_downgrade+0x8f0/0x8f0 [ 434.704803] ? lock_release+0xa30/0xa30 [ 434.708786] ? mem_cgroup_from_task+0xcb/0x1f0 [ 434.713383] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 434.718155] handle_mm_fault+0x53e/0xc80 [ 434.722241] ? __handle_mm_fault+0x4480/0x4480 [ 434.726841] ? find_vma+0x34/0x190 [ 434.730399] __do_page_fault+0x620/0xe50 [ 434.734473] ? mm_fault_error+0x380/0x380 [ 434.738633] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.744190] ? __x64_sys_clock_gettime+0x170/0x250 [ 434.749136] ? __ia32_sys_clock_settime+0x290/0x290 [ 434.754163] do_page_fault+0xf6/0x8c0 [ 434.757974] ? vmalloc_sync_all+0x30/0x30 [ 434.762140] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.767688] ? do_syscall_64+0x497/0x820 [ 434.771758] ? syscall_return_slowpath+0x5e0/0x5e0 [ 434.776696] ? syscall_return_slowpath+0x31d/0x5e0 [ 434.781643] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 434.786672] ? prepare_exit_to_usermode+0x291/0x3b0 [ 434.791697] ? page_fault+0x8/0x30 [ 434.795255] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 434.800116] ? page_fault+0x8/0x30 [ 434.803668] page_fault+0x1e/0x30 [ 434.807127] RIP: 0033:0x4084b0 [ 434.810330] Code: 24 1f e9 d2 00 00 00 48 ff c2 48 83 fa 08 0f 83 ad 00 00 00 84 01 0f b6 1c 11 38 d8 75 e9 48 89 54 24 20 48 8b 5c 24 48 0f b6 <73> 50 48 0f af f2 0f b6 5b 51 48 89 cf 48 8d 74 3e 08 84 db 74 7c [ 434.829662] RSP: 002b:00007fff6619c230 EFLAGS: 00010287 [ 434.835052] RAX: 0000001b33623e78 RBX: 0000000000000000 RCX: 0000001b34620000 [ 434.842344] RDX: 0000001b33623e7c RSI: 00000000007319a8 RDI: 0000000000000009 [ 434.849620] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.856903] R10: 00007fff6619c270 R11: 0000000000000246 R12: 0000000000000000 [ 434.864193] R13: 0000000000000002 R14: 000000000072bf48 R15: 000000000072bf48 [ 434.871498] INFO: lockdep is turned off. [ 434.875627] NMI backtrace for cpu 0 [ 434.879303] CPU: 0 PID: 897 Comm: khungtaskd Not tainted 4.18.0-rc3-next-20180709+ #2 [ 434.887262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.896600] Call Trace: [ 434.899177] dump_stack+0x1c9/0x2b4 [ 434.902790] ? dump_stack_print_info.cold.2+0x52/0x52 [ 434.907970] ? vprintk_default+0x28/0x30 [ 434.912043] nmi_cpu_backtrace.cold.5+0x19/0xce [ 434.916752] ? lapic_can_unplug_cpu.cold.28+0x3f/0x3f [ 434.921927] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 434.927188] arch_trigger_cpumask_backtrace+0x14/0x20 [ 434.932361] watchdog+0xb39/0x10b0 [ 434.935887] ? reset_hung_task_detector+0xd0/0xd0 [ 434.940719] ? kasan_check_read+0x11/0x20 [ 434.944847] ? do_raw_spin_unlock+0xa7/0x2f0 [ 434.949239] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 434.954324] ? __kthread_parkme+0x58/0x1b0 [ 434.958547] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 434.963546] ? trace_hardirqs_on+0xd/0x10 [ 434.967688] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 434.973212] ? __kthread_parkme+0x106/0x1b0 [ 434.977514] kthread+0x345/0x410 [ 434.980862] ? reset_hung_task_detector+0xd0/0xd0 [ 434.985683] ? kthread_bind+0x40/0x40 [ 434.989468] ret_from_fork+0x3a/0x50 [ 434.993207] Sending NMI from CPU 0 to CPUs 1: [ 434.997728] NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0x6/0x10 [ 434.998713] Kernel panic - not syncing: hung_task: blocked tasks [ 435.011687] CPU: 0 PID: 897 Comm: khungtaskd Not tainted 4.18.0-rc3-next-20180709+ #2 [ 435.019631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.028969] Call Trace: [ 435.031541] dump_stack+0x1c9/0x2b4 [ 435.035162] ? dump_stack_print_info.cold.2+0x52/0x52 [ 435.040391] ? printk_safe_log_store+0x2f0/0x2f0 [ 435.045143] panic+0x238/0x4e7 [ 435.048317] ? add_taint.cold.5+0x16/0x16 [ 435.052448] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.057968] ? nmi_trigger_cpumask_backtrace+0x13a/0x192 [ 435.063409] ? printk_safe_flush+0xd7/0x130 [ 435.067715] watchdog+0xb4a/0x10b0 [ 435.072198] ? reset_hung_task_detector+0xd0/0xd0 [ 435.077047] ? kasan_check_read+0x11/0x20 [ 435.081177] ? do_raw_spin_unlock+0xa7/0x2f0 [ 435.085571] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 435.090655] ? __kthread_parkme+0x58/0x1b0 [ 435.094884] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 435.099897] ? trace_hardirqs_on+0xd/0x10 [ 435.104039] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 435.109569] ? __kthread_parkme+0x106/0x1b0 [ 435.113873] kthread+0x345/0x410 [ 435.117248] ? reset_hung_task_detector+0xd0/0xd0 [ 435.122070] ? kthread_bind+0x40/0x40 [ 435.125851] ret_from_fork+0x3a/0x50 [ 435.130029] Dumping ftrace buffer: [ 435.133561] (ftrace buffer empty) [ 435.137256] Kernel Offset: disabled [ 435.140866] Rebooting in 86400 seconds..